Avoid session tracking in Java

0

How can I avoid session tracking ?. Since I have an application every time you enter the login page remember the password and contraseña .

To go to the page of login I use response.sendRedirect("login.html");

In the page of login it is verified that the password and password are correct:

if (rs.next()) {

                response.sendRedirect("index.html");

            } else {
              response.setStatus(HttpServletResponse.SC_MOVED_PERMANENTLY); response.setHeader("Location", "http://localhost:8080/login");
              //in this case enter when  result size is zero  it means user is invalid
            } 
    
asked by TOMAS 19.02.2018 в 17:22
source

1 answer

0

Sessions are stored in the headers of HTTP requests. delete all headers except those that interest you for the operation of your application.

Reference: link

    
answered by 19.02.2018 в 17:42