Re: [OT] JSTL : test the first char of a String

[nicolas De Loof]

I've found this way :

 

Not so pretty, but working !

Nico.

nicolas De Loof a écrit :

Hello,

I'm using JSTL and Struts-EL. I would like to test the first char of a 
String.

The string is a URL, and can be a path to some action on my webapp or 
any external URL.
I'd like to test if the url starts with '/' to select the   
attriibute to use : page or href.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[OT] JSTL : test the first char of a String

[nicolas De Loof]

Hello,

I'm using JSTL and Struts-EL. I would like to test the first char of a 
String.

The string is a URL, and can be a path to some action on my webapp or 
any external URL.
I'd like to test if the url starts with '/' to select the   
attriibute to use : page or href.

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: adding items to list in a tile definition using extension

[nicolas De Loof]

OK, I've done it another way :

I put ALL items used in the webapp in a list :


  


...
and I extend it for every page :


 

I use  to get indexes in "locations" (0, 1 & 2) from 
currentLocation" and print ${locations[index].value} in the JSP.

Nico.

Axel Groß a écrit :

On 2004-03-18 at 14:11:43 +0100, nicolas De Loof wrote:
 

Hello,

Is it possible when extending a tile definition to ADD some items to an 
existing list (defined by parent tile definition) ?
   

no, not with the current tiles implementation 
i posted a generic request for solving this a while ago, but didnt get much
answers to it (maybe I should repost)

 

I would like to do this :
My web pages have a top line that describe flow in app, something like 
this :

  home > catalog > search > result

I'm using a tile definition for this using the  and  
tags. But I need to set the full list on every definition. I would like 
to use definition extends mecanism to have a "home" tile definition, 
extend it in a "home.catalog", itself extended by a 
"home.catalog.search" and so on. Every tile definition should only have 
to ADD it's item to the existing list.

Is they're a way to do it ?
   

suppose you should use another tiles:putList for each of the following
extensions and treat the values of them like they were in just one list.
but its evil! should be already in tiles ;)
also you have to decide if want to be able to override old items (then you
just have to implement it)
i.e. (without markup :)
definition name="justOne"
putList name="bla1"
 item name="itemX" value="valueX"
 ...
definition name="alreadyTwo" extends="justOne"
putList name="bla2"
 item name="itemY" value="valueY"
 ...
when using it search for blaN until you don't find that blaN anymor (using
logic:iterate and logic:exists and/or EL syntax)
 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
   

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

adding items to list in a tile definition using extension

[nicolas De Loof]

Hello,

Is it possible when extending a tile definition to ADD some items to an 
existing list (defined by parent tile definition) ?

I would like to do this :
My web pages have a top line that describe flow in app, something like 
this :

   home > catalog > search > result

I'm using a tile definition for this using the  and  
tags. But I need to set the full list on every definition. I would like 
to use definition extends mecanism to have a "home" tile definition, 
extend it in a "home.catalog", itself extended by a 
"home.catalog.search" and so on. Every tile definition should only have 
to ADD it's item to the existing list.

Is they're a way to do it ?

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Using ExpressionEvaluatorManager in Struts Action execute() method

[nicolas De Loof]

Not beeing in a real JSP (your servlet doesn't extend any "JspServlet") 
may cause some troubles to your servlet container.
To evaluate EL expression, you should consider using Jelly and Jexl 
language from jakarta-commons. I did it with success.

Nico.

f. a écrit :

Hi,

I am currently developping custom tags library for my company.

We use ExpressionEvaluatorManager  in our custom tags. That works 
really fine.

But one of our action class will be called from cells in a table of 
data (Html DataTable).
The Web Developper should be able to specify what to put in the 
session under a given name when this
kind of link is clicked. And the way to do that is an expression in 
Expression Language (JSTL).

So my Struts Action code should be able to evaluate the (request 
Parameter) expression
in the Action execute() method to be able to put the right object in 
session before next forward.

