URL Rewriting Question

I am writing a servlet which needs to keep track of session id, session creation time, and last accessed time. It should also invalidate the session if the max inactive interval is exceeded. This should be easy to do with HttpSession. However, I have to deal with the situation that the client doesn't accept cookies, so I have to use URL rewriting.
Could anyone tell me what's the best way to implement this? I appreciate your help.

Hi
You can find all servlet documentation throught the link: http://java.sun.com/j2ee/docs.html
Look for the Java 2 SDK, Enterprise Edition, API docs
The "encodeURL" NB. Capital letters URL, takes a URL that shall be encoded and (if needed) adds the session ID, the returned string is an URL that you put in the '' statement. You do not need to do anything on the client side, If they have disabled cookies you will problaby get troubles with Java and javascript to... what this thing does is add a note that tells the webserver to which session each call belongs.
Hope this helps
//Samuel

Similar Messages

  • IIS 7.5 URL Rewrite: Hit specific page of a web application but should be redirected to another application's page

    I have deployed 2 different web application on IIS 7.5 running on Windows Server 2008 R2 but on different port numbers i.e. one application deployed on port no. 1776 and another on 8091. I want to rewrite URL in such a way that if i hit any page of first
    application such as default.aspx then it will be redirected to particular page of another application along with some changes in url.
    Example: if i access any page from first application like:
    http://g2wv126rbsc:1776/sites/main/commercial/commercial-solutions/financing/default1.aspx
    then it should redirect to specific page of another application along with some changes in url:
    http://g2wv126rbsc:8091/main/commercial/commercial-solutions/financing/default2.aspx
    Note: In above mentioned url, also removed "sites".
    I tried to create a inbound rule through URL Rewrite module (installed on IIS 7.5) by selecting Action as "Rewrite" but didn't find any success.
    I need some examples if anyone has come across same kind of issue.
    Thanks in advance.

    Please post ASP.NET questions in the ASP.NET forums (http://forums.asp.net ).

  • IIS Reverse Proxy with URL rewrite.

    Hi all, hoping to leverage the wealth of knowledge contained here.
    Any assistance would be very welcome.
    I'm having an issue getting a reverse proxy and URL rewrite working in IIS 7.0.
    I need to redirect all requests with a specific virtual directory suffix only.
    ie; https://domain.test.com/outbound/Content/query_etc
    With /Outbound/ being the trigger.
    This should be redirected to http://10.10.10.10/inbound/Content/query_etc
    While at the same time, requests without the /outbound/ suffix should be handled locally.
    I have configured the reverse proxy as described in a few articles, and have had no luck.
    Here's a snippet from my (sanitized) web.config at the site level.
    <rewrite>
    <outboundRules>
    <rule name="ReverseProxyOutboundRule1" preCondition="ResponseIsHtml1">
    <match filterByTags="A" pattern="^http(s)?://10.10.10.10/inbound/(.*)" />
    <action type="Rewrite" value="https://domain.test.com/outbound/{R:2}" />
    </rule>
    <preConditions>
    <preCondition name="ResponseIsHtml1">
    <add input="{RESPONSE_CONTENT_TYPE}" pattern="^text/html" />
    </preCondition>
    </preConditions>
    </outboundRules>
    <rules>
    <rule name="ReverseProxyInboundRule1" stopProcessing="true">
    <match url="^outbound/(.*)" />
    <action type="Rewrite" url="http://10.10.10.10/inbound/{R:1}" appendQueryString="true" logRewrittenUrl="false" />
    </rule>
    </rules>
    </rewrite>
    To me, this looks correct, yet it doesn't work.
    With this, I get the normal 404 - Error Code 0x80070002, with the text indicating the local directory doesn't exist, so.... not being picked up by the filter for redirection.

