PDA

View Full Version : Removing Session ID's


bsterzenbach
09-18-2006, 01:36 PM
Greetings!

We have a setup where session ID's are automatically appended to urls. The session ID is jsessionID. Is there a way to turn this behavior off?

Thanks,

Bill

Candyman
09-19-2006, 05:56 AM
Cut-and-paste from http://www.mail-archive.com/user@struts.apache.org/msg50246.html:

The "jsessionid" attribute is put when cookies are not enabled on the browser, or when there wasn't time to set one. For example if your home JSP page has a <html:link>, the Struts tag will rewrite the URL appending the "jsessionid" attribute, because it did not find any cookie.

But why do you want to remove that attribute?

bsterzenbach
09-19-2006, 01:06 PM
Thanks for the reply.

Yes, the session ID's are set when cookies are not set. The problem is, search engines do not allow cookies to be set, and they avoid links with session ID's like black death. In PHP there are config params that you can setup in httpd.conf or in .htaccess that block this behavior, does such a capability exist in the umbutu/tomcat environment?

Bill