I got the Page context with:
PageContext pc = 
javax.servlet.jsp.JspFactory.getDefaultFactory().getPageContext(
  this.getServlet(),request, response, null, true, 4096 , 
false );

I evaluated the expression
  evaluatedDetailRef = 
ExpressionEvaluatorManager.evaluate(null, detailRef, Object.class, pc);

I released the Page Context
  
javax.servlet.jsp.JspFactory.getDefaultFactory().releasePageContext(pc);

And now my servlet container (Jetty) seems crazy and instead of 
processing JSP file and sending result to browser,
it sends JSP source directly to browser 

Does it make sense for you ? Is it crazy to use EL in Action execute( 
) method ??  (Was  an idea  of my Team leader  )
I am stuck. Thanks for your help.

Regards,
Thanks
Denis.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [OT] RE: web.xml DTD for Servlet 2.3 & Struts 1.1

[nicolas De Loof]

Assuming this resources are right :
http://www.searchwin.net/doctype.htm
http://www.blooberry.com/indexdot/html/tagpages/d/doctype.htm
.. I thing the last (optional) part of a DOCTYPE declaration has to be a 
valid URL to the referenced DTD. Perhaps I'm wrong, because I didn't 
found a normative document about this.

Actualy, XML parsers are using this URL to look the Internet for a DTD 
when they don't have a local one for the PUBLIC identifier found in the 
document.

Nico.

Wendy Smoak a écrit :

A long time ago, Craig McClanahan wrote:
 

It is a common misconception that the public identifiers of a DTD like
this *must* actually be working URLs [...].
They are just unique strings of characters that
(often) happen to look like URLs.  
Blame the XML community for that :-).
   



And then Yuan Saul asked:
 

If a local copy of DTD is not available, then an Internet connection
   

is
 

required, in this case, does the URI has to be pointing to a working
   

URL
 

where the DTD file can be retrieved?
   

Which is also my question, but there is no reply in the archives.
Anyone?
Today we got a note from campus IT saying that they believed some
problems in their J2EE apps were related to "code that connects to
http://java.sun.com behind-the-scenes to download various DTD files
related to parsing XML documents."
In addition to whether it happens at all (going out to the internet to
retrieve the DTD) I'm also curious if it's the XML parser, or the
Servlet container, etc.  What component would make the call out to get
the DTD?
I've always wondered...

 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Question about DTDs ...

[nicolas De Loof]

DOCTYPE syntax uses an optional URI for the DTD, so that a validating 
XML parser can download an unknown DTD and validate the document. Struts 
registers local copy of it's configuration DTD to the XML parser 
(struts, tiles & validator). This way they're is no need to have access 
to the Internet 

Nico.

Alain Van Vyve a écrit :

A lot of things have to be parsed : web.xml, struts-config.xml  and so on

so for example, lines like that are already present in our XML files :

http://java.sun.com/j2ee/dtds/web-app_2_2.dtd";>
or


 "http://jakarta.apache.org/struts/dtds/struts-config_1_1.dtd";>



I understand the concept of DTD but
does it mean that each time a XML file is parsed, a connection to SUN 
or Jakarta is established in order to retrieve the DTD ?

Thank's

Alain

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [ANNOUNCE] Struts 1.2.0 Test Build available

[nicolas De Loof]

I've built Struts 1.2.0 from the sources package uising maven 1.0RC1 
without trouble.

When I run "maven site", the generated m-target/docs has no "index.html" 
and "faqs", "proposals", "tiles" and "userGuide" are empty directory. Is 
this a known build problem (waiting for update for an *official* release) ?

Nico.

