import java.io.*; import javax.servlet.*; import javax.servlet.http.*; public class UserManager { /** Session variable pointing to a user object */ public static final String SESSION_MEMBER = "user"; /** Indicates currently logged in (could be just visiting site) */ public static final String SESSION_LOGGEDIN = "loggedin"; public static void login(HttpSession session, User user) { session.putValue(SESSION_LOGGEDIN, "true"); session.putValue(SESSION_MEMBER, user); } public static void logout(HttpSession session) { session.removeValue(SESSION_LOGGEDIN); session.removeValue(SESSION_MEMBER); session.invalidate(); } }