Re: non-unique sessionids

Scott Ferguson wrote:
> Azinger, Eric wrote:
>
>> Scott,
>> We're seeing the days and sometimes weeks going by between logging dates
>> though. The browser session certainly shouldn't be lasting that long,
>> right?
>
>
> The cookie generally stays alive until the user closes the browser. I've
> used the same browser instance for weeks without shutting down. So the
> cookie will be the same all that time.

Scott -

If Eric downloaded a post 2.0.4 version of Resin, and then set
"reuse-session-id" to false
(http://www.caucho.com/products/resin/ref/app-config.xtp#session-config)
would that change the behavior to what he wants? (session times
out; a new session id is assigned when the user visits again)

- heck
Received on Wed 03 Apr 2002 10:14:04 -0800