Martin Cooper a écrit :

The Struts 1.2.0 Test Build is now available here:

http://www.apache.org/~martinc/struts/v1.2.0/

This is the first Struts build being made available following the same
test-and-release process that has been used successfully by the Tomcat
team for some time. It is *not* an official Apache release.
Once feedback has been collected on the stability and general quality of
this build, a determination will be made as to whether it should be
promoted to Alpha status.
--
Martin Cooper
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [RESOVLED] Re: File "/tags/struts-logic" not found

[nicolas De Loof]

If you're using a servlet 2.3 container (most recent servers) you 
doesn't need to configure taglibs in web.xml, they're automatically 
searched by container in your webapp jars.

Just use this in your JSP :
<%@ taglib prefix="logic" 
uri="http://jakarta.apache.org/struts/tags-logic"%>

The URI "http://jakarta.apache.org/struts/tags-logic"; is declared by 
logic taglib in struts.jar

Nico.

Jiin-Her Lu a écrit :

If you use <%@ taglib uri="/tags/struts-logic" prefix="logic" %>
in your jsp files, then you have to specify the mapping in your web.xml file since 
there is no /tags/ folder (in general)  since the *.tld normally located in /WEB-INF/ 
folder.
if you  use <%@ taglib uri="/web-inf/struts-logic" prefix="logic" %>  then if you move 
*tld to folder other than /WEB-INF/ then you have to change all of your JSPs
There is a better way to do it. Instead of doing as above, use following in your jsp,then you don't have to define the mapping in web.xml neither change your jsp

<%@ taglib uri="http://jakarta.apache.org/struts/tags-logic"; prefix="logic" %>





Jiin-Her Lu
(816) 926-2145
 

[EMAIL PROTECTED] 01/30/04 06:17AM >>>
   

Thank you guys,

appartently it was just that in my index page i was reffering to
/tags/struts-logic
rather than /WEB-INF/struts-logic.tld The strange thing is that I did not
make ANY changes between deleting the temp file and reaccessing my app !
Theo

- Original Message - 
From: "Ramachandran" <[EMAIL PROTECTED]>
To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
Sent: Friday, January 30, 2004 5:03 AM
Subject: RE: File "/tags/struts-logic" not found

 

Hi !
No problem will occurs by deleting the files in work folder. If u
restarted the server then it will have new compiled files.
   i thought your tld file for struts-logic is corrupted. So relace
that one. It will work
Ram

-Original Message-
From: shankarr [mailto:[EMAIL PROTECTED] 
Sent: Friday, January 30, 2004 10:20 AM
To: Struts Users Mailing List
Subject: Re: File "/tags/struts-logic" not found

Hi!

I am not much aware of the application's temp directory part.
But, it seems that you have accidentally deleted the struts-logic.tld file
in WEB-INF folder.
Richie

At 01:26 AM 1/30/2004 +, you wrote:

   

Hi all,

I had to delete my application's temporary directory in Tomcat's
\work\Standalone\localhost  because it was not running using my latest
compiled files. Now when I access my application I get the following
 

error
 

and I don't have a clue why that is so! Any ideas?

Thank you for your time,
Theo
HTTP Status 500 -

 

---
-
   

type Exception report

message

description The server encountered an internal error () that prevented it
 

from fulfilling this request.
   

exception

org.apache.jasper.JasperException: File "/tags/struts-logic" not found
 

"To achieve all that is possible, one must attempt the impossible"



-
To unsubscribe, e-mail: [EMAIL PROTECTED] 
For additional commands, e-mail: [EMAIL PROTECTED] 

   

-
To unsubscribe, e-mail: [EMAIL PROTECTED] 
For additional commands, e-mail: [EMAIL PROTECTED] 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Using "bean:write" as a tag's value atrribute

[Nicolas De Loof]

Nico.



> 
> Dear All;
> 
> Using  works properly
> in my jsp page body. But when I want to use it in a tag to fill its
> attribute, it fails.
>  Actually I don't know the syntax of using bean:write, obviously the below
> way is wrong:
> 
> ">
> 
> Using expression is wrong, too:
> 
>   value="<%=%>">
> 
> So how could I use bean:write in my tags?!
> 
> Any help would be greatly appreciated
> Nafise
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Problem with huge session memory and ActionForm

[Nicolas De Loof]

AFAIK ActionForm has a reference to ActionServlet to write to servlet log and to get 
application scoped datas (ie.
getServlet().getServletContext(); )

Nico.


