Session ID in URL - Why ?

I may have read it somewhere but forgot...
HTML DB reads the session cookie on every single request, correct ?
So why is Session ID in URL necessary really ??? since that value is already in the cookie.

ah,
Scott explained it here
Why is SESSION used in the URL?

Similar Messages

Problem passing Session variable as URL parameter?

Hi,
I am trying to create a multiple page entry form using
coldfusion session. But I am having some problem when passing the
session variable to url parameter. For test purpose I have created
the following code:
<cfif Not IsDefined("SESSION.AE")>

<cfset SESSION.AE = StructNew()>

<cfset SESSION.AE.StepNum = 1>
</cfif>
<cfif IsDefined("Form.GoBack")>
<cfset SESSION.AE.StepNum = #url.StepNum# - 1>
<cfelseif IsDefined("Form.Next")>
<cfset SESSION.AE.StepNum = #url.StepNum# + 1>
</cfif>
<html>
<head>
<title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html;
charset=iso-8859-1">
</head>
<body>
<form method="post"
action="/AE/try.cfm?StepNum=#SESSION.AE.StepNum#">
<input type="submit" name="GoBack" value="Back">
<input type="submit" name="Next" value="Next">
</form>
</body>
</html>
When run it I get the following error:
The value "" cannot be converted to a number
The error occurred in C:\CFusionMX\wwwroot\AE\try.cfm: line
11
9 : <cfset SESSION.AE.StepNum = #url.StepNum# - 1>
10 : <cfelseif IsDefined("Form.Next")>
11 : <cfset SESSION.AE.StepNum = #url.StepNum# + 1>
12 : 
13 : </cfif>
I couldn't figure out where is the problem. Any help is
really appreciated.
Thanks in advance.

You are mixing up your gets and posts aren't you?
You have your form method set to post which creates form
variables not
url variables. So when you try to use the url variable to set
your
session it does not exist.
Change your SESSION.AE.StepNum = #url.StepNum# to
Session.AE.StepNum =
form.StepNum, note there is no need for the #'s.
OR
change your form method="post" to form method="get"
Nagelia wrote:
> Hi,
>
> I am trying to create a multiple page entry form using
coldfusion session. But
> I am having some problem when passing the session
counter to url parameter. For
> test purpose I have created the following code:
>
> <cfif Not IsDefined("SESSION.AE")>
> 
> <cfset SESSION.AE = StructNew()>
> 
> <cfset SESSION.AE.StepNum = 1>
> </cfif>
> <cfif IsDefined("Form.GoBack")>
> <cfset SESSION.AE.StepNum = #url.StepNum# - 1>
> <cfelseif IsDefined("Form.Next")>
> <cfset SESSION.AE.StepNum = #url.StepNum# + 1>
> </cfif>
>
> <html>
> <head>
> <title>Untitled Document</title>
> <meta http-equiv="Content-Type" content="text/html;
charset=iso-8859-1">
> </head>
> <body>
> <form method="post"
action="/AE/try.cfm?StepNum=#SESSION.AE.StepNum#">
> <input type="submit" name="GoBack" value="Back">
> <input type="submit" name="Next" value="Next">
> </form>
> </body>
> </html>
>
> When run it I get the following error:
>
> The value "" cannot be converted to a number
>
>
> The error occurred in C:\CFusionMX\wwwroot\AE\try.cfm:
line 11
>
> 9 : <cfset SESSION.AE.StepNum = #url.StepNum# - 1>
> 10 : <cfelseif IsDefined("Form.Next")>
> 11 : <cfset SESSION.AE.StepNum = #url.StepNum# +
1>
> 12 : 
> 13 : </cfif>
>
> I couldn't figure out where is the problem. Any help is
really appreciated.
>
> Thanks in advance.
>
>
>
>

Is it possible to pass nQuireID (session ID) via URL ?

is it possible to pass nQuireID (session ID) via URL?
(how to get the session id ?)
therefore, we dont need to pass the userid and password. (embedded in the URL)

Ummm you can't get a session ID unless you login first, chicken and egg problem? Have you looked at implementing SSO? That's the proper way of solving integration issues, hard-coding the user ID and the password on the URL is a nasty and insecure "hack"...

Alternatives for HTTP Session(Cookies or URL Reqriting)

Sir/Madam,
Actually we can handle session using (1) URL rewriting and (2) Cookies , apart from this is there any way to handle sessions ? If so what are they ?.
Thanks and Regards
- Raja.

Of course... You could use (1) Cookies and (2) URL rewriting, as an alternative.
Or you could write your own JSP/servlet engine and require all pages to be forms that have the session ID in them or whatever other custom hair-brained idea you wanted.

