INTERVIEW QUESTIONS J2EE SERVLET DETAILS

Question: How can a web container know whether cookies are accepted or not accepted by the browser

Answer: The only way to know for sure is to set a cookie on a response, and see if
it comes back on the following request. You have absolutely no clue from
looking just at the current request. Just as an example, I run Netscape
6, configured to warn me every time about accepting a cookie -- so you
can't even look at the User-Agent header and predict whether *I* am going
to accept your cookie or not.

This is exactly what the servlet container does for you for session IDs,
as long as you use URL rewriting (done with the response.encodeURL()
method) to create all of your hyperlinks. The container will send the
initial session id both ways (encoded in the URLs, and as a cookie). If
the session id comes back later as a cookie, the container recognizes this
and stops doing the rewriting -- otherwise it continues. But the only
safe thing for your application to do is *always* call encodeURL() to
generate all of your hyperlink destinations that should be part of the
same session.

The only way to know for sure is to set a cookie on a response, and see if
it comes back on the following request. You have absolutely no clue from
looking just at the current request. Just as an example, I run Netscape
6, configured to warn me every time about accepting a cookie -- so you
can't even look at the User-Agent header and predict whether *I* am going
to accept your cookie or not.

This is exactly what the servlet container does for you for session IDs,
as long as you use URL rewriting (done with the response.encodeURL()
method) to create all of your hyperlinks. The container will send the
initial session id both ways (encoded in the URLs, and as a cookie). If
the session id comes back later as a cookie, the container recognizes this
and stops doing the rewriting -- otherwise it continues. But the only
safe thing for your application to do is *always* call encodeURL() to
generate all of your hyperlink destinations that should be part of the
same session.
Source: CoolInterview.com

If you can use the Method
HttpSession session=request.getSession()at that time we can get the session . if we can not get the session cookies are disabled.container each and every time sends the cookie along with the encodeURL().
if the browser does not accept the cookies we can do the extra work add the session id at the end of the url.
by fortunately container supports the both means cookies and encodeURL(). Source: CoolInterview.com

If you have the better answer, then send it to us. We will display your answer after the approval.

Rules to Post Answers in CoolInterview.com:-

• There should not be any Spelling Mistakes.
• There should not be any Gramatical Errors.
• Answers must not contain any bad words.
• Answers should not be the repeat of same answer, already approved.
• Answer should be complete in itself.

Name :*
Email Id :*
Answer :*
Verification Code	Not readable? Load New Code
Enter the above shown code: *
	Inform me about updated answers to this question