- Original Message - 
From: "Jose Ramon Diaz" <[EMAIL PROTECTED]>
To: "'Struts Users Mailing List'" <[EMAIL PROTECTED]>
Sent: Wednesday, January 28, 2004 3:18 PM
Subject: RE: Problem with huge session memory and ActionForm


>
> Thanks Shirish.
> That´s the solution we are trying now, but  I still don´t understand why an
> ActionForm has a reference to the ActionServlet.
> Does anybody know, please? Or am I missing something?
>
> thanks!
>
>
> > -Mensaje original-
> > De: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]
> > Enviado el: miércoles, 28 de enero de 2004 14:35
> > Para: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> > Asunto: RE: Problem with huge session memory and ActionForm
> >
> >
> > Why not change those forms to request scope instead?Where
> > ever feasible I mean.If any data is not shared across pages
> > in a wizard like flow, just put that form in request.This
> > should be applicable to 90% of the cases.
> >
> > But It may not be as simple as that.You may have to retest
> > entire application because of that.
> >
> > HTH.
> > regards,
> > Shirish
> >
> > -Original Message-
> > From: Jose Ramon Diaz [mailto:[EMAIL PROTECTED]
> > Sent: Wednesday, January 28, 2004 1:48 PM
> > To: 'Struts Users Mailing List'
> > Subject: Problem with huge session memory and ActionForm
> >
> >
> >
> > Hi all,
> >
> > We have detected a problem with the amount of memory we
> > use in the session
> > when we use classes extending org.apache.struts.action.ActionForm and
> > DynaActionForm too.
> > We are using 9iAS 9.0.3.
> > We take a look to the memory using JPRobe profiler, and
> > we see that the
> > forms stored in session (we define the scope to session in
> > struts-config.xml
> > for an action) are using more than 20Mb(!!)
> > Those actionForms have a reference to ActionServlet in
> > servlet attribute.
> >
> > Of course, this is a lot of memory to have several
> > hundreds of users. I
> > imagine this is not a Struts bug, and please help us to detect what´s
> > happening or which is the error in our code.
> >
> > Thanks a lot.
> >
> > Jose R.
> > 
> > E-mail: [EMAIL PROTECTED] 
> > Editorial Aranzadi: www.aranzadi.es 
> > Camino de Galar, 15
> > 31190- Cizur Menor - SPAIN
> > Tlfno.: +34 948 297297 Fax: +34 948 297200
> > __
> > Este e-mail y cualquier documento anexo contienen información
> > privada y
> > confidencial única y exclusivamente para el destinatario. Si
> > usted no es el
> > destinatario, no tiene autorización para leer, copiar, usar o
> > distribuir el
> > e-mail y el/los documento anexos. En caso de haber recibido esta
> > comunicación por error, le rogamos que lo remita al emisor y
> > lo destruya
> > posteriormente.
> > This e-mail and any attachment contain information, which is
> > private and
> > confidential and is intended for the addressee only. If you are not an
> > addressee, you are not authorized to read, copy, use or
> > distribute this
> > communication. If you have received this e-mail in error,
> > please notify the
> > sender by return e-mail.
> >
> >
> >
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
>
>





> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Problem with huge session memory and ActionForm

[Nicolas De Loof]

ActionForm has this attribute :
protected transient ActionServlet servlet

All ActionForms share the same ActionServlet instance. As this attribute is transient, 
it will not be serialized if form
is put in session (and session itself is serialized).

So I think the "session size" is not well computed by JPRobe profiler, as every 
referenced objet are included in size
computation, even if they're shared between objects or declared transient.

A better way sould be to run the app without any session created, get JVM memory usage 
(mem1), then open N user
sessions, and get JVM memory usage (mem2). (mem2 - mem1) / N is *real* session size.

