
	Where results make sense

Topic: HTTP session

	Understanding HTTP Session State Replication
		To support automatic failover for servlet and JSP HTTP session states, WebLogic Server replicates the session state object in memory.
		In the HTTP response, the proxy updates the client's cookie to reflect the new primary and secondary servers, to account for the possibility of subsequent failovers.
		The proxy and load balancing examples both depict an important quality of WebLogic Server session state replication: After a server that hosts a session state fails, replication of that server's session states is performed in a delayed fashion, in response to clients attempting to access the session state on another server in the cluster.
	e-docs.bea.com /wls/docs61/cluster/servlet.html (2879 words)

	MSN Messenger Protocol - General - HTTP Connections
		The proxy server in an HTTP session performs a completely different function to that in a SOCKS connection, and is most likely not required by the protocol.
		The session ID seems always to be a long number (which remains constant across a session), followed by a dot, then a short number (which changes with each response).
		The official client tries to keep a single connection open throughout a session, though the session ID is presumably included in case a proxy server along the way closes the connection in the middle of a session.
	www.hypothetic.org /docs/msn/general/http_connections.php (956 words)

	HTTP Session Object vs Stateful EJB @ SYS-CON BELGIUM (Site not responding. Last check: 2007-10-29)
		When we used the session bean, we still needed the HTTP session object to store the bean's handle, in order to associate the bean instance with the client.
		To make sure that the stateful beans were removed at the end of every HTTP session, we set the HTTP session timeouts in the WebLogic server to 5 seconds and forced the test script to sleep for 6 seconds before starting a new HTTP session.
		It's amazing to find out that the cost of storing data in an HTTP session object is basically the same as using a stateful session bean, assuming the bean is removed in a proper way at the time the session terminates.
	be.sys-con.com /read/42885.htm (1642 words)

	: Interface HttpSession
		For session that are invalidated or expire, notifications are sent after the session has been invalidatd or expired.
		A servlet should be able to handle cases in which the client does not choose to join a session, such as when cookies are intentionally turned off.
		For example, if the server used only cookie-based sessions, and the client had disabled the use of cookies, then a session would be new on each request.
	java.sun.com /products/servlet/2.3/javadoc/javax/servlet/http/HttpSession.html (1250 words)

	Session Handling in MIDP
		HTTP's statelessness is working against you here, but there are two clever workarounds that let a client and a server maintain an interaction that is longer than just one request and response.
		Session tracking is a common use for cookies, which are part of the HTTP specification.
		SessionServlet.java is a simple servlet that retrieves the session for a client request and sends back a message indicating whether the session is newly created or reused.
	developers.sun.com /techtopics/mobility/midp/articles/sessions (1733 words)

	Failover and Replication in a Cluster
		In order to replicate session data from one cluster to another, a replication channel must be configured to communicate session state information from the primary to the secondary cluster.
		This is the interval, in seconds, the cluster waits to flush HTTP sessions to the backup cluster.
		After the server establishes the HTTP session, the current session state is replicated to the designated secondary server.
	e-docs.bea.com /wls/docs90/cluster/failover.html (10484 words)

	Class: CGI::Session
		Session instance using ’[]’, much the same as hashes (although other hash methods are not supported).
		However, a session id must be passed backwards and forwards between client and server to maintain a reference to this session state.
		The caller is responsible for extracting the session id from the session_id attribute and manually encoding it in URLs and adding it as a hidden input to HTML forms created by other mechanisms.
	www.ruby-doc.org /core/classes/CGI/Session.html (819 words)

	C H A P T E R 37 - HTTP Session Model
		Unlike most other models, the fields of an HTTP session model are merely a passthrough vehicle for the values to the session attributes.
		HTTP session model is not required for interaction with the HTTP Session within a Web Application Framework application.
		The name of the HTTP session attribute to which the model field maps.
	docs.sun.com /source/819-0725/httpsess28.html (456 words)

	Session (Site not responding. Last check: 2007-10-29)
		The HTTP protocol does not maintain state between requests, so in order to build up data some identifier from the HTTP request must be used to acquire session information.
		Typically the session identifier is taken from a HTTP cookie, which can then be used to acquire data.
		which acts as the storage mechanism for session variables, the other is the leasing mechanism, which is used to determine when a session has expired.
	simpleweb.sourceforge.net /javadoc/simple/http/session/Session.html (524 words)

	Using FTP, HTTP, and WebDAV Protocols
		Session Pooling improves performance of HTTP by avoiding the cost of re-creating session states, especially when using HTTP 1.0, which creates new connections for each request.
		Time (in hundredths of a second) after which a session (and consequently the corresponding connection) will be terminated by the protocol server if the connection has been idle for that time.
		Time (in hundredths of a second) after which an HTTP session (and consequently the corresponding connection) will be terminated by the protocol server if the connection has been idle for that time.
	www.stanford.edu /dept/itss/docs/oracle/9i/appdev.920/a96620/xdb24pro.htm (2321 words)

