Maintaining user logins

[Guy Belpa]

Helo all,

I'm developing a web based billing system where i need high security.

I m using Struts in Sun-glass fish server V2.

Here is my prob,
i want to maintain user sessions.
i hav already develop login page where i checked the user name and passwords with DB.

But i need to DO sign out option and session time-out when user set idle ...

Thanks in advance..

[David Newton]

Logging out is simply a matter of removing the user object from session.

If the session times out there won't be a user in the session anyway.

This isn't really Struts-related; it's more of a JEE thing.

[Guy Belpa]

thanks for quick reply..

but what realy i want to know is ,

how to handle sitation where user forgets to click 'SignOut'..
then anyone who use same browser can log using history..

isn't it?

[David Newton]

Sessions expire automatically (usually) depending on how your server is configured. That is still not a Struts issue, however.