« Return to Thread: Preventing tomcat from creating sessions

Re: Preventing tomcat from creating sessions

by Leon Rosenberg-3 :: Rate this Message:

Reply to Author | View in Thread

On Wed, May 14, 2008 at 7:34 PM, Christopher Schultz
<chris@...> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> public class SessionKillingRequest
> ~   extends HttpServletRequestWrapper
> {
> ~  public SessionKillingRequest(HttpServletRequest request)
> ~  {
> ~    super(request);
> ~  }
>
> ~  public HttpSession getSession(boolean create)
> ~  {
> ~    if(create)
> ~    {
> ~      new Throwable("Attempted session creation").printStackTrace();
> ~    }
> ~    return null;
> ~  }
> }
>

the getSession() call without parameters also creates a new session.

regards
Leon

---------------------------------------------------------------------
To start a new topic, e-mail: users@...
To unsubscribe, e-mail: users-unsubscribe@...
For additional commands, e-mail: users-help@...

 « Return to Thread: Preventing tomcat from creating sessions