Session problems during Android-web server interaction

When an Android ApplicationProgramWhen accessing the web server, we want to maintain the same session with the server, that is, the interaction between the current login user and the server is under the same sessionid.
When we log on successfully, we can get the cookie information through the HTTP request, including the session sessionid. At the same time, we can put the sessionid into JSON and return it. The session can be stored with a static variable. When a request is sent to the server, the server will automatically check whether the sessionid is invalid.

Defaulthttpclient httpclient = new defaulthttpclient ();

Httppost = new httppost (access address );

Httppost. setheader ("cookie", "JSESSIONID =" + sessionid stored in static variables );

Httpresponse = httpclient.exe cute (httppost );
In this way, the sessionid can be taken over.