Home
User Guide
The information contained in this section applies to IBM WebSphere Commerce Version 7.0.0.9 and Feautre Pack 8. The documentation also applies to all subsequent releases and modifications until otherwise indicated in new editions.
Securing
These topics describe the security features of WebSphere Commerce and how to configure these features.
Session management
Browsers and e-commerce sites use HTTP to communicate. HTTP is a stateless protocol, which means that each command is run independently without any knowledge of the commands that came before it. Because it is a stateless protocol, there must be a way to manage sessions between the browser side and the server side.
Using URL rewriting for session management
Use the Configuration Manager to specify how sessions should be managed.

Using URL rewriting for session management

Use the Configuration Manager to specify how sessions should be managed.

Procedure

Open the Configuration Manager.
In the navigation tree for your WebSphere Commerce instance, select WebSphere Commerce > node_name > Commerce > Instance List > instance_name > Instance Properties > Session Management.
Under the General tab on the right, select the appropriate session values including the following:

Enable URL rewriting

Select this check box to use URL rewriting for session management.

Cookie session manager

Select WebSphere Application Server.
Click Apply.
Close the Configuration Manager.
Restart your WebSphere Commerce instance.

After completing the steps in order, you must enable URL rewriting in WebSphere Application Server.