how to store an ArrayList<string> into cookies?

[perplexingtrax]

hi, im currently deisgning a shopping basket and have set it up so that during the session it stores the product code and console type in a an arrayList <String> and displays the full details of the game with these two values from the jdbc.
The problem i have is how do you go about storing these as cookies? i have it set up to store the sessionID, productCode, consoleType, userName in session and longLived cookies.
now, after the user has gone through the checkout when storing the cookies from the ArrayList<string> its adds a new set cookies each time for all the values. so if the user has bought 2 items in effect will produc 8 cookies, is this the correct way of doing it? i imagine not because theres is a max number of cookies of 20 i think? so you would set up an array of productCodes, consoleType etc then send them in as Strings to each cookie?
also from this, after the cookies are stored and the user has registered how do you go about retrieving the items releveant to that session and user when they next log in?

any help would be much appreciated cheers

[neilcoffey]

Are you programming a Servlet? Generally, you rarely need to program cookies directly. I would suggest looking at the Servlet Session API (link is to one of my tutorials). The Session API lets you handle associating arbitrary objects (in your case, array lists of strings, for example) with sessions.

[perplexingtrax]

yes, using servlets through tomcat. just had a quick scan of the link, and it seems i only have to store the session and not individual attributes. cheers, i'll have a play and see if that helps

[neilcoffey]

Not only do you not have to, but for security reasons, you actually shouldn't generally store data in a cookie in a form that the user can manipulate (unless you're also planning to build in your own security checks to get round this). The Session API will handle this kind of issue for you.

[perplexingtrax]

it's an assignment and security isnt really a concern at this stage but best to learn correct methods rather than pick up bad habbits, cheers

[perplexingtrax]

do you have anymore info on this method
DBUser user = fetchFromDatabaseIfValid(username, password);
because i need implement req.getSession() now cheers

[neilcoffey]

Oh, that's just a made up method name: the idea is that in your application, you would have some database of users, and you'd have some method to fetch a user from your database. So you just need to implement such a thing.

If you're not trying to get bogged down in databases for now but just want to get the logic of your shopping cart working, then just create some simple class to represent a user (which in the long run would be a wrapper class around a row in a database), and make a method that, when passed in the correct user name and password, will return an instance of your user object.

[perplexingtrax]

i seems to have got things working but after i have purchased items and start browsing again OR if i have logged in i get some null pointer exception to this bit of code...sessionArrayGames.add(productCode);
any ideas why this is happening? cheers