Win a copy of Functional Reactive Programming this week in the Other Languages forum!
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

Session question

 
Stephen Wei
Ranch Hand
Posts: 73
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi I have a stupid question.
Does Session continue when access a different web server in a different site?
The think I am worrying is that: what if someone creates a jsp page on the local web server, then creates a session and all the input variables in it, then can he access to my servlet on my server with out login? I plan to use my login.jsp to create a session, then add "user" attribute to the session, then all my servlet and Jsp will check for the "user" Session attribute, if null, return to the login.jsp.
But can someone creates the session and session attribute on his own server, then access my servlet without login?
Thanks!
 
Eric lau
Greenhorn
Posts: 27
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
No problem,session is maintained by the web server,if he did not log in ,he cant pass your check with his session on his web server!
 
Stephen Wei
Ranch Hand
Posts: 73
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hello Mr Liu HongWei!
Thanks for your answer, that really helps. Now I can continue with my current approach.
Stephen Wei
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic