<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <title>Need to retain my session in portal till the user login</title>
  <link rel="self" href="https://liferay.dev/c/message_boards/find_thread?p_l_id=119785294&amp;threadId=8957271" />
  <subtitle>Need to retain my session in portal till the user login</subtitle>
  <id>https://liferay.dev/c/message_boards/find_thread?p_l_id=119785294&amp;threadId=8957271</id>
  <updated>2026-04-07T06:40:20Z</updated>
  <dc:date>2026-04-07T06:40:20Z</dc:date>
  <entry>
    <title>RE: Need to retain my session in portal till the user login</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=11448930" />
    <author>
      <name>Tanweer Ahmed .</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=11448930</id>
    <updated>2022-06-11T18:01:40Z</updated>
    <published>2011-11-14T05:15:16Z</published>
    <summary type="html">Hi Mika,&lt;br /&gt;&lt;br /&gt;This property only works if we set  &lt;strong&gt;&amp;lt;private-session-attributes&amp;gt;false&amp;lt;/private-session-attributes&amp;gt;&lt;/strong&gt; in liferay-portlet.xml which means we have to use the global session rather then the portlet session .&lt;br /&gt;Is there any way of making the &lt;strong&gt;session.phishing.protected.attributes&lt;/strong&gt; property &lt;strong&gt; work without&lt;/strong&gt; setting the &lt;strong&gt;&amp;lt;private-session-attributes&amp;gt;false&amp;lt;/private-session-attributes&amp;gt;&lt;/strong&gt;&lt;br /&gt;&lt;br /&gt;Appreciate your suggestions.</summary>
    <dc:creator>Tanweer Ahmed .</dc:creator>
    <dc:date>2011-11-14T05:15:16Z</dc:date>
  </entry>
  <entry>
    <title>RE: Need to retain my session in portal till the user login</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=9418403" />
    <author>
      <name>Mika Koivisto</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=9418403</id>
    <updated>2011-06-17T16:42:59Z</updated>
    <published>2011-06-17T16:42:59Z</published>
    <summary type="html">Ah you are right it was added in 6.0.</summary>
    <dc:creator>Mika Koivisto</dc:creator>
    <dc:date>2011-06-17T16:42:59Z</dc:date>
  </entry>
  <entry>
    <title>RE: Need to retain my session in portal till the user login</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=9117922" />
    <author>
      <name>Faris Abdulla</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=9117922</id>
    <updated>2011-06-03T17:07:08Z</updated>
    <published>2011-06-03T17:07:08Z</published>
    <summary type="html">Hi Mika,&lt;br /&gt;&lt;br /&gt;I was in busy with other task to finsh.. So I didnt check this.&lt;br /&gt;&lt;br /&gt;But I didnt find any portal.properties for this key &amp;#34;session.phishing.protected.attributes&amp;#34; in liferay 5.2.3&amp;#34; Hope it may in new version liferay 6.x&lt;br /&gt;&lt;br /&gt;Regards,&lt;br /&gt;Faris</summary>
    <dc:creator>Faris Abdulla</dc:creator>
    <dc:date>2011-06-03T17:07:08Z</dc:date>
  </entry>
  <entry>
    <title>RE: Need to retain my session in portal till the user login</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=8965473" />
    <author>
      <name>Mika Koivisto</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=8965473</id>
    <updated>2011-05-26T19:40:07Z</updated>
    <published>2011-05-26T19:40:07Z</published>
    <summary type="html">&lt;html&gt;&lt;head&gt;&lt;/head&gt;&lt;body&gt;You can also add your ABC session object name to following list:&lt;br&gt;&lt;pre&gt;&lt;code&gt;session.phishing.protected.attributes=HTTPS_INITIAL,LAST_PATH&lt;/code&gt;&lt;/pre&gt;&lt;br&gt;&lt;br&gt;That way you can still have session phishing enabled and retain your session object after login.&lt;/body&gt;&lt;/html&gt;</summary>
    <dc:creator>Mika Koivisto</dc:creator>
    <dc:date>2011-05-26T19:40:07Z</dc:date>
  </entry>
  <entry>
    <title>RE: Need to retain my session in portal till the user login</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=8957995" />
    <author>
      <name>Faris Abdulla</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=8957995</id>
    <updated>2011-05-26T11:00:27Z</updated>
    <published>2011-05-26T11:00:27Z</published>
    <summary type="html">Its great!!.. its working...&lt;br /&gt;&lt;br /&gt;Thanks Srikanth...&lt;br /&gt;&lt;br /&gt;I&amp;#39;ve some more help needed in this ..&lt;br /&gt;&lt;br /&gt;In the case if I want to keep only the known session object &amp;#34;ABC&amp;#34; remaining session object should get killed to prevents phishing.&lt;br /&gt;&lt;br /&gt;How can I achieve this? Which event I need to override?&lt;br /&gt;&lt;br /&gt;When this com.liferay.portal.events.SessionDestroyAction is executed?</summary>
    <dc:creator>Faris Abdulla</dc:creator>
    <dc:date>2011-05-26T11:00:27Z</dc:date>
  </entry>
  <entry>
    <title>RE: Need to retain my session in portal till the user login</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=8956807" />
    <author>
      <name>Srikanth Reddy Sanivarapu</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=8956807</id>
    <updated>2011-05-26T09:08:35Z</updated>
    <published>2011-05-26T09:08:35Z</published>
    <summary type="html">This may help you....&lt;br /&gt;&lt;br /&gt;session.enable.phishing.protection=true... &lt;br /&gt;&lt;br /&gt;Set the above property to false. Thanks.&lt;br /&gt;&lt;br /&gt;Regards,&lt;br /&gt;Srik</summary>
    <dc:creator>Srikanth Reddy Sanivarapu</dc:creator>
    <dc:date>2011-05-26T09:08:35Z</dc:date>
  </entry>
  <entry>
    <title>Need to retain my session in portal till the user login</title>
    <link rel="alternate" href="https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=8956270" />
    <author>
      <name>Faris Abdulla</name>
    </author>
    <id>https://liferay.dev/c/message_boards/find_message?p_l_id=119785294&amp;messageId=8956270</id>
    <updated>2011-05-26T09:04:52Z</updated>
    <published>2011-05-26T09:04:52Z</published>
    <summary type="html">Hi,&lt;br /&gt;&lt;br /&gt;I need to retain session object &amp;#34;ABC&amp;#34; which is created before login. &lt;br /&gt;&lt;br /&gt;Now, the session object which is created before login is not available after login in the portal.&lt;br /&gt;&lt;br /&gt;How can I retain the session until it was killed by my custom action instead of liferay action events?&lt;br /&gt;&lt;br /&gt;Is there any workaround to achieve this.&lt;br /&gt;&lt;br /&gt;Regards,&lt;br /&gt;Faris</summary>
    <dc:creator>Faris Abdulla</dc:creator>
    <dc:date>2011-05-26T09:04:52Z</dc:date>
  </entry>
</feed>