Nico.



Why not change those forms to request scope instead?Where ever feasible I mean.If any 
data is not shared across pages in
a wizard like flow, just put that form in request.This should be applicable to 90% of 
the cases.

But It may not be as simple as that.You may have to retest entire application because 
of that.

HTH.
regards,
Shirish

-Original Message-
From: Jose Ramon Diaz [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 28, 2004 1:48 PM
To: 'Struts Users Mailing List'
Subject: Problem with huge session memory and ActionForm



Hi all,

We have detected a problem with the amount of memory we use in the session
when we use classes extending org.apache.struts.action.ActionForm and
DynaActionForm too.
We are using 9iAS 9.0.3.
We take a look to the memory using JPRobe profiler, and we see that the
forms stored in session (we define the scope to session in struts-config.xml
for an action) are using more than 20Mb(!!)
Those actionForms have a reference to ActionServlet in servlet attribute.

Of course, this is a lot of memory to have several hundreds of users. I
imagine this is not a Struts bug, and please help us to detect what´s
happening or which is the error in our code.

Thanks a lot.

Jose R.

E-mail: [EMAIL PROTECTED] 
Editorial Aranzadi: www.aranzadi.es 
Camino de Galar, 15
31190- Cizur Menor - SPAIN
Tlfno.: +34 948 297297 Fax: +34 948 297200
__
Este e-mail y cualquier documento anexo contienen información privada y
confidencial única y exclusivamente para el destinatario. Si usted no es el
destinatario, no tiene autorización para leer, copiar, usar o distribuir el
e-mail y el/los documento anexos. En caso de haber recibido esta
comunicación por error, le rogamos que lo remita al emisor y lo destruya
posteriormente.
This e-mail and any attachment contain information, which is private and
confidential and is intended for the addressee only. If you are not an
addressee, you are not authorized to read, copy, use or distribute this
communication. If you have received this e-mail in error, please notify the
sender by return e-mail.




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Response not XHTML-comliant when using

[Nicolas De Loof]

Put  in any tiles or includes.

Nico.

> Mark Lowe  talk21.com> writes:
> 
> > 
> > Put  in any tiles or includes.
> > 
> 
> That does not work for me, 
> because it only adds additional  elements.
> 
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Regarding :

[Nicolas De Loof]

Use this :



...


They're is a JSTL way to do this too, but I don't use it so cannot tell you how.
Nico.

> 
> 
> - Original Message - 
> From: "Ramachandran" <[EMAIL PROTECTED]>
> To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
> Sent: Wednesday, January 28, 2004 1:43 PM
> Subject: Regarding : 
> 
> 
> > 
> > Hi All,
> >Can any one please tell me, how to assign a values to a string
> > using 
> > 
> > Example:
> > 
> > 
> > 
> >In this iterator, i am having values in the name
> > 'maxreqiddetails" as primary_skill and location.
> > 
> >I know how to print the values...by using< bean:write
> > name="maxrediddetail" property="primary_skill"/>
> > 
> > But i wanto assing those values to a String. How can i do that one.
> > 
> > Please anu body having any idea plase reply me
> > 
> > 
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> > 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: White space problem

[Nicolas De Loof]

You can use the  tag from jakarta taglibs

Nico.



Hi all
I am using struts with jstl. I have a problem that is a bit annoying.
In the navigation jsp on one of my sites I have 2 nested c:forEach tags that have c:if 
tags inside them. If a bean
element meets the c:if condition
it gets c:out to the page, if not the loop skips over it until all the outer c:forEach 
beans have been looped.

