Java开发网 - Re:Large-scale Servlet Programming (IBM WebSphere Developer Domain)

Java开发网

您没有登录

» Java开发网 » Java EE 综合讨论区

打印话题 寄给朋友 订阅主题

作者

Re:Large-scale Servlet Programming (IBM WebSphere Developer Domain) [Re:why]

floater

Java Jedi

总版主

发贴: 3233
积分: 421

于 2003-06-24 02:04

1. You need to have a way to identify clients.
2. cookie in memory is pretty safe
3. cookie is used for session only, *** identifies the identity.
4. crossing server/app is a pain in terms of maintaining sessions across apps/servers.
5. content in cookie is one-way hashed, somewhat business meaningless, time dependent.
6. some session mechnism is cookie oriented too.
7. hijacking the session is useless unless you have the *** too to identify yourself.

"Any fool can write code that a computer can understand. Good programmers write code that humans can understand."
- Martin Fowler, Refactoring - Improving the Design of Existing Code

话题树型展开

人气	标题	作者	字数	发贴时间
7634	[精华] Large-scale Servlet Programming (IBM WebSphere Developer Domain)	why	189	2003-06-22 13:20
5999	Re:Large-scale Servlet Programming (IBM WebSphere Developer Domain)	archonLing	421	2003-06-23 00:42
5725	Re:Large-scale Servlet Programming (IBM WebSphere Developer Domain)	floater	281	2003-06-23 06:26
5944	Re:Large-scale Servlet Programming (IBM WebSphere Developer Domain)	archonLing	495	2003-06-23 14:50
6790	Re:Large-scale Servlet Programming (IBM WebSphere Developer Domain)	floater	461	2003-06-24 02:04

已读帖子

新的帖子

被删除的帖子