Evan Vaala replies to my reply . . .
> Ted Ashton wrote:
>
> >Thus it was written in the epistle of Joe Geiser,
> >>
> >> The cookie method is probably the most used method however.
> >
> >. . . and the most controversial as many folks out there object to the use of
> >cookies.  If a session identifier is sufficient for you to keep state, I'd
> >consider sticking it in a hidden form variable.  Then you don't have to mess
> >with cookies and no one is likely to try to resurrect an ancient session
> >after it has expired
>
> However, some of the downfalls of URL rewriting:

and then talks about Java Web Server.

There seems to be some confusion.  What I was recommending was not URL
rewriting (specifically because of the concerns above), but rather including
a hidden field in the form (as mentioned previously).  While you will lose a
session which uses these if you browse elsewhere and do not return via the
Back button, the other things mentioned are not a problem.  Moreover, I expect
that you will find this one particular problem to be quite rare.

Wrt JWS, that's another thing which will not have universal acceptance.  First,
there are the lynx folks (who don't, I believe, have Java implemented yet,
though I could well be wrong there) and second there are the stick-in-the-mud
people like me who don't trust Java and keep it (and cookies) turned off.

Ted
--
Ted Ashton ([log in to unmask]), Info Serv, Southern Adventist University
          ==========================================================
The different branches of Arithmetic -- Ambition, Distraction, Uglification,
and Derision.
                                            -- Carroll, Lewis