    Hi Andrew,
    Looking at your requirements it appears you need Reverse Proxy To Another Site/Server.
    By using URL Rewrite Module together with
    Application Request Routing module you can have IIS 7 act as a
    reverse proxy.
    It seems like URL Rewrite can't re-route the request somewhere else out of the server.
    Even when you rewrite the url the actual connection remains with the server. Hence if your original server doesn't have /inbound/Content/query_etc  it will fail with 404.
    Hosting multiple domain names under a single account using URL Rewrite.
    It’s a common desire to have a single IIS website that handles multiple sites with different domain names.
    References:
    How to create a url alias using IIS URL Rewrite:
    http://blogs.technet.com/b/mspfe/archive/2013/11/27/how-to-create-a-url-alias-using-iis-url-rewrite.aspx
    Reverse Proxy with URL Rewrite v2 and Application Request Routing:
    http://www.iis.net/learn/extensions/url-rewrite-module/reverse-proxy-with-url-rewrite-v2-and-application-request-routing
    Regards,
    Satyajit
    Please“Vote As Helpful”
    if you find my contribution useful or “MarkAs Answer” if it does answer your question. That will encourage me - and others - to take time out to help you.

  • URL Rewrite Rule: HTTP to HTTPS Not Working

    Here is my problem. I cannot get HTTP to HTTPS redirect to work using the URL Rewrite module. I am using version 2, by the way, which I understand is the latest version. I've also enabled the "Proxy Server" and Application Request Routing"
    features.
    I've trolled through the Internet for 2 days now for solutions to my problem, including the ones provided by the TechNet forums and by MVP Scott Forsyth. I've tried over 30 solutions, and none have resolved my issue. Granted some of the solutions I've tried
    may have been repeats of others. After trying so many, I have had a hard time discerning the differences. Does it really matter, for instance if the pattern match for the {HTTPS} input is specified as
    "^off$" or just "off"? I see this discrepancy (among others) everywhere. It seems like there are so many variations out there. It is quite confusing for the uninitiated and the newbies like myself to the
    URL Rewrite technology. I have enabled and consulted my "Failed Request Tracing Rules" logs but cannot make any sense of the cryptic information it is providing.
    I just cannot get my reverse proxy server to redirect http requests from the Internet to https to my internal web server. When a user specifies "https://server1.xxxxx.com". he is able to access the internal server via the reverse proxy (IIS) server.
    But when he specifies "http://server1.xxxxx.com" he receives "Server Error 500 - Internal server error.There is a problem with the resource you are looking for, and it cannot be displayed."
    At this point I am at my wits end, and am even considering configuring the protocol translation on our firewall. But this not my preference as it presents another layer of complexity, and device to troubleshoot later on. Below I've pasted my entire web.config
    file with my most current version of the rule in question (in bold) for your review. I started to paste just the specific rule, but thought you might need to see the entire file in case something else may be conflicting with the rule.
    Thank you in advance for your help.
    Dave Robinson
    <?xml version="1.0" encoding="UTF-8"?>
    <configuration>
        <system.webServer>
            <rewrite>
                  <rules>
                    <clear />
    <rule name="HTTP to HTTPS Redirect" enabled="true" stopProcessing="true">
                    <match url="(.*)" />
                   <conditions>
                      <add input="{HTTPS}" pattern="off" />
                    </conditions>
                      <action type="Redirect" url="https://{HTTP_HOST}/{REQUEST_URI}" redirectType="Found" />
                    </rule>
    <rule name="ReverseProxyInboundRule1" stopProcessing="true">
                        <match url="(.*)" />
                        <conditions logicalGrouping="MatchAll" trackAllCaptures="false">
                            <add input="{CACHE_URL}" pattern="^(https?)://" />
                        </conditions>
                        <serverVariables>
                            <set name="HTTP_X_ORIGINAL_ACCEPT_ENCODING" value="{HTTP_ACCEPT_ENCODING}" />
                            <set name="HTTP_ACCEPT_ENCODING" value="" />
                    </serverVariables>
                        <action type="Rewrite" url="{C:1}://server1.xxxxx.com/{R:1}" />
                    </rule>
                </rules>
                <outboundRules>
                    <rule name="RestoreAcceptEncoding" preCondition="NeedsRestoringAcceptEncoding">
                    <match serverVariable="HTTP_ACCEPT_ENCODING" pattern="^(.*)" />
                    <action type="Rewrite" value="{HTTP_X_ORIGINAL_ACCEPT_ENCODING}" />
                    </rule>
                    <rule name="ReverseProxyOutboundRule1" preCondition="ResponseIsHtml1">
                        <match filterByTags="A, Form, Img" pattern="^http(s)?://server1.xxxxx.com/(.*)" />
                        <action type="Rewrite" value="http{R:1}://server1.xxxxx.local/{R:2}" />
                    </rule>
                    <preConditions>
                        <preCondition name="ResponseIsHtml1">
                            <add input="{RESPONSE_CONTENT_TYPE}" pattern="^text/html" />
                        </preCondition>
                        <preCondition name="NeedsRestoringAcceptEncoding">
                            <add input="{HTTP_X_ORIGINAL_ACCEPT_ENCODING}" pattern=".+" />
                        </preCondition>
                    </preConditions>
                </outboundRules>
            </rewrite>
            <tracing>
                <traceFailedRequests>
                    <add path="*">
                        <traceAreas>
                            <add provider="ASP" verbosity="Verbose" />
                            <add provider="ISAPI Extension" verbosity="Verbose" />
                            <add provider="WWW Server" areas="Authentication,Security,Filter,StaticFile,CGI,Compression,Cache,RequestNotifications,Module,FastCGI,WebSocket"
    verbosity="Verbose" />
                        </traceAreas>
    <failureDefinitions timeTaken="00:00:00" statusCodes="404" />
                    </add>
                </traceFailedRequests>
            </tracing>
            <httpErrors errorMode="Custom" />
            <httpRedirect enabled="false" destination="" exactDestination="false" childOnly="false" httpResponseStatus="Permanent" />
        </system.webServer>
    </configuration>