Force passing session id in url

Hello. I need to pass session id (jsessionid) in only url, not in cookies even if cookies are on (accepted). Is it possible?
I use jboss and struts. Is there any option in xml files?

ah,
Scott explained it here
Why is SESSION used in the URL?

Page 404 Error when passing Session values through URL

The current application I'm working on is a 'Targeted Email Communications' application. Bascially, employees at the school at which I'm employed can go in and select services to recieve outage notification emails on.
The problem I'm discussing in this post has to do with our so called 'Notification Summary Screen.' This screen is basically a report region which displays all outage notifications issued by this application. In the left-most column of this report, I have an edit button that when clicked, redirects the user to the 'Create / Update / Send Screen' with the primary key values passed through the URL. When this happens, all other page items query their values based on the NOTIF_ID passed in through the URL. All of this works fine.
The problem is, on the Notification Summary Screen, I also have a button labeled 'Create a new notification.' This button redirects the user to the same page as before, except now all of the values are NULL because this outage notification has not yet been created. The problem is, when I try and do this - I get a page 404 not found error. I'm pretty sure it's because my application is getting confused because earlier all of the values were passed in through a URL. For the 'Create New' button, I clear the page cache for this page - and it still does nothing. I am at a loss for what to do here because I keep getting the error.
Here's the code for the URL button found in the report query in the 'Notification Summary Screen' :
('<a href='
          || 'f?p=&APP_ID.:2:&SESSION.::&DEBUG.::'
          || 'P2_NOTIF_ID,P2_NOTIF_SEQ,P2_INFO_TYPE:'
          || a.notif_id ||','|| b.notif_seq || ',' || 'Update'
          || '>'
          || '<img src="#APP_IMAGES#EditButton.gif" />'
          || '</a>') as "edit",** NOTE, I took out the double quotes after href and before the closing right karat brackets because for some reason the code in the URL wouldn't display...weird.... **
The NOTIF_ID value is the primary key identifier for each outage notification. Additionally, the NOTIF_SEQ value is the sequence number for each (because each notification could have multiple updates). The INFO_TYPE value just references whether this is 'Initial', 'Updated', or 'Closing' information.
Any suggestions would be much appreciated.
Eric
Edited by: user11685190 on Nov 6, 2009 1:12 PM
Edited by: user11685190 on Nov 6, 2009 1:13 PM
Edited by: user11685190 on Nov 6, 2009 1:14 PM

Hey you guys,
Thanks for your responses. I actually just started working for this academic institution, and have to finish a probationary period before I have access to their VPN (5 Months). Therefore, I cannot access my workspace, nor will they allow me to export my application because it's considered their intellectual property. I believe it may be the &DEBUG portion of it.
Though I cannot state the exact URL the error states, I can tell you that if I go into application builder to the page in question and try and run it before the page that links to it, I get the error. However, when I use the link everything works fine. When I use the 'Create New' button to link to the page with no values passed, I get the error again. I work again on Monday and will have more information then.
Thanks again!
Eric

No session id in URL ?

I constructed a URL with the app id, page id, etc. substitution strings like the following:
f?p=&APP_ID:5:::::
and notice that I don't include the session id subsitution variable. When I click on the link, HTMLDB renders the page correctly but I noticed that it in the address bar, the URL contains a session id. I noticed on asktom.oracle.com, the "GOTO a Bookmarkable Page" links don't behave this way. How do I prevent the session id from showing up in the address bar?
Thanks in advance!

Jes,
The home page attribute is used when you run an application and don't specify a page ID in the URL, or when you use the Builder's run icon for the app. In those cases, if the home link contained the login page as the page ID, the engine would redirect to the login page. If the home page is not the login page the engine would redirect to the home page and then, if that page required authentication, it would immediately show the login page (without a redirect). Then after authentication, the after-login page is redirected to according to the authentication scheme's logic.
So in that situation, doing what you said is a slightly more direct way of getting to the login page. However, an advantage of specifiying the real home page in the home page attribute is that if you change authentication methods from one that uses a login page to single sign-on, you don't have to remember to change the home page attribute. As well, if the home page does not require authentication (is public), there is no redirect to the login page when the home page attribute is used.
Scott

Session management in URL reporting

Hi,
I have problems with the session management while calling reports from our own web-app.
We host our reports (.rpt) on a CrystalReportsServer 2008 running on a Tomcat. This CRS is configured with 20 CAL (ConcurrentAccess Licences).
On the other side, our Intranet, running on another Tomcat.
Our Intranet provides UI allowing users to determine the parameters that will be passed to reports. For some reasons we do not want to use InfoView now but keep using our own UI to call reports. The idea was then to call them through OpenDocument (or viewrpt.cwr) passing parameters in the URL.
In our Web-app, I authenticate the user to the CRS, retrieving an IEnterpriseSession. I then get a token for my calls to OpenDoc. But then, each time I call OpenDoc, a new CAL is picked out. Even if I logoff, only one CAL (the one belonging to my IEnterpriseSession) is given back.
As our users often open and close lots of reports, we run very quickly out of CAL, although the reports are now closed and the user gone.
I thought using a token would have allowed us to consume only 1 CAL per user, using the same CAL for the different calls.
Is my reasoning wrong or is it my code..?