The problem is however when the c:if condition is not met a white line is written out 
by the c:forEach (ie one white
line for each iteration regardless of the c:if condition). This ends up with a MASS of 
white space on the page. Is there
anyway to stop the c:forEach writing out the white space ?

tia
Chris

***
This e-mail and its attachments are confidential
and are intended for the above named recipient
only. If this has come to you in error, please
notify the sender immediately and delete this
e-mail from your system.
You must take no action based on this, nor must
you copy or disclose it or any part of its contents
to any person or organisation.
Statements and opinions contained in this email may
not necessarily represent those of Littlewoods.
Please note that e-mail communications may be monitored.
The registered office of Littlewoods Limited and its
subsidiaries is 100 Old Hall Street, Liverpool, L70 1AB.
Registered number of Littlewoods Limited is 262152.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Logic:iterate and logic:equalquestion

[Nicolas De Loof]

Solution 1 : 

Active
...

Solution 2 : 
Active
...


Nico.


> Hi all,
> I need to use the logic:equal inside a logic iterate..and I am
> Having problems..
> My case is that I hae in an ActionForm an HashMap property which
> contains
> Pairs of  String, MyObject.  My object has a Boolean property called
> status
> 
> What I want to do is to loop thru all the objects in my hashmap and, if
> the property status has a value of true I want to display button A,
> while if it is false I want to display button B.
> 
> For testing purposes I am now displaying some text...
> 
> 
> I tried with following loop, but seems that is not working properly
> 
> // Loop thru all the objects contained in the hashmap
>  
>   
>  
> 
> // Here I got myObject   , and its property 'type'
> 
>  
>  
>  
>
> // Now I should reuse MyObject herebut below code raises
> // exception (obviously)
> 
>  value="true">Active
>  value="false">Inactive
>  
>
>  
> 
> 
> I believe I should go for a bean:define  tag but I m not sure how to use
> it
> 
> Anyone can help?
> 
> Thanx in advance and regards
> marco
> 
> 
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [OT] Classloader troubles

[Nicolas De Loof]

Api is in a separate jar (api.jar) that is both in webapp & commons :
when I don't put it in commons, I get a NoClassDefFoundError from line (1) :

Class clazz = Class.forName(className);

I can't exclude it from webapp (WEB-INF/lib) as it is part of webapp with the 
production implementation jar.

I need some way to force ClassLoading to search webapp first, even when it delegates a 
class search to commons
ClassLoader. Perhaps they're is no solution...

Nico.