    On Wed, 28 Jan 2015 17:53:41 +0000, dwrobins2000 wrote:
    Here is my problem. I cannot get HTTP to HTTPS redirect to work using the URL Rewrite module. I am using version 2, by the way, which I understand is the latest version. I've also enabled the "Proxy Server" and Application Request Routing"
    features.
    Web/IIS related issues are better posted where the IIS experts are:
    http://forums.iis.net
    Paul Adare - FIM CM MVP
    "The equivalent of treating dandruff by decapitation"
    -- Frank Zappa on the Parents Music Resource Center' censorship plans

  • URL Rewrite Rules in 10.1.4

    Hi,
    I am having some trouble rewriting the urls, I can't make it work ...
    What I want is to change the url:
    http://www.mycompany.com/portal/page/portal/portal_sverige/
    to
    http://www.mycompany.com/sverige
    Where "portal_sverige" is the page group.
    What I did was:
    Configure the properties in the page group:
    Search pattern: /portal/page/portal/portal_sweden/
    Replace pattern: /sweden/
    And I went to enterprise manager, MT, http server, administration, advanced server properties, httpd.conf, and put in the lines:
    RewriteEngine On
    RewriteRule ^/sweden/(.*)$/portal/page/portal/portal_sweden/$1 [PT]
    However, when I try to use navigator to edit a page in that group, I get:
    http://www.mycompany.com/sweden/pagename?_mode=16
    Returns:
    Object not found. (WWC-50003)
    And just typing in www.mycompany.com/sweden returns 404 error instead of the root page as I would have liked.
    Any ideas about what to do? I can't really find any information ... is the change made in the MT ? IM ? Do I have to do it in some specific order? Is the syntax wrong?
    Appreciate any help, thanks

