Author: remm Date: Mon Apr 16 16:30:03 2007 New Revision: 529442 URL: http://svn.apache.org/viewvc?view=rev&rev=529442 Log: - Add session browser capabilities in the manager. Let me know if it creates problems (I checked XSS to some extent to, but please double check if you can). - Submitted by Cédrik Lime.
Added: tomcat/tc6.0.x/trunk/webapps/manager/sessionDetail.jsp Added: tomcat/tc6.0.x/trunk/webapps/manager/sessionDetail.jsp URL: http://svn.apache.org/viewvc/tomcat/tc6.0.x/trunk/webapps/manager/sessionDetail.jsp?view=auto&rev=529442 ============================================================================== --- tomcat/tc6.0.x/trunk/webapps/manager/sessionDetail.jsp (added) +++ tomcat/tc6.0.x/trunk/webapps/manager/sessionDetail.jsp Mon Apr 16 16:30:03 2007 @@ -0,0 +1,132 @@ +<?xml version="1.0" encoding="ISO-8859-1"?> +<[EMAIL PROTECTED] session="false" contentType="text/html; charset=ISO-8859-1" %> +<[EMAIL PROTECTED] import="java.util.Enumeration" %> +<[EMAIL PROTECTED] import="javax.servlet.http.HttpSession" %> +<[EMAIL PROTECTED] import="org.apache.catalina.Session" %> +<[EMAIL PROTECTED] import="org.apache.catalina.manager.JspHelper" %> +<!DOCTYPE html + PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" + "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> +<%--!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" + "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"--%> + +<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en"> +<% String path = (String) request.getAttribute("path"); + Session currentSession = (Session)request.getAttribute("currentSession"); + HttpSession currentHttpSession = currentSession.getSession(); + String currentSessionId = currentSession.getId(); + String submitUrl = ((HttpServletRequest)pageContext.getRequest()).getRequestURL().toString(); +%> +<head> + <meta http-equiv="content-type" content="text/html; charset=iso-8859-1"/> + <meta http-equiv="pragma" content="no-cache"/><!-- HTTP 1.0 --> + <meta http-equiv="cache-control" content="no-cache,must-revalidate"/><!-- HTTP 1.1 --> + <meta http-equiv="expires" content="0"/><!-- 0 is an invalid value and should be treated as 'now' --> + <meta http-equiv="content-language" content="en"/> + <meta name="author" content="Cedrik LIME"/> + <meta name="copyright" content="copyright 2005-2007 the Apache Software Foundation"/> + <meta name="robots" content="noindex,nofollow,noarchive"/> + <title>Sessions Administration: details for <%= currentSessionId %></title> +</head> +<body> +<h1>Details for Session <%= JspHelper.escapeXml(currentSessionId) %></h1> + +<table style="text-align: left;" border="0"> + <tr> + <th>Session Id</th> + <td><%= currentSessionId %></td> + </tr> + <tr> + <th>Guessed Locale</th> + <td><%= JspHelper.guessDisplayLocaleFromSession(currentSession) %></td> + </tr> + <tr> + <th>Guessed User</th> + <td><%= JspHelper.guessDisplayUserFromSession(currentSession) %></td> + </tr> + <tr> + <th>Creation Time</th> + <td><%= JspHelper.getDisplayCreationTimeForSession(currentSession) %></td> + </tr> + <tr> + <th>Last Accessed Time</th> + <td><%= JspHelper.getDisplayLastAccessedTimeForSession(currentSession) %></td> + </tr> + <tr> + <th>Session Max Inactive Interval</th> + <td><%= JspHelper.secondsToTimeString(currentSession.getMaxInactiveInterval()) %></td> + </tr> + <tr> + <th>Used Time</th> + <td><%= JspHelper.getDisplayUsedTimeForSession(currentSession) %></td> + </tr> + <tr> + <th>Inactive Time</th> + <td><%= JspHelper.getDisplayInactiveTimeForSession(currentSession) %></td> + </tr> + <tr> + <th>TTL</th> + <td><%= JspHelper.getDisplayTTLForSession(currentSession) %></td> + </tr> +</table> + +<p style="text-align: center;"><button type="button" onclick="window.location.reload()">Refresh</button></p> + +<div class="error"><%= JspHelper.escapeXml(request.getAttribute("error")) %></div> +<div class="message"><%= JspHelper.escapeXml(request.getAttribute("message")) %></div> + +<table style="text-align: left;" border="1" cellpadding="2" cellspacing="2"> +<% int nAttributes = 0; + Enumeration attributeNamesEnumeration = currentHttpSession.getAttributeNames(); + while (attributeNamesEnumeration.hasMoreElements()) { + attributeNamesEnumeration.nextElement(); + ++nAttributes; + } +%> + <caption style="font-variant: small-caps;"><%= JspHelper.formatNumber(nAttributes) %> attributes</caption> + <thead> + <tr> + <th>Remove Attribute</th> + <th>Attribute name</th> + <th>Attribute value</th> + </tr> + </thead> + <%--tfoot> + <tr> + <td colspan="3" style="text-align: center;"> + TODO: set Max Inactive Interval on sessions + </td> + </tr> + </tfoot--%> + <tbody> +<% attributeNamesEnumeration = currentHttpSession.getAttributeNames(); + while (attributeNamesEnumeration.hasMoreElements()) { + String attributeName = (String) attributeNamesEnumeration.nextElement(); +%> + <tr> + <td align="center"><form action="<%= submitUrl %>"><div><input type="hidden" name="path" value="<%= path %>" /><input type="hidden" name="action" value="removeSessionAttribute" /><input type="hidden" name="sessionId" value="<%= currentSessionId %>" /><input type="hidden" name="attributeName" value="<%= attributeName %>" /><input type="submit" value="Remove" /></div></form></td> + <td><%= JspHelper.escapeXml(attributeName) %></td> + <td><% Object attributeValue = currentHttpSession.getAttribute(attributeName); %><span title="<%= attributeValue == null ? "" : attributeValue.getClass().toString() %>"><%= JspHelper.escapeXml(attributeValue) %></span></td> + </tr> +<% } // end while %> + </tbody> +</table> + +<p style="text-align: center;"><button type="button" onclick="window.close()">Close window</button></p> + +<%--div style="display: none;"> +<p> + <a href="http://validator.w3.org/check?uri=referer"><img + src="http://www.w3.org/Icons/valid-html401" + alt="Valid HTML 4.01!" height="31" width="88"></a> + <a href="http://validator.w3.org/check?uri=referer"><img + src="http://www.w3.org/Icons/valid-xhtml10" + alt="Valid XHTML 1.0!" height="31" width="88" /></a> + <a href="http://validator.w3.org/check?uri=referer"><img + src="http://www.w3.org/Icons/valid-xhtml11" + alt="Valid XHTML 1.1!" height="31" width="88" /></a> +</p> +</div--%> + +</body> +</html> \ No newline at end of file --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]