This discussion is archived
2 Replies Latest reply: Feb 6, 2013 2:14 PM by Murray9654 RSS

Session does not work

988497 Newbie
Currently Being Moderated
Previous page can be seen even after user logs out from the JSP page.
My code is:

Logout.jsp:

<%@page contentType="text/html" pageEncoding="UTF-8"%>

<html>
<head>

<title>JSP Page</title>

</head>
<body>

<%

session.removeAttribute("username");
session.removeAttribute("password");
session.invalidate();
%>
<% response.setHeader("Cache-Control","no-cache");%>
<h1>Logout was done successfully.</h1>

</body>

</html>



how to resolve this?
  • 1. Re: Session does not work
    r035198x Pro
    Currently Being Moderated
    Typically you would configure a filter that sends the user to the login page if they are not logged in (or have been logged out) .
    So when the user logs in, add their user name to the session as an attribute. When they log out remove the userName attribute from the session.
    Then all the filter does is check if userName attribute is set. If it is not set it redirects to the login page.
  • 2. Re: Session does not work
    Murray9654 Newbie
    Currently Being Moderated
    Coming to your code you have requested the browser not to cache the logout page but the previous pages are cached so when u hit the previous button on the browser it will display the previous page which is cached. you have to write this
     <% response.setHeader("Cache-Control","no-cache");%> 
    in every jsp page if none of the jsp page should be cached. if you are making a fresh request for the previous jsp page after logging out still it displays the page with no personal content, I mean the stuff that you are retrieving from the session. it is because you have destroyed the session by linvalidating it. The other content which does not relate to session will still be displayed.

    If none of the page should be displayed after logging out even though you request use filters to divert all the requests to a login page if they are not logged in. hope this helps.

    Edited by: EJP on 7/02/2013 09:13: cashed -> cached

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points