    Hello Sayeeas,
    I posted an answer to this question a couple months back... check out the thread
    Re: Portal URL Rewrite
    Here is the answer:
    In this example the name of the page group is "www":
    Our rewrite rule is also set up in a virtual host section of the httpd.conf file as well so some of the options may not be required for your set up:
    RewriteEngine on
    RewriteOptions inherit
    RewriteCond %{REQUEST_URI} !^/(portal|pls|images).*$
    RewriteRule ^(.+) /portal/page/portal/www$1 [PT]
    The rewrite condition allows us to ignore the rewrite for certain items in the path. This allows the portal navigator to work. There may be a couple more items that need to be added to the condition because I recently noticed that the help pages dont function properly.
    In the portal configuration for the rewrite rule we specify:
    Search pattern: /portal/page/portal/www
    Replace pattern:
    Thats right, the replace pattern is blank.
    To see it in action check out http://www.sagelogix.com
    -sean
    Solutions Architect
    http://www.sagelogix.com

  • Plumtree and Weblogic Portal Server | URL rewriting incompatibility

    Hi All,
    I am using Weblogic Portal as the Producer and Plumtree as the consumer for my WSRP portlets. I have enabled Producer URL rewriting. When i invoke an action URL i get a "Mode is not supported in this portlet." error. The template being passed is <blockingActionTemplate>/wsrpconsumer/pt_action?wsrp-navigationalState={wsrp-navigationalState}&wsrp-interactionState={wsrp-interactionState}&wsrp-mode={wsrp-mode}&wsrp-windowState={wsrp-windowState}</blockingActionTemplate>
    and the URL generated is a href="/wsrpconsumer/pt_action?wsrp-navigationalState=&wsrp-interactionState=_action%3D%2FnewAction1&wsrp-mode=&wsrp-windowState="
    The same portlet works fine when Consumer URL rewrting is enabled.
    Plumtree is giving the same error for the portlets at the consumer at http://sunwsrp.dyndns.org/portal/wsrp/wsdl/default. Any help would be highly appreciated
    Thanks

    Hi, I don't have an answer on this but another more basic question. Our agency is using Plumtree Portal v5. I am assigned to develop a remote portlet. According to what I've read on the web as far back as 2003 Plumtree Portal supports WSRP but I'm getting conflicting answers within our agency. This post seems to indicate that the Plumtree Portal can consume WSRP compliant remote portlets. If that is correct, can you point me to documentation/examples? I've found reference to a Plumtree resource called "WSRP Portlet Consumer" for WSRP--does that still exist? Any help would be appreciated.

  • Does URL rewriting in JBuilder4 work?

    I am writing a shopping cart application.
    To keep track of the products the user has chosen I am using a URL rewriting code that appends the product details to the URL and then requests the same page again.
    <a href="<%= response.encodeURL(shopproducts.jsp?title="+title+"&item_id="+item_id+"&price="+price) %">">
    In this page there is a response that will add the chosen product to the shopping cart using a piece of JSP code.
    <% String title = request.getParameter("title");
    In JBuilder4 when I click on the request code I get an error.
    Unable to open location: Could not connect to: http://localhost:8080/myproject/easyshop/shopproducts.jsp;jsessionid=To1010mC02444678198891448At?title=Java 2&item_id=1&price=10
    Is this because JBuilder dosent know how to keep track of the session ID?
    If so how can I get round this or if not is there a better way to keep track of the items?
    thanks.</a>

    Take a look at UrlRewriteFilter for URL Rewriting.
    This particular URL http://localhost:8080/myproject/easyshop/shopproducts.jsp;jsessionid=To1010mC02444678198891448At?title=Java 2&item_id=1&price=10
    has ;jsessionid=.............. after shoppingproducts.jsp
    But a valid URL looks something like this
    somepage.jsp?someValue=123&anotherValue=456
    So having that semicolon instead of a question mark immediately after the .jsp , might be what's causing the error.
    If you have doubts , try to access the page by putting the entire URL
    http://localhost:8080/myproject/easyshop/shopproducts.jsp;jsessionid=To1010mC02444678198891448At?title=Java 2&item_id=1&price=10
    into your browser.
    If your browser can't connect then, what ever you are using to connect to that URL can't connect either.
    Then remove the semicolon and jessionid part, and try to connect and see if it works.

