Update README.md

effortlessdevsec · web-flow · commit 05af6c2ed077 · 2021-01-08T10:37:04.000+05:30
diff --git a/README.md b/README.md
@@ -4,6 +4,7 @@ For Java Security
 
 * [Custom Error Page](#Custom-Error)
 * [Restrict File to Access](#forbidden)
+* [Broken Session Managment](#Session-fix)
 
 
 
@@ -31,3 +32,24 @@ Create web.xml and insert below code
   ## forbid.jsp is location of custom error page
 
 ```
+ ## Session-fix
+
+using session
+
+```
+request.getSession(false).invalidate();
+					HttpSession session = request.getSession(true);
+					
+					session.setAttribute("uname", uname);
+					session.setAttribute("pass", pass);
+					
+					response.sendRedirect("welcome.jsp");
+```
+
+on logout 
+```
+HttpSession session = request.getSession();
+		 session.removeAttribute("uname");
+		 session.invalidate();
+		 response.sendRedirect("login.jsp");
+```
