Ask Questions and Find Answers
Important:
Ask is now read-only. You can review any existing questions and answers, but not add anything new.
But - don't panic! While ask is no more, we've replaced it with discuss - the new Liferay Discussion Forum! Read more here here or just visit the site here:
discuss.liferay.com
RE: Need to retain my session in portal till the user login
Hi,
I need to retain session object "ABC" which is created before login.
Now, the session object which is created before login is not available after login in the portal.
How can I retain the session until it was killed by my custom action instead of liferay action events?
Is there any workaround to achieve this.
Regards,
Faris
I need to retain session object "ABC" which is created before login.
Now, the session object which is created before login is not available after login in the portal.
How can I retain the session until it was killed by my custom action instead of liferay action events?
Is there any workaround to achieve this.
Regards,
Faris
Srikanth Reddy Sanivarapu, modified 14 Years ago.
Regular Member
Posts: 203
Join Date: 11/15/08
Recent Posts
This may help you....
session.enable.phishing.protection=true...
Set the above property to false. Thanks.
Regards,
Srik
session.enable.phishing.protection=true...
Set the above property to false. Thanks.
Regards,
Srik
Its great!!.. its working...
Thanks Srikanth...
I've some more help needed in this ..
In the case if I want to keep only the known session object "ABC" remaining session object should get killed to prevents phishing.
How can I achieve this? Which event I need to override?
When this com.liferay.portal.events.SessionDestroyAction is executed?
Thanks Srikanth...
I've some more help needed in this ..
In the case if I want to keep only the known session object "ABC" remaining session object should get killed to prevents phishing.
How can I achieve this? Which event I need to override?
When this com.liferay.portal.events.SessionDestroyAction is executed?
You can also add your ABC session object name to following list:
That way you can still have session phishing enabled and retain your session object after login.
session.phishing.protected.attributes=HTTPS_INITIAL,LAST_PATHThat way you can still have session phishing enabled and retain your session object after login.
Hi Mika,
I was in busy with other task to finsh.. So I didnt check this.
But I didnt find any portal.properties for this key "session.phishing.protected.attributes" in liferay 5.2.3" Hope it may in new version liferay 6.x
Regards,
Faris
I was in busy with other task to finsh.. So I didnt check this.
But I didnt find any portal.properties for this key "session.phishing.protected.attributes" in liferay 5.2.3" Hope it may in new version liferay 6.x
Regards,
Faris
Ah you are right it was added in 6.0.
Hi Mika,
This property only works if we set <private-session-attributes>false</private-session-attributes> in liferay-portlet.xml which means we have to use the global session rather then the portlet session .
Is there any way of making the session.phishing.protected.attributes property work without setting the <private-session-attributes>false</private-session-attributes>
Appreciate your suggestions.
This property only works if we set <private-session-attributes>false</private-session-attributes> in liferay-portlet.xml which means we have to use the global session rather then the portlet session .
Is there any way of making the session.phishing.protected.attributes property work without setting the <private-session-attributes>false</private-session-attributes>
Appreciate your suggestions.