  • WCF Url Rewriting using global.asax

    Hello,
    I am doing Url Rewriting using global.asax but getting below error message. 
    Description: HTTP
    404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable.  Please review the following URL and make sure that it is spelled correctly. 
    Requested URL: /Services/MyService.svc/rest/CheckInternet
    I tested service. its working fine without url rewriting. 
    please help me to solve this issue. 
    Please "Mark as Answer" if this post answered your question. :)
    Kalpesh Chhatrala | Software Developer | Rajkot | India
    Kalpesh 's Blog
    VFP Form to C#, Vb.Net Conversion Utility

    Hi Kalpesh Chhatrala,
    I wonder if you are using the WCF Soap Service or the WCF Rest Service.
    Since your WCF Service works very well without the URI Rewriting, then it seems that you have do something wrong during the process of the URI Rewriting, so please try to refer to the following articles about how to do the URI Rewriting
    for the WCF Service:
    http://blogashwani.blogspot.com/2013/02/url-rewriting-for-wcf-service.html .
    http://blogs.msmvps.com/abu/2008/12/22/url-rewriting/ .
    http://blogs.msdn.com/b/endpoint/archive/2008/08/22/rest-in-wcf-part-ix-controlling-the-uri.aspx .
    Best Regards,
    Amy Peng
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Sessions, URL Rewriting, and Cookies

    First some background, then some questions:
              BACKGROUND
              I have written an application framework to use with JSP/EJB/Servlet
              based applications. This framework does URL rewriting
              (response.encodeUrl) for all URLs generated by the application, and I
              have URL-based session support turned on in WebLogic.
              Despite the fact that my browser is set to support cookies on my test
              machines, I have noticed that intermittently the URL rewriting to
              support session IDs kicks in. Then, later, it goes away again. This
              would seem to indicate that the client browsers are (for no apparent
              reason) deciding to occasionally not support sessions with cookies, so
              that the server has to step in and do URL writing instead.
              QUESTIONS
              1. Has this sort of behavior been reported by anyone else?
              2. Is there a servlet/JSP API anywhere that I can call on a per-HTTP
              transaction basis to see if the browser that is participating in the
              transaction is at that moment supporting cookies?
              3. There are times when my framework needs to delete a cookie by setting
              its maxAge to 0. Most of time time this works, but (as with the session
              ID/URL rewriting above) occasionall the cookie does not get deleted on
              the client brower machine. This screws up some of the application logic
              that I have in the framework. Is this related to the problems listed
              above?
              CONCLUSION
              Any and all information is appreciated, from anyone. Thanks!
              Chris
              

              Hi,
              To answer your question #1, yes I have seen this behaviour, and
              the explanation I feel is as follows.
              1] You access a resource on WL Server & it starts a session, at
              this moment it is not sure whether the browser supports cookies
              so it uses both methods, URL Writing & cookies to store the session
              ID
              2] On the next request, it tries to read the cookie, if it is able
              to read it that means cookies are enabled and there is no need
              to continue with URL Rewriting else it continues wioth URLRewriting.
              To answer Question #2, you can follow a procedure similiar to above
              to find out if browser supports cookies, ie set a cookie & in the
              next request try to read teh value.
              As far as Question #3 is concerned, try setting the magAge to -12
              hours insteda of 0 so that there is no problem even in case of
              a time difference.
              hope this helps
              Rahul
              Chris Dole <[email protected]> wrote:
              >First some background, then some questions:
              >
              >BACKGROUND
              >I have written an application framework to use with JSP/EJB/Servlet
              >based applications. This framework does URL rewriting
              >(response.encodeUrl) for all URLs generated by the application,
              >and I
              >have URL-based session support turned on in WebLogic.
              >
              >Despite the fact that my browser is set to support cookies
              >on my test
              >machines, I have noticed that intermittently the URL rewriting
              >to
              >support session IDs kicks in. Then, later, it goes away
              >again. This
              >would seem to indicate that the client browsers are (for
              >no apparent
              >reason) deciding to occasionally not support sessions
              >with cookies, so
              >that the server has to step in and do URL writing instead.
              >
              >QUESTIONS
              >1. Has this sort of behavior been reported by anyone else?
              >
              >2. Is there a servlet/JSP API anywhere that I can call
              >on a per-HTTP
              >transaction basis to see if the browser that is participating
              >in the
              >transaction is at that moment supporting cookies?
              >
              >3. There are times when my framework needs to delete a
              >cookie by setting
              >its maxAge to 0. Most of time time this works, but (as
              >with the session
              >ID/URL rewriting above) occasionall the cookie does not
              >get deleted on
              >the client brower machine. This screws up some of the
              >application logic
              >that I have in the framework. Is this related to the problems
              >listed
              >above?
              >
              >CONCLUSION
              >Any and all information is appreciated, from anyone. Thanks!
              >
              >Chris
              >
              