When creating the token , use "CreateWCAtoken" function this will not increse the session count in CRS.
You might be using CreateLogonToken function
Arguments passed to these two functions are same.

Portal URL: Why cannot access via IP address?

When I try to access portal web with IP address, the tree navigation in browse area always shows blank or keep show "loading...".
But after I access the same URL but change it to domain name address, the tree navigation shows correctly.
Could you please explain what is the setting behind this?
Why in some environment we can access directly from IP address?
Thanks !

Hi Erika
you need to update your host file with your EP server host name and IP address
this host file is present in c:/windows/system32/drivers/etc/hosts
open this host file with notepad
and at the bottom give the values like this
<IP address of your EP Server> <EP Server Host Name>
Note:: you need to provide this settings under EP server host--c:/windows/system32/drivers/etc/hosts
Rgds
Srinivas

Suppress the session data in URL display

we have afrLoop=401202924205955&afrWindowMode=0&_adf.ctrl-state=zpx91q8vg_4 appended to the url
http://host1.example.com/sbat_int/faces/Main.jspx?_afrLoop=401202924205955&_afrWindowMode=0&_adf.ctrl-state=zpx91q8vg_4
We want to show only this part:
http://host1.example.com/sbat_int/faces/Main.jspx
in the browser window
where should the changes be made?
Thanks
Prashanth

Prashanth,
These are used to maintain the state of the application (request etc). Any specific reason why do you want to remove them? As John mentioned, you cannot remove them.
-Arun

Session Timeout and Url Redirect in BlazeDS?

We have a JSF2 Webapp and Flex 4 integreated.
Question
1. How can we pass the parameters in web.xml to make FLEX4 redirect to login page when the session timeouts instead of giving a AMF Communication Error?
Thanks,
User.

hi, i am also struggling with the same problem, have you got any solution

If I want to open the same website in a second tab and press Ctrl+T and start typing the website title or URL, why does Firefox 4 insist on switching to the first tab? Is it possible to turn this off?

I regularly need to open the same website in two tabs, to be able to view changes made between opening the first and second tabs. In Firefox 3.x I could press Ctrl+T and start typing the website title or URL, which would be auto-completed by Firefox. This enabled me to quickly open the same website in a second tab. Firefox 4 does not do this, instead it wants me to switch to the existing tab. This is not what I need.
Of course it is possible to open the same website in a second tab via e.g. a bookmark, but this takes more time and effort. It would be great if I could select Firefox's behavior in this situation.

