Closing browser clicking on close button.
S Babs
Greenhorn
Posts: 18
posted 14 years ago
How do invalidate the HttpSession object in servlet, when i accidently close the browser using close button, without logging out?
urgent please....
urgent please....
Ron Newman
Ranch Hand
Posts: 1056
Benny Tang
Greenhorn
Posts: 26
Nikki Aniban
Greenhorn
Posts: 14
posted 14 years ago
Hi!
When you click the close button of a browser, the onUnload function is automatically called. So you can define something like this in your HTML
<body onUnload="invalidateSession()">
But there is a catch to this. The onUnload is called whenever the user leaves your page. So if the user simply clicks on a link or submits a form, his session will also be invalidated! Luckily for you, a really good hacker found a workaround for this problem.
But if you ask me, I would go with Ron's suggestion to just let the session timeout do its thing. Hope this helps!
- Nikki
When you click the close button of a browser, the onUnload function is automatically called. So you can define something like this in your HTML
<body onUnload="invalidateSession()">
But there is a catch to this. The onUnload is called whenever the user leaves your page. So if the user simply clicks on a link or submits a form, his session will also be invalidated! Luckily for you, a really good hacker found a workaround for this problem.
But if you ask me, I would go with Ron's suggestion to just let the session timeout do its thing. Hope this helps!
- Nikki
Malli Raman
Ranch Hand
Posts: 312
Dana Hanna
Ranch Hand
Posts: 227
posted 14 years ago
As pointed out in the above posts, the session is not really invalidated. It stays in memory until it expires. However, it is "invalidated" from the user's point of view in that the user cannot access the session ever again. Opening a new browser window will get a different session.
I agree session timeout is a good option. But i heard that if browser closes it will automatically invalidate that session. Isn't true in this case?
As pointed out in the above posts, the session is not really invalidated. It stays in memory until it expires. However, it is "invalidated" from the user's point of view in that the user cannot access the session ever again. Opening a new browser window will get a different session.
[OCA 8 book] [OCP 8 book] [Practice tests book] [Blog] [JavaRanch FAQ] [How To Ask Questions] [Book Promos]
Other Certs: SCEA Part 1, Part 2 & 3, Core Spring 3, TOGAF part 1 and part 2