  • CSS11506 http header rewrite question

    Hi
    I read the ACE doc, and it said that cisco ACE supports the capability to rewrite http headers in both client requests and server responses. Is CSS11506 can do it?
    I have a lot of problems that application on the local server redirect https to http. Because the way they do installation which standard way and it can not fix or hardly to fix.
    I would like to get a tip to let css11506 rewrite the server's rewrite. is it possible?
    Any comments will be appropriated
    Thanks in advice
    julxu

    Hello Julxu,
    If I understand your question correctly, you are looking for the CSS rewrite the URL from http to https when the server sends a redirect to the client.  If I'm correct, then you can find out how to accomplish this in the Specifying Secure URL Rewrite sectioin of the CSS configuration guides.
    Hope this helps,
    Sean

  • J2EE: Explanation of URL rewriting?

    Hi there fellow forumites,
    I'm reading up on the implicit object Session in regards to JSP. Session state is usually done by maintaining a cookie that is sent to the client. If clients have cookies disabled, the Session object falls back on a method called "URL rewriting" to maintain state across many request/response calls. I've googled for this and searched the forums, but the web results are deeply technical and seem specific to ASP.NET and Apache modules and I've found nothing satisfactory in forum posts that explain it.
    Can someone give a short description on how this "URL rewriting" works and why I need to rewrite any embedded URLs with the appropriate Response object methods?
    Is it encoded in the HTTP header like parameters or something?
    Thanks all.

    i can't answer that, i've never actually written
    anything with j2ee. if you mean will they
    automatically append to any url you write (with
    Response.Write (or similar))? I doubt it. you
    probably have to do it yourself, or call some
    "WriteURL" function.Thats the methods of the Response object I was referring to (encodeURL(String)). Sorry, I didn't realise you'd not done any J2EE, so I was rabbiting on and assuming that you knew what I was on about :) I think I've answered my own question on that with your help, so thanks again.

  • IIS Url Rewriting supported with SharePoint 2010?

    I am currently working for a client that is investigating how they can do vanity domain names for sub sites.  I don't believe this will actually work with SharePoint 2010 and believe it may put the environment in an unsupported state...however I need
    to find some sort of official MS statement saying so.
    Everything I find points me to
    http://technet.microsoft.com/en-us/library/cc261814%28office.12%29.aspx#section2  which states that "Windows SharePoint Services 3.0 does not support asymmetrical paths" however I can't find anything that says the equivalent for 2010.
    I know that web apps and AAM are the typical approaches, and now in 2010 you can do host named site collections, however they want to do sub-sites.
    Can anyone point me to any official MS statement stating that this is not support with SharePoint 2010?
    Tony Testa www.tonytestasworld.com

    We ran into the same question. Since there's no official statement from Microsoft to be found on the internet that takes away the rumors about it being supported, we set out the question with Microsoft to provide their official statement. Their
    reply was that URL rewriting is supported. Find the full reply from Microsoft at my website at
    https://www.zomers.eu/knowledge/sharepoint2010/Pages/Url-rewriting-is-supported-for-SharePoint-2010.aspx
    This link doesn't work and also directly contradicts statements from other Microsoft sources, e.g.
    http://blogs.msdn.com/b/opal/archive/2010/04/23/sharepoint-2010-search-engine-optimization-seo-tips.aspx
    where the following is stated:
    "URL Rewriting is still not supported - however url redirect is supported. We are using url redirect feature in url rewrite model."
    Please provide a link that works and/or back up your claim. Thanks.