> Where is the JAR file that contains IExternalSystem?
>
> Quoting Nicolas De Loof <[EMAIL PROTECTED]>:
>
> > the webapp hasn't trouble to load ExternalSystemMockImpl. It uses reflexion
> > to do it from some configuration data that
> > is use to set implementation (production | mock).
> >
> > The problem is that the resulting object has to be casted to an interface
> > from the API : IExternalSystem:
> >
> > (1)Class clazz = Class.forName(className);
> > (2)return (IExternalSystem) clazz.newInstance();
> >
> > from webapp, I think IExternalSystem is loaded by webapp ClassLoader. As
> > ExternalSystemMockImpl is loaded from tomcat
> > "commons" ClassLoader, it doesn implements the IExternalSystem loaded by this
> > commons-ClassLoader, that cannot be casted
> > in IExternalSystem  loaded by webapp-ClassLoader.
> >
> > I get a ClassCastException on line 2.
> >
> > Nico.
> >
> >
> >
> > > If ExternalSystemMockImpl is contained in a JAR file that's in
> > > $CATALINA_HOME/common/lib, I don't see why the app wouldn't be able to load
> > it.
> > > For example, I've got a JAR file for the Oracle JDBC driver in common/lib
> > and I
> > > can do the following just fine in a JSP:
> > >
> > > <%
> > > ClassLoader cl = getClass().getClassLoader();
> > > Class clazz = cl.loadClass("oracle.jdbc.OracleDriver");
> > > Object obj = clazz.newInstance();
> > > %>
> > >
> > > If there's code in the external JAR file that needs to make use of a
> > class
> > > loader, it should probably use the result of
> > > Thread.currentThread().getContextClassLoader(). Can you provide a little
> > more
> > > detail on how the app is using reflection to locate
> > ExternalSystemMockImpl?
> > >
> > > Quoting Nicolas De Loof <[EMAIL PROTECTED]>:
> > >
> > > > Hi all,
> > > >
> > > > I'm posting on Struts list because I know they're is lot's of J2EE
> > experts
> > > > here.
> > > >
> > > > I want to test my webapp on Tomcat, but it depends on some external
> > system.
> > > > I've got a jar that emulates it. When I
> > > > package it with the webapp (WEB-INF/lib) it works fine.
> > > >
> > > > I would like to test the webapp packaged without this emulator jar. I
> > tried
> > > > putting it in $TOMCAT/common/lib. I get a
> > > > ClassCastException. I think it comes from this :
> > > >
> > > > webapp requires the external API, let's say a class named
> > "ExternalSystem".
> > > > It is configured to search for an
> > > > implementation class named "ExternalSystemMockImpl" (using reflexion
> > API).
> > > >
> > > > Webapp classloader doesn't find it, and delegate class searh to it's
> > parent
> > > > classloader (tomcat ones). Parent
> > > > classloader finds the class from my emulator jar, run it and return
> > some
> > > > "MockResult" object, that implements
> > > > "ExternalResult" from the external API
> > > >
> > > > Calling webapp tries to cast resulting object to "ExternalResult", class
> > that
> > > > is visible to webapp classloader.
> > > >
> > > > Then my code is doing :
> > > >
> > > > ExternalResult result = (ExternalResult) obj;
> > > >
> > > > where obj is my MockResult instance, that implements ExternalResult
> > from
> > > > parent-Classloader, and casting it to a
> > > > webapp-Classloader ExternalResult fails !
> > > >
> > > >
> > > > How can I solve this ClasLoader conflict ?
> > > >
> > > > Nico.
> > >
> > > -- 
> > > Kris Schneider <mailto:[EMAIL PROTECTED]>
> > > D.O.Tech   <http://www.dotech.com/>
>
> -- 
> Kris Schneider <mailto:[EMAIL PROTECTED]>
> D.O.Tech   <http://www.dotech.com/>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [OT] Classloader troubles

[Nicolas De Loof]

the webapp hasn't trouble to load ExternalSystemMockImpl. It uses reflexion to do it 
from some configuration data that
is use to set implementation (production | mock).

The problem is that the resulting object has to be casted to an interface from the API 
: IExternalSystem:

(1)Class clazz = Class.forName(className);
(2)return (IExternalSystem) clazz.newInstance();

from webapp, I think IExternalSystem is loaded by webapp ClassLoader. As 
ExternalSystemMockImpl is loaded from tomcat
"commons" ClassLoader, it doesn implements the IExternalSystem loaded by this 
commons-ClassLoader, that cannot be casted
in IExternalSystem  loaded by webapp-ClassLoader.

I get a ClassCastException on line 2.

Nico.