To create a duplicate of an existing tab in Firefox 4, do one of the following:
*middle-click the icon on the left end of the URL/Location/Address Bar
*hold down the Ctrl key and drag the tab until a small arrow appears at the border between tabs, then release the mouse button, then release the Ctrl key.
<br />
<br />
You have multiple Java Console extensions because Java did not clean up after itself when updating; Firefox button > Add-ons > Extensions OR, using the Menu Bar, Tools > Add-ons > Extensions:
*Java Console 6.0.17, Java Console 6.0.19, Java Console 6.0.20, Java Console 6.0.21, Java Console 6.0.22, Java Console 6.0.23
Using the instructions here:
*http://kb.mozillazine.org/Firefox_:_FAQs_:_Install_Java#Multiple_Java_Console_extensions
you can delete the following folders:
*{CAFEEFAC-0016-0000-00'''''17'''''-ABCDEFFEDCBA}
*{CAFEEFAC-0016-0000-00'''''19'''''-ABCDEFFEDCBA}
*{CAFEEFAC-0016-0000-00'''''20'''''-ABCDEFFEDCBA}
*{CAFEEFAC-0016-0000-00'''''21'''''-ABCDEFFEDCBA}
*{CAFEEFAC-0016-0000-00'''''22'''''-ABCDEFFEDCBA}
*{CAFEEFAC-0016-0000-00'''''23'''''-ABCDEFFEDCBA}
You can leave {CAFEEFAC-0016-0000-00'''''24'''''-ABCDEFFEDCBA}
<br />
<br />
'''You need to update the following:'''
*Adobe Shockwave for Director Netscape plug-in, version 11.5
*Adobe PDF Plug-In For Firefox and Netscape "9.3.3"
*Shockwave Flash 10.2 r152
#'''''Check your plugin versions''''' on either of the following links':
#*http://www.mozilla.com/en-US/plugincheck/
#*https://www-trunk.stage.mozilla.com/en-US/plugincheck/
#*'''Note: plugin check page does not have information on all plugin versions'''
#*There are plugin specific testing links available from this page:
#**http://kb.mozillazine.org/Testing_plugins
#'''Update Shockwave for Director'''
#*NOTE: this is not the same as Shockwave Flash; this installs the Shockwave Player.
#*Use Firefox to download and SAVE the installer to your hard drive from the link in the article below (Desktop is a good place so you can find it).
#*When the download is complete, exit Firefox (File > Exit)
#*locate and double-click in the installer you just downloaded, let the install complete.
#*Restart Firefox and check your plugins again.
#*'''<u>Download link and more information</u>''': http://support.mozilla.com/en-US/kb/Using+the+Shockwave+plugin+with+Firefox
#'''Update Adobe Reader (PDF plugin):'''
#*From within your existing Adobe Reader ('''<u>if you have it already installed</u>'''):
#**Open the Adobe Reader program from your Programs list
#**Click Help > Check for Updates
#**Follow the prompts for updating
#**If this method works for you, skip the "Download complete installer" section below and proceed to "After the installation" below
#*Download complete installer ('''if you do <u>NOT</u> have Adobe Reader installed'''):
#**SAVE the installer to your hard drive (save to your Desktop so that you can find it after the download). Exit/Close Firefox. Run the installer you just downloaded.
#**Use either of the links below:
#***https://support.mozilla.com/en-US/kb/Using+the+Adobe+Reader+plugin+with+Firefox ''(click on "Installing and updating Adobe Reader")''
#***''<u>Also see Download link</u>''': http://get.adobe.com/reader/otherversions/
#*After the installation, start Firefox and check your version again.
#'''Update the [[Managing the Flash plugin|Flash]] plugin''' to the latest version.
#*Download and SAVE to your Desktop so you can find the installer later
#*If you do not have the current version, click on the "Player Download Center" link on the "'''Download and information'''" or "'''Download Manual installers'''" below
#*After download is complete, exit Firefox
#*Click on the installer you just downloaded and install
#**Windows 7 and Vista: may need to right-click the installer and choose "Run as Administrator"
#*Start Firefox and check your version again or test the installation by going back to the download link below
#*'''Download and information''': http://www.adobe.com/software/flash/about/
#**Use Firefox to go to the above site to update the Firefox plugin (will also install plugin for most other browsers; except IE)
#**Use IE to go to the above site to update the IE ActiveX
#*'''Download Manual installers'''.
#**http://kb2.adobe.com/cps/191/tn_19166.html#main_ManualInstaller
#**Note separate links for:
#***Plugin for Firefox and most other browsers
#***ActiveX for IE

Use SESSION variable in URL from HTML region

Hello,
I have what looks like a simple question but i've been struggling with it for three days now, and i need your help!
I have a page, with an HTML region. I want to display some links to other pages within the application, so i thought i'd use this:
a href="http://server.xxxx.com:7777/pls/htmldb/f?p=114:13:&SESSION"
But the session ID is not interpreted, and the link doesn;t work. Any idea what's wrong here? or how i should create links with the session id in it?
Thanks!!!! Matt
Message was edited by:
matt_amsterdam

Matt,
You've missed off the period (.) off the end, use &SESSION. instead

TS1424 Message saying...Connection Manager invoke failed to find service connection URL why?

When I go to sign in it iTunes a message comes up stating: Connection Manager::invoke::Failed to find service connection url. Does anyone know what this means and how to fix this issue?

Check over on the right side of the thread here under More Like This. Look for one that has a green checkmark which means it is answered. I have read of this however, I do not know how to solve it. It seems as though it is one particular carrier this happens to.

XML Content is loading in URL - why?

The content of XML file i am calling is loading into the URL
when i getURL and i wish to trim it or simply get rid of the
content and keep the url

Bhaskar,
Go to Content Admin -> Portal Content Transition -> Transition Worklist coordination -> Select the content what you are displaying in the Content Area i.e Iviews or pages.
Here in the portal content create WorkList by righr clciking on some folder.
here add the portal content to this worklist.
After that generate the Transition Data. A button for this will be in the top left.
Then relaese for transition.
Here then Search worklist and define the source and target languages.
Then load the worklist for transiton .
Then transulate the worklist
Then mark the workklist as transulated
Then the final step is Publish Transition.
Thanks
Raju Bonagiri

Session ID in URL - Why ?

Similar Messages

Maybe you are looking for