anks!
>
>
>
> --
> View this message in context:
> http://struts.1045723.n5.nabble.com/S2-actions-responding-only-to-POST-GET-methods-tp3486750p5712797.html
> Sent from the Struts - User mailing list archive at Nabble.com.
>
> ---
Hello everyone!
I am using Struts 1.1 and I wish to know what's the better solution to force
the POST method (without GET).
I need avoid CSRF attacks.
Thanks!
--
View this message in context:
http://struts.1045723.n5.nabble.com/S2-actions-responding-only-to-POST-GET-methods-tp3486750p57
谢冬鸣 wrote:
> can i directly send mail to "user@struts.apache.org" from my gmail and all
> the mailling list users will see it ?
Yes, like this one.
Dave
-
To unsubscribe, e-mail: user-unsubscr...@struts.apache.org
For additiona
m/Struts---User-f206.html) to
>>> search,
>>> read, post new topics, and reply to topics on the Struts user mailing
>> list.
>>> After I subscribed (see
>>> http://www.nabble.com/mailing_list/MailingListOptions.jtp?forum=206) to
>>> th
see
> > http://www.nabble.com/mailing_list/MailingListOptions.jtp?forum=206) to
> > the
> > user mailing list I just use the Post New Message link that is at the top
> > of
> > the nabble.com Struts User page to post a new topic.
> >
> >
> > --
> >
user mailing list.
>
> After I subscribed (see
> http://www.nabble.com/mailing_list/MailingListOptions.jtp?forum=206) to
> the
> user mailing list I just use the Post New Message link that is at the top
> of
> the nabble.com Struts User page to post a new topic.
>
>
the
user mailing list I just use the Post New Message link that is at the top of
the nabble.com Struts User page to post a new topic.
--
View this message in context:
http://www.nabble.com/How-To-Post-A-Message-To-the-Struts-User-Mailing-List-tp25230979p25230979.html
Sent from the Struts - User
I guess I assumed that any Login (or any sensitive information) action
would be secured with SSL. If you have an SSL connection between you
and your server, any packets sniffed would at least be encrypted. The
URL would probably still show up in a log somewhere, which makes GET
requests over SSL so
Hi Wes,
thanks for the response,
i've been wondering myself where would be any difference,
but couldn't find any, from the server point of view.
Still the proxies logs are a real threat.
If some one else is reading it, don't think that POST is secure,
one can sniff anything from post.
Best greetin
On a get request, the password would be present in the URL -
http://localhost:8080/yourApp/Login.action?username=username&password=yourpassword
This is probably not a *huge* deal, but there are places where
requests might be logged... Proxy servers, etc.
-Wes
2008/10/29 Paweł Wielgus <[EMAIL PR
Hi Hernán,
> Of course, you should never use GET when submitting a password, but that's a
> privacy concern you (developer) just deal when writing your jsp.
could You elaborate more about the reason why?
Best greetings,
Paweł Wielgus.
--
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
--
View this message in context:
http://www.nabble.com/-S2--actions-responding-only-to-POST-GET-methods-tp20200721p20215043.html
Sent fr
Don is right.
No security issue here (and absolutely nothing to do with PHP's
register_globals).
I see little use in trying to discriminate between GET and POST in the
action side,
at least not in relation with security.
Of course, you should never use GET when submitting a password, but that's a
p
oblem" didn't return any reasonable
> threads.
>
> Thank you for your suggestions.
> --
> View this message in context:
> http://www.nabble.com/-S2--actions-responding-only-to-POST-GET-methods-tp20200721p20200721.html
> Sent from the Struts - User mailing list archive at
bles the same way and in newer versions is
>> >> deprectated,
>> >> or even not present). Even in servlets there are methods like doPost,
>> >> doGet,
>> >> doXXX, so you can distinguish servlet's behavior for different types
>> of
>> &
t; doXXX, so you can distinguish servlet's behavior for different types of
> >> requests. I'm pretty sure this has already been solved here, but search
> >> for
> >> keywords like "get post method problem" didn't return any reasonable
> >> thr
ervlets there are methods like doPost,
>> doGet,
>> doXXX, so you can distinguish servlet's behavior for different types of
>> requests. I'm pretty sure this has already been solved here, but search
>> for
>> keywords like "get post method problem"
of
> requests. I'm pretty sure this has already been solved here, but search for
> keywords like "get post method problem" didn't return any reasonable
> threads.