	'HTTP Session Replication Failure' Issues @ WEBLOGIC JOURNAL (Site not responding. Last check: 2007-10-29)
		Sometimes, HTTP session states are not replicated from the primary server to the secondary server.
		To support in-memory replication of HTTP session states, all servlet and JSP session data must be serializable or else session replication would fail.
		Please do not use the methods putValue and removeValue of the HTTP session as they are deprecated and there could be issues with session data replication when using such methods in your application.
	weblogic.sys-con.com /read/44435.htm (2150 words)

	Java Technology Forums - !http session + wondows closes (Site not responding. Last check: 2007-10-29)
		When I close internet explorer browser's window, I wont, to close current session too.
		It will take 30min default duation for a session.When you close the browser window it will automatically end the session.Don't set the session interactive interval to any value.
		Unless otherwise licensed, code in all technical manuals herein (including articles, FAQs, samples) is provided under this License.
	forum.java.sun.com /thread.jspa?threadID=718223&messageID=4146627 (112 words)

	SecurityTracker.com Archives - PHP Input Validation Error in Session ID Values Permits HTTP Response Splitting Attacks
		Details: PHP's own session functionality is using a so-called permissive system to accept any kind of user supplied session ID. While this is often criticized as the cause of easier session fixation attacks against PHP applications, it also means that the session ID has to be considered as user input in PHP applications.
		Until PHP5 the built-in session extension assumes that a user supplied session ID is already known on the client side and therefore it is not sent back to the client within a cookie.
		Because PHP's default session storage module, files, will issue a PHP warning that a session ID with illegal characters was used, this is not exploitable in some situations where output buffering is switched off (on server and in the application), the files module is used and PHP is configured to display warnings.
	www.securitytracker.com /alerts/2006/Jan/1015484.html (765 words)

	Class: Net::HTTP
		HTTP object cannot open a connection in this many seconds, it raises a TimeoutError exception.
		The default port to use for HTTP requests; defaults to 80.
		The default port to use for HTTPS requests; defaults to 443.
	www.ruby-doc.org /stdlib/libdoc/net/http/rdoc/classes/Net/HTTP.html (1988 words)

	[No title]
		Currently, HTTP servers respond to each client request without relating that request to previous or subsequent requests; the technique allows clients and servers that wish to exchange state information to place HTTP requests and responses within a larger context, which we term a "session".
		The starting or continuation of such sessions could be contrary to the privacy expectations of the user, and could also be a security problem.
		Kristol & Montulli Standards Track [Page 15] RFC 2109 HTTP State Management Mechanism February 1997 6.3.1 Denial of Service Attacks User agents may choose to set an upper bound on the number of cookies to be stored from a given host or domain name or on the size of the cookie information.
	www.ietf.org /rfc/rfc2109.txt (5510 words)

	Debugging HTTP Sessions (Site not responding. Last check: 2007-10-29)
		Charles is a debugging HTTP proxy server developed by Karl von Randow at XK72 Ltd.
		This includes the HTTP request and response headers — so you see every cookie, every redirect, etc. It even allows you to view the encrypted data from an HTTPS session in plain text.
		Every HTTP request and response you generate will be added to the browser in the session window.
	radio.colclasure.net /kaelin/stories/2004/04/24/debuggingHttpSessions.html (497 words)

	Scripts - HTTP Session Request
		For example, if the first HTTP request performs a login at a website, then the second HTTP request will be performed using the same HTTP session, which has the effect of operating as the logged-in user.
		This ASP demonstration of the HTTP Session Request is designed to show the effectiveness of the function, by maintaining an HTTP session remotely betwen pages.
		The HTTP Session Request function is available as a VBScript function that can be used in your ASP pages and VB code.
	www.tele-pro.co.uk /scripts/misc/httpsess.htm (291 words)

	JEP-0124: HTTP Binding
		In practice, a session would have to be extraordinarily long (or involve the exchange of an extraordinary number of packets) to exceed the defined limit.
		The session should be considered secure only if all client requests are made via SSL (or TLS) HTTP connections and the connection manager generates an unpredictable session ID. If the session is secure, it is not necessary to use this key sequencing mechanism.
		Even if the session is not secure, the unpredictable session and request IDs specified in the preceding sections of this document already provide a level of protection similar to that provided by a standard XMPP connection bound to a single pair of persistent TCP/IP connections, and thus provide sufficient protection against a 'blind' attacker.
	www.jabber.org /jeps/jep-0124.html (7912 words)

	Restoring Http Session
		The user in the first application does a bunch of things, sticks a few objects with the http session and is then taken to the second web application.
		This being the case, I am trying to find some way to keep the http session of one app alive even after user has left the application temporarily.
		Basically how the session works is, when you create a session from your web app, the container creates a session object with an unique id(jsessionid) and creates a cookie with the jsessionid on it, while sending response(If cookie is disabled, it uses URLRewriting).
	www.theserverside.com /discussions/thread.tss?thread_id=21610 (1043 words)

	HTTP Service (Site not responding. Last check: 2007-10-29)
		Since a session provides memory about the last request it is possible to manipulate cookies, login into secure http sites, and interact with form and link html elements that are returned from requests.
		The owner of the new session is identified by the machine, process, and handle used to issue the OPEN command.
		The "Status Code" value is set to HTTP status code for the last HTTP request made in the session.
	staf.sourceforge.net /current/Http.html (11507 words)

