Share the Session value in JSP and Asp.net

Specifically, the Session in the Web refers to the time that the user spends browsing a website from entering the website to closing the browser. Therefore, we can see from the above definition that Session is actually a specific concept of time.

What is the Session value between JSP and Asp.net?

The idea at the beginning of this topic is to serialize the Session in Asp.net to save binary data to the database, and then read the binary data from the database by JSP to deserialize the Session object, forced conversion into a Java Session object. An error occurs during JAVA-side conversion, and the online data cannot be retrieved. Therefore, a replacement method is used.

Ideas for the replacement method:

Log on to the ASPX file. After Successful Logon, save the variable values in the Session to a table in the database. Use the Session ID of the Session object of Asp.net, create An ASPX file, and obtain

Get the SessionID of the currently logged-on user and use the Asp.net redirect statement to go to the JSP file. The URL request path format is test. jsp? Aspnetsessionid = ffj12d455p0ujr45vdqwhh45, if

Asp.net is not logged on or fails to log on. Although there is a SessionID value, there is no data associated with this SessionID in the database.

Some readers may find that test. jsp is not required? Aspnetsessionid = ffj12d455p0ujr45vdqwhh45 and other request paths can also be completed. Yes, you can use test. jsp? Userid = 1111

The value is also passed. Of course, userid is the value obtained after the Asp.net login is successful, but some users can know the sensitive data of USERID (User ID.

Create a table

◆ Table name:

◆ Iis_session

◆ Field name:

◆ Id varchar (26) -- store the SessionID of Asp.net

◆ Userid int (4) -- stores the user ID after Successful Logon

◆ Power int (4) -- store the user's permission number

Source code snippet of the Session value in the Asp.net program:

 
 

  
  
/* After successful logon, you can place the following CODEING In the logon authentication ASPX page */
  
  
 
  
  
// Record the Session value to the database
  
  
Private void WriteSession2DB (string sessionID, string sUID, string sPWR)
  
  
{
  
  
// Connect to the database code, which is automatically added by the reader
  
  
StringSessID=SessionID;
  
  
StringStrSQL="Insert into iis_session (id, userid, power) values (@ seionID, @ UID, @ PWR )";
  
  
 
  
  
// Webmod. sqlConn is the connection object of the database. you can replace it with your own database connection.
  
  
SqlCommandSqlCmd=NewSqlCommand (strSQL, webmod. sqlConn );
  
  
SqlCmd. Parameters. Add ("@ seionID", SqlDbType. VarChar). Value=SessID;
  
  
SqlCmd. Parameters. Add ("@ UID", SqlDbType. Int). Value=Convert. ToInt32 (sUID. Trim ());
  
  
SqlCmd. Parameters. Add ("@ PWR", SqlDbType. Int). Value=Convert. ToInt32 (sPWR. Trim ());
  
  
SqlCmd. ExecuteNonQuery ();
  
  
// Closes the database connection, and the reader adds
  
  
 
  
  
}
  
  
 
  
  
/* When you exit the system, you can delete a row of data from the database's SessionID on the exit page or the Session_END process of Global. asax */
  
  
 
  
  
// Delete the Session value in the database
  
  
Private void RemoveSession4DB ()
  
  
{
  
  
// Connect to the database code, which is automatically added by the reader
  
  
StringSessID=Session. SessionID;
  
  
StringStrSQL="Delete from iis_session where id = '"+ SessID + "'";
  
  
 
  
  
// Webmod. sqlConn is the connection object of the database. you can replace it with your own database connection.
  
  
SqlCommandSqlCmd=NewSqlCommand (strSQL, webmod. sqlConn );
  
  
SqlCmd. ExecuteNonQuery ();
  
  
// Closes the database connection, and the reader adds
  
  
}
  
  
 
  
  
/* Redirect to the ASPX page of JSP, and add the following code in PAGE_LOAD of this ASPX page */
  
  
Private void Page_Load (object sender, System. EventArgs e)
  
  
{
  
  
StringStrSessionID= Session. SessionID. Trim ();
  
  
StringStrRoot="Http: // localhost/test. jsp? Aspnetsessionid ="+ StrSessionID;
  
  
Response. Redirect (strRoot, true );
  
  
}
  
  
 
 
 

The source code snippet of the Session value in the JSP program:

 
 

  
  
<% @ PageContentType="Text/html; charset = gb2312"%> 
  
  
<%
  
  
/*
  
  
You can replace your own database connection classes.
  
  
*/
  
  
%> 
  
  
<Jsp: useBean Id="Db" Scope="Page" Class="Com. itbaby. bean. dbx. database"/> 
  
  
 
  
  
<%
  
  
 
  
  
StringSASPNetSessionID=Request. GetParameter ("aspnetsessionid ");
  
  
 
  
  
// The connection pool is used to connect to the database. you can replace it with your own
  
  
StringSDBSourceName="Itbaby_dbpool";
  
  
Db. dbConnOpen (sDBSourceName );
  
  
 
  
  
StringSSql="Select userid, power from iis_session where id = '"+ SASPNetSessionID + "'";
  
  
 
  
  
// The Reader replaces the code used to read the result set.
  
  
Java. SQL. ResultSetRs=Db. GetRs (sSql );
  
  
 
  
  
If (rs. next ())
  
  
{
  
  
 
  
  
StringSUID=Rs. GetString (1 );
  
  
StringSPower=Rs. GetString (2 );
  
  
 
  
  
/* Read the corresponding SESSIONID value from the database and display that if the SESSION of Asp.net times out, there will be no value */
  
  
Out. print ("<H1>Asp.net Session ValueUserID="+ SUID +" H1><Br><Br>");
  
  
Out. print ("<H1>Asp.net Session ValuePower="+ SPower +" H1><Br><Br>");
  
  
 
  
  
}
  
  
Rs. close ();
  
  
 
  
  
Db. dbConnClose ();
  
  
 
  
  
%> 
  
  
 
 
 

So far, the sharing of Session values in JSP and Asp.net has come to an end. Although it is not a good method, it can also be used to protect users' sensitive data.

I will continue to consider using serialization and deserialization to share Session objects between different Web languages, instead of sharing Session values.

1. JSP2.0 features of basic JSP tutorial knowledge
2. JSP tutorial-traffic count JSP source code
3. JSP entry-level website environment setup steps
4. Servlet import event-driven technology in JSP development
5. How to export Oracle Data Tables Using JSP