session tracking

最新推荐文章于 2017-01-13 09:55:57 发布

最新推荐文章于 2017-01-13 09:55:57 发布 · 81 阅读

文章标签：

#Web #XML

本文介绍了Web开发中常用的会话跟踪技术，包括传统的用户认证、隐藏表单字段、URL重写及持久化Cookie等方法，并详细解释了如何设置会话超时、使用URL重写进行会话跟踪、绑定会话事件监听器等内容。

1.Traditional Ways to perform session tracking: User Authentication(getRemoteUser() ); Hidden Form Fields(<input type=hidden name="..." value="...">); URL Rewriting( some use java.rmi.server.UID().toString() to dentify unique one); Persistent Cookie.

2. Sessions are scoped at the web Application level.

3. setting the session timeout: in web.xml:<session-config> <session-timeout> value </session-timout> </session-config>. HttpSession.setMaxInactiveInterval(int secs) secs<0means never time outm

4. URL rewriting session tracking: HttpServletResponse.encodeURL(String url); HttpServletResponse.encodeRedirectURL(String url); HttpServletResponse.isRequestedSesssionIdValid();

5.session binding: session.addAttribute(key, new HttpSessionBindingListener());

HttpSessionBindingListener.valueBound()&HttpSessionBindingListener.valueUnbound() involk when bind&unbind