Originally posted by Ravish Kumar: then url rewriting in used for session.
I prefer to say "url rewriting
can be used for maintaining the session. This is not an automatic process. You often have to turn support for url rewriting on in the configuration settings.
Originally posted by Sandeep Jain:
You cannot do session handling
Yes you can, you can use URL rewriting.
The session is just a way of maintaining state over a stateless protocol. If you are prepared to handle it yourself and not use the mechanism provided by the container, then (as William said) hidden variables also work fine.
Dave