By Ramakrishna on Sep 20, 2008 in Session Tutorials | 0 Comments
Question: What is session hijacking? Answer: If you application is not very secure then it is possible to get the access of system after acquiring or generating the authentication information. Session hijacking refers to the act of taking control of a user session after successfully obtaining or generating an authentication session ID. It involves an [...]
By Ramakrishna on Sep 8, 2008 in Session Tutorials | 0 Comments
Sessions in Servlets The following examples show the newer session tracking API in use within Servlets. The first time a user runs the “Barman” servlet, it sets up a session for him and prompts for his name. On subsequent visits, it addresses him by name straight away, and also keeps a tally of how many [...]
By Ramakrishna on Sep 8, 2008 in Session Tutorials | 0 Comments
Servlet Session Example /* * Copyright 2004 The Apache Software Foundation * * Licensed under the Apache License, Version 2.0 (the “License”); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law [...]
By Ramakrishna on Sep 7, 2008 in Session Tutorials | 0 Comments
what is stateless Refers to software that does not keep track of configuration settings, transaction information or any other data for the next session. When a program “does not maintain state” (is stateless) or when the infrastructure of a system prevents a program from maintaining state, it cannot take information about the last session into [...]