Logout

Question

I'm trying to invalidate a session when a user logs out; however, what I am doing now is not working. I am using the following code to start the session in a login.java:
HttpSession session = request.getSession(true);
session.setAttribute("user", username); This is my logout file:
import java.sql.*;
import java.io.*;
import oracle.jdbc.*;
import javax.servlet.*;
import javax.servlet.http.*;
public class logout extends HttpServlet
    public void doGet(HttpServletRequest request, HttpServletResponse response)
        throws ServletException, IOException
     // Destroy the user's session
     request.getSession().invalidate();
     // And redirect the user's browser to homepage
     response.sendRedirect("http://www.itc.edu.kh/fr/");     
    // doPost invokes doGet
    public void doPost(HttpServletRequest request,HttpServletResponse response)
        throws ServletException, IOException
     doGet(request, response);
}Any help would be appreciated. Thanks.

Answer 1

HttpSession session = request.getSession(false);  //returns a session object only if exists
session.removeAttribute("user"); //overkill :)
session.invalidate();However your code would work too.
You should perhaps tell us why you think it isnt doing so.
ram.