  • ADF applicaiton enabling the URL rewriting - configure OHS

    Hi Experts,
    I am new to OHS and i have the following question about enabling the URL rewriting.
    We are planning to deploy the ADF fusion web application into the weblogic and place the OHS infront of the weblogic as the standard deployment architecture. In the web application the URL rewriting is enabled. Do we need to configure anything at the OHS side to work this URL rewriting? Or will the OHS supports this by default?
    Thanks.

    Weblogic has a module for OHS which takes care of simple requirements of forwarding.
    Entry in httpd.conf is something like this (i am using cluster):
    <IfModule mod_weblogic.c>
         WebLogicCluster 172.23.210.13:7003,172.23.210.22:7005
         MatchExpression /console
    </IfModule>
    mod_rewrite will be no different from normal. As in nothing special for ADF/Weblogic app server.
    Venkat

  • Url rewriting & pagination

    I am in the process of learning url rewriting, and with the help of a great book, 'Professional search engine optimization with PHP', i have got as far as rewriting category and product url's into keyword rich ones.
    example at http://www.blunique.co.uk/Earrings-C1.html
    where i am struggling is rewriting the url when i have the recordset results paginated, (using dreamweaver standard server behavior for repeat region).
    Grateful for any advice.

    Greetings,
    I'll tailgate this similar question; I could use a guide to WLP 81x URLs. What does each parameter mean in file mode (.portal) and stream mode?
    Any help here? Tips for understanding URLs would help Anders too.
    tnx, curt

  • Cookies, URL-Rewriting, and Sessions

    Hi All,
    I am aware that this is probably a question that has been asked many times in the past. Nonetheless, I have not been able to fully comprehend the differences. Therefore I would appreciate it, if someone could kindly spend some time explaining the differences between the three and when each would be the most preferred solution. ( cookies, url rewriting and sessions )
    So far what I understand is that, cookies can be used to store small amounts of data not more than 4kb, and that most browsers can not accept more than 20 at a time.... but would it be correct to say that the data is stored within the http headers ?
    URL rewriting, on the other hand is a method which can be used if cookies have been disabled by a browser. The 'session id' is appended to the url, and used to remember the data. ( how ? ). Although, it does mean that the programmer has to be very careful and ensure that rewriting occurs everytime it is passed to the browser, including redirection. ( whatever that means ? )
    Http sessions, seem to be the best solution out of the three ( but if this is the case, why are cookies and rewriting still hanging around today ? And even being taught at universities ? ). Also, they work on top of cookies and if these have been disabled sessions will not work !! ....
    As you can see ( from the above ) I do not have a thorough understanding of the three methods, especially if it comes to specifying the differences between the three.
    I would appreciate an explanation.

    HttpSessions use cookies or url rewritting to pass the session id which the server uses to associate a particular session with a particular request. A well developed web application will be written to use url rewriting when a client has cookies disabled. That being said I yet to see such a web application and personally believe that few people still disable cookies.
    Cookies still have uses.
    Persistant cookies are used to store data that needs to persist between sessions. This data is stored by the browser in a text files and passed to the server in the header. An example of this would be a site that offers personalization would store the user's id so that each time the user accesses the site he would see his personalization without being required to log in. Yahoo is a good example.
    In memory cookies are stored in the browser's memory and is used to store temporary data that goes away when the browser closes. Again this data gets passed to the server in the headers. Temporary cookies can be used to pass data between seperate web applications runing on the same host where storing the data in the session will not because each application has it's own session.

Maybe you are looking for