Re: Cancel button and security

2005-07-21 Thread Przemyslaw Lupinski
Paul, I agree. It will work if you don't forget override cancelled method in every action. The better solution is to do it in BaseAction. Regards, Przemyslaw > Przemyslaw, > > Thanks for pointing this out! I use dispatching > actions in my application and each one has a cancelled > method. Under

Re: Cancel button and security

2005-07-16 Thread Paul Benedict
Przemyslaw, Thanks for pointing this out! I use dispatching actions in my application and each one has a cancelled method. Under this paradigm, I don't think there is any danger for me. Would you agree? Thanks, Paul Start yo

Re: Cancel button and security

2005-07-15 Thread Bryan Hanks
You are absolutely correct Przemyslaw. Realizing that form validation is cursory at best and easily bypassed at worst is a good approach. One of the hard-learned lessons that (it seems) few developers get is that _ALL_ data received from the user is suspect, not only in content but in type. For e