Originally posted by Ken Flor:
Hi,
just wonder, whenever i use encodeURL in my form action in a servlet page, the url of the return page will have the jsessionid, parameters etc.
However, I do not want to let people see the session id etc.
But i search net and was told that it was recommended to use encodeURL.
Please advise.
thanks.
Whenever you use encodeURL for tracking session , then you will always find the jsessionid appended to the URL's.Please note that this is an alternate way to track session ,if your clients are not cookie enabled.
If cookied are enabled then use HTTPSession to track session.That is easy ,untill your requirement is to do this using encodeURL.