	HTTP Session Management (Site not responding. Last check: 2007-10-29)
		HTTP 1.1 attempts to solve some problems caused by this
		Cookies may be passed from an HTML document to the HTTP layer by
		Refuse the HTTP request unless it is accompanied by a valid user id/password pair
	jan.netcomp.monash.edu.au /ecommerce/session.html (390 words)

	Stateful Session Bean v/s HTTP session
		I wanted to know whether a stateful session bean extend its session across to the HTTP (browser's) session.
		I am under the impression that 'coz of the stateless nature of the HTTP protocol, I still (even if I use a stateful bean) need to write explicit session tracking code to maintain a session with the client browser.
		What you need to do is maintain the handle to the Stateless Bean across HTTP calls probably with some session maintenance code, that way once you have a valid handle then your Stateless bean maintains its state.
	www.theserverside.com /discussions/thread.tss?thread_id=3057 (820 words)

	HTTPS, HTTP session communication - osCommerce Community Support Forums
		In my case, the HTTP server is a Linux box and the HTTPS server is Windows, but that's beside the point.
		I'm fairly convinced that the reason why the osCSID is lost when transferring from a secure HTTPS connection to an HTTP connection when their are on separte computers is because of an insanely difficult line of code in your /includes/functions/sessions.php file.
		Cookies would also get around the problem but the problem with cookies is that most users think they are dangerous and shouldn't be trusted thus they turn off accepting cookies then they cant get into your site and you loose customers, this doesnt use cookies, easier for the user.
	forums.oscommerce.com /index.php?showtopic=121624 (639 words)

	WinHttpConnect(HINTERNET,LPCWSTR,INTERNET_PORT,DWORD) function [HTTP]
		The WinHttpConnect function specifies the initial target server of an HTTP request and returns an HINTERNET connection handle to an HTTP session for that initial target.
		Returns a valid connection handle to the HTTP session if the connection is successful, or NULL otherwise.
		WinHttpConnect specifies the target HTTP server, however a response can come from another server if the request was redirected.
	msdn.microsoft.com /library/en-us/winhttp/http/winhttpconnect.asp?FRAME=true (700 words)

	JBoss.com - Forums - HTTP session replication performance report
		In a few weeks I'm going to be starting some http session replication benchmarking work here at JBoss.
		This will allow detection of changes in individual fields in the objects stored in the session, with replication of only those fields.
		I doubt this would have much benefit in a use case like your Counter servlet test case, but will be very helpful when large complex objects are stored in the session.
	www.jboss.org /?module=bb&op=viewtopic&t=68803 (385 words)

	HTTP Session Garbage Collector @ WEB DEVELOPER'S & DESIGNER'S JOURNAL (Site not responding. Last check: 2007-10-29)
		A common approach to caching data in Web applications is to use an HTTP session.
		Failure to do this may lead to memory leakage, which becomes noticeable when a user HTTP session continues for hours.
		The cache hierarchy tree empowers HTTP session garbage collection; however, this tree is also kept in the user HTTP session.
	mxdj.sys-con.com /read/43549.htm (1577 words)

	Can I attach db connection to user http session? \| ModPerl \| ModPerl
		the db connections to my oracle database are pooled for quick re-use by my mod_perl app's, --which is all fine until I develope web applications that need to prevent against "dirty read" situations between different user http sessions (since there is no dedicated db connection used across http requests)...
		QUESTION: Is there a way to open a db connection and attached it to a session cookie so that only one user session will be able to use that connection?
		suggest you install mysql to deal with your http sessions.
	www.gossamer-threads.com /lists/modperl/modperl/29035 (776 words)

	jGuru: problem in getting HTTP session variable value
		Also successful loged in I stored some value in HTTP session variable and redirect it to Options page (JSP page).
		When User tries to log in to application from the URL with www (http://www..net), session values are not avilable on Option page.
		But if log in to application from URL without www (http://.net) then session values are avilable on Option page.
	www.jguru.com /forums/view.jsp?EID=1234212 (126 words)

	Suggestion: HTTP Session with Fallback a la PHP4 \| ModPerl \| Embperl
		Suggestion: HTTP Session with Fallback a la PHP4
		Suggestion: HTTP Session with Fallback a la PHP4
		A fallback system for HTTP session management is built into PHP 4.0.
	www.gossamer-threads.com /lists/modperl/embperl/10988 (219 words)

	JBoss.com - Forums - HTTP Session Clustering--HttpSessionBindingListener valueUnb
		I have setup two JBoss 3.2.7 Application Servers in clustering mode on Sun Solaris and i am using basic HTTP Session Clustering.
		I have a implemented a myClass, whcih implements HttpSessionBindingListener interface and want to carry out certain operations in valueUnbound method, when session time out happens.
		The valueBound method is getting called, when the instance of myClass is put in HTTPSession.The valueUnbound method is also getting called,when i am invalidating the session using session.invalidate().
	www.jboss.org /index.html?module=bb&op=viewtopic&p=3869640 (221 words)

Try your search on: Qwika (all wikis)