Databases Reference
In-Depth Information
Therefore, session state protection should always be on.
Session protection enabled is performed in two steps. In
the later sections of this chapter, you will learn how to
turn on session state protection.
The following screenshot shows a URL without session state protection turned on:
A URL consists of the following components:
F?P= APP PAGE: SESSION: REQUEST: DEBUG: CLEAR CACHE: AMES ITEM:
ITEM VALUES
The
EmpID
attribute at the URL can be changed, and when a correct value for
EmpID
is entered, the information about the other employee is shown.
The following screenshot shows a URL with session state protection turned on:
The
EmpID
value at the URL cannot be changed. Any attempt to do so will end in an
error message.
Session State Protection is accomplished in two steps. In the irst step, the feature is
turned on, as follows:
The navigation path is:
Edit application properties | Security | Session
State Protection
.
