You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Philipp Leusmann <ph...@post.rwth-aachen.de> on 2003/08/28 20:29:24 UTC

General session question

Hi,

will a session timeout when one servlet takes longer to process than the
session-timeout? For example for uploading-servlets.

Thanks,
 Philipp

Re: AW: General session question

Posted by Tim Funk <fu...@joedog.org>.
1) Denial of service attack.
2) If the upload is a large file and you try to buffer the file into memory 
instead of writing it directly as a temp file to disk - you can get an a DOS 
for Out of memory.
3) If you don't take care in the writing to disk, you can DOS yourself by 
filling up the filesystem

-Tim

Philipp Leusmann wrote:

> Ok, thanks for the answer.
> But what would my worries be?
> 
> Philipp
> 
> 
>>-----Ursprüngliche Nachricht-----
>>Von: news [mailto:news@sea.gmane.org]Im Auftrag von Bill Barker
>>Gesendet: Freitag, 29. August 2003 05:15
>>An: tomcat-user@jakarta.apache.org
>>Betreff: Re: General session question
>>
>>
>>The short answer is: yes.
>>
>>However (unless you've enabled the uploadTimeout), this is the
>>least of your
>>worries with an upload that will take several minutes.
>>
>>"Philipp Leusmann" <ph...@post.rwth-aachen.de> wrote in message
>>news:LIEDIHNBCKLJJMEOCGDIKECGDOAA.philipp.leusmann@post.rwth-aachen.de...
>>
>>>Hi,
>>>
>>>will a session timeout when one servlet takes longer to process than the
>>>session-timeout? For example for uploading-servlets.
>>>
>>>Thanks,
>>> Philipp
>>
>>
>>
>>
>>---------------------------------------------------------------------
>>To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
>>For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>>
>>
>>
> 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> 
>

AW: General session question

Posted by Philipp Leusmann <ph...@post.rwth-aachen.de>.
Ok, thanks for the answer.
But what would my worries be?

Philipp

> -----Ursprüngliche Nachricht-----
> Von: news [mailto:news@sea.gmane.org]Im Auftrag von Bill Barker
> Gesendet: Freitag, 29. August 2003 05:15
> An: tomcat-user@jakarta.apache.org
> Betreff: Re: General session question
>
>
> The short answer is: yes.
>
> However (unless you've enabled the uploadTimeout), this is the
> least of your
> worries with an upload that will take several minutes.
>
> "Philipp Leusmann" <ph...@post.rwth-aachen.de> wrote in message
> news:LIEDIHNBCKLJJMEOCGDIKECGDOAA.philipp.leusmann@post.rwth-aachen.de...
> > Hi,
> >
> > will a session timeout when one servlet takes longer to process than the
> > session-timeout? For example for uploading-servlets.
> >
> > Thanks,
> >  Philipp
>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>
>

Re: General session question

Posted by Bill Barker <wb...@wilshire.com>.
The short answer is: yes.

However (unless you've enabled the uploadTimeout), this is the least of your
worries with an upload that will take several minutes.

"Philipp Leusmann" <ph...@post.rwth-aachen.de> wrote in message
news:LIEDIHNBCKLJJMEOCGDIKECGDOAA.philipp.leusmann@post.rwth-aachen.de...
> Hi,
>
> will a session timeout when one servlet takes longer to process than the
> session-timeout? For example for uploading-servlets.
>
> Thanks,
>  Philipp