Search for renderToken() in FormTag.java: http://svn.apache.org/viewvc/struts/action/trunk/taglib/src/main/java/org/apache/struts/taglib/html/FormTag.java?view=markup
Michael. On 5/19/06, temp temp <[EMAIL PROTECTED]> wrote:
What hidden field should I use in jsp to pass the generated token to next action class? Thanks & Regards Manfred Wolff <[EMAIL PROTECTED]> wrote: Hi mr. temp.temp 1. The Action calls saveToken(request); 2. A unique token will be generated and saved in the session and in the jsp as a hidden field. 3. The next action calls |*isTokenValid (request, true); 4. If the token in the request match the token in the session everything is alright. Otherwise the user has gone back and the token in the request is not valid. 5. True means, the token will be reseted. Otherwise you have to reset it on your own with the method resetToken(request). Manfred*| --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------- New Yahoo! Messenger with Voice. Call regular phones from your PC and save big.
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
