RE: Form Security

- From: Ramadi Pearse [mailto:[EMAIL PROTECTED] Sent: 25 June 2005 14:58 To: Struts Users Mailing List Subject: RE: Form Security Mark, Thank you for responding. My focus with these questions is to prevent any unexpected behavior in the application. It is sometimes amazing how hackers are able to

RE: Form Security

Mark, Thank you for responding. My focus with these questions is to prevent any unexpected behavior in the application. It is sometimes amazing how hackers are able to break an application! :) So, with regards to #2, the problem is really not about roles. These actions are already secure, but sti

RE: Form Security

to a page telling them to take a hike. -Original Message- From: Ramadi Pearse [mailto:[EMAIL PROTECTED] Sent: 25 June 2005 05:20 To: user@struts.apache.org Subject: Form Security I have two questions. In thinking about security, there are two uses using Struts forms which I don't know ho

Form Security

I have two questions. In thinking about security, there are two uses using Struts forms which I don't know how to solve. 1. Is it common practice in a web-application to force some actions only through a POST request? For instance, I have a login functionality on my website, and in my browser's a