>
> Thank you for your suggestions.
> --
> View this message in context:
> http://www.nabble
--
View this message in context:
http://www.nabble.com/-S2--actions-responding-only-to-POST-GET-methods-tp20200721p20200721.html
Sent from the Struts - User mailing list archive at Nabble.com.
-
To unsubscribe, e-mail: [EMAIL PRO
--- Steven Liu <[EMAIL PROTECTED]> wrote:
> To post
Perchance to read, ay there's the rub.
d.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To post
Hi everybody,
Here is my code, the result isn't posted inside the "select list", but
outwards, why?
Regards,
Nabil.
Le lundi 06 novembre 2006 à 11:05 -0500, Ed Griebel a écrit :
> You need to use either or to ite
You need to use either or to iterate over your
beans.
This deals with arrays but is useful for how to use the iterator and how to
populate a select list: http://husted.com/struts/tips/006.html
HTH,
-ed
On 11/6/06, nalimoussa <[EMAIL PROTECTED]> wrote:
Hi everybody,
I have to create a map i
Hi everybody,
I have to create a map in a bean which recovers the data of a table, I
would like post(integrate) these data in a "select list" of a JSP?
Regards,
Nabil.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For addition
Michael,
> -Ursprüngliche Nachricht-
> Von: Michael Jouravlev [mailto:[EMAIL PROTECTED]
> Gesendet: Mittwoch, 3. Mai 2006 19:31
> An: Struts Users Mailing List; [EMAIL PROTECTED]
> Betreff: Re: How to POST data to an external site from an action?
>
>
> O
On 5/3/06, Martin Kindler <[EMAIL PROTECTED]> wrote:
Thank you all for answering!
But I seem not to have stated my problem clearly: I know how I can POST to
an uri using Java.
My problem is that I want the user to be redirected (or forwarded) to the
page my action has posted the data to.
The ea
Thank you all for answering!
But I seem not to have stated my problem clearly: I know how I can POST to
an uri using Java.
My problem is that I want the user to be redirected (or forwarded) to the
page my action has posted the data to.
The easy way to handle this is:
put a button on my page by wh
Frank W. Zammetti wrote:
>Hi Martin,
>
>Have a look at Commons HTTPClient:
>
>http://jakarta.apache.org/commons/httpclient/
>
>
I did not know that one, I use webconversation from http://httpunit.org
which real powerful but might be be overkill.
Cheers,
/\/
---
Here's a quick connect using standard java (not tested):
java.net.HttpURLConnection connection;
java.net.URL url;
try {
// Create new URL and connect
url = new URL("http://www.test.com/test.cgi";);
connection = (HttpURLConnection) url.openConnection();
// Setup HTT
Hi Martin,
Have a look at Commons HTTPClient:
http://jakarta.apache.org/commons/httpclient/
This allows you to make various types of HTTP requests, and its easy
enough to do from an Action.
Frank
--
Frank W. Zammetti
Founder and Chief Software Architect
Omnytex Technologies
http://www.omnytex
Hi all,
I'm kind of stuck with a little problem. perhaps someone can help!
I want to include a payment service into my Struts Action 1.2.x based shop.
The payment service needs the information via http POST. The user (my
customer) will authorize the transaction on the site of the payment service.
Hi Wendy
I really apologise to be sending you mail directly. I have been trying to
post on the Struts list for 2 days, but for some reason I cannot manage to
do it. I am registered, and I receive all the postings but mine just won't
show up. I am sending to [EMAIL PROTECTED] I need to p
32 matches
Mail list logo
