sessionlistener logout problem

[je...@gmx.de]

hi guys,

i have a question regarding my sessionlistener which is implementing
HttpSessionListener and HttpSessionAttributeListener. is is registered in jetspeeds
web.xml
what i want to achieve is to be able to store username, password and
sessionid of jetspeedusers in files, so that i can read this data in php

when a user logs in (->attributeAdded) i can get via reflection the desired
information (e.g. invoking the getUserName and HasLogedIn methods return
MyUser and LoggedIn). this works fine so far.

but when a user logs out, the atrributeReplaced(HttpSessionBindingEvent
event) method is called twice. the first time when invoking the JetspeeBaseUser
methods they return the correct information: anon, not logged in.
but something like one second later it is called again and returns the
userdata from the previously logged in user (e.g. MyUser, LoggedIn) even though
the login screen appears in my browser.

can anybody explain that to me ????

thanks

i use jetspeed 1.4-b3 and tomcat 4.1.27


-- 
COMPUTERBILD 15/03: Premium-e-mail-Dienste im Test
--------------------------------------------------
1. GMX TopMail - Platz 1 und Testsieger!
2. GMX ProMail - Platz 2 und Preis-Qualitätssieger!
3. Arcor - 4. web.de - 5. T-Online - 6. freenet.de - 7. daybyday - 8. e-Post