> If ExternalSystemMockImpl is contained in a JAR file that's in
> $CATALINA_HOME/common/lib, I don't see why the app wouldn't be able to load it.
> For example, I've got a JAR file for the Oracle JDBC driver in common/lib and I
> can do the following just fine in a JSP:
>
> <%
> ClassLoader cl = getClass().getClassLoader();
> Class clazz = cl.loadClass("oracle.jdbc.OracleDriver");
> Object obj = clazz.newInstance();
> %>
>
> If there's code in the external JAR file that needs to make use of a class
> loader, it should probably use the result of
> Thread.currentThread().getContextClassLoader(). Can you provide a little more
> detail on how the app is using reflection to locate ExternalSystemMockImpl?
>
> Quoting Nicolas De Loof <[EMAIL PROTECTED]>:
>
> > Hi all,
> >
> > I'm posting on Struts list because I know they're is lot's of J2EE experts
> > here.
> >
> > I want to test my webapp on Tomcat, but it depends on some external system.
> > I've got a jar that emulates it. When I
> > package it with the webapp (WEB-INF/lib) it works fine.
> >
> > I would like to test the webapp packaged without this emulator jar. I tried
> > putting it in $TOMCAT/common/lib. I get a
> > ClassCastException. I think it comes from this :
> >
> > webapp requires the external API, let's say a class named "ExternalSystem".
> > It is configured to search for an
> > implementation class named "ExternalSystemMockImpl" (using reflexion API).
> >
> > Webapp classloader doesn't find it, and delegate class searh to it's parent
> > classloader (tomcat ones). Parent
> > classloader finds the class from my emulator jar, run it and return some
> > "MockResult" object, that implements
> > "ExternalResult" from the external API
> >
> > Calling webapp tries to cast resulting object to "ExternalResult", class that
> > is visible to webapp classloader.
> >
> > Then my code is doing :
> >
> > ExternalResult result = (ExternalResult) obj;
> >
> > where obj is my MockResult instance, that implements ExternalResult from
> > parent-Classloader, and casting it to a
> > webapp-Classloader ExternalResult fails !
> >
> >
> > How can I solve this ClasLoader conflict ?
> >
> > Nico.
>
> -- 
> Kris Schneider <mailto:[EMAIL PROTECTED]>
> D.O.Tech   <http://www.dotech.com/>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[OT] Classloader troubles

[Nicolas De Loof]

Hi all,

I'm posting on Struts list because I know they're is lot's of J2EE experts here.

I want to test my webapp on Tomcat, but it depends on some external system. I've got a 
jar that emulates it. When I
package it with the webapp (WEB-INF/lib) it works fine.

I would like to test the webapp packaged without this emulator jar. I tried putting it 
in $TOMCAT/common/lib. I get a
ClassCastException. I think it comes from this :

webapp requires the external API, let's say a class named "ExternalSystem". It is 
configured to search for an
implementation class named "ExternalSystemMockImpl" (using reflexion API).

Webapp classloader doesn't find it, and delegate class searh to it's parent 
classloader (tomcat ones). Parent
classloader finds the class from my emulator jar, run it and return some "MockResult" 
object, that implements
"ExternalResult" from the external API

Calling webapp tries to cast resulting object to "ExternalResult", class that is 
visible to webapp classloader.

Then my code is doing :

ExternalResult result = (ExternalResult) obj;

where obj is my MockResult instance, that implements ExternalResult from 
parent-Classloader, and casting it to a
webapp-Classloader ExternalResult fails !


How can I solve this ClasLoader conflict ?

Nico.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Configuring Struts NOT to create (unauthentified) sessions

[Nicolas De Loof]

I just woud have some more info from Struts/J2EE masters :

Is this on-unauthentified-uri-session-is-created scenario a possible DOS attack ?

Nico.



> Hi Nicolas
> 
> Glad you figured it out, and thanks for sharing it, with the rest of us.
> 
> Peace,
> 
> Henrik
> 
> - Original Message - 
> From: "Nicolas De Loof" <[EMAIL PROTECTED]>
> To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
> Sent: Friday, January 09, 2004 9:41 AM
> Subject: Re: Configuring Struts NOT to create (unauthentified) sessions
> 
> 
> > Here is what I need to do to avoid creating session before the user has
> been authentificated :
> >
> >
> > . add <%@ page session="false" %> to the JSP used by my login tile
> definition (layout & tiles)
> > => requesting login.jsp doesn't create a session
> >
> > . set  in struts-config.xml
> > . set validate="false" for the login action
> > (. set scope="requet" for the login action)
> > => requesting login.do doesn't create a session until I create it myself
> when authentification has succeded (or some
> > action-mapping has scope="session").
> >
> >
> > Thank you all for help.
> >
> > Nico.
> >
> >
> >
> >
> >
> > > Quoting Nicolas De Loof <[EMAIL PROTECTED]>:
> > >
> > > > I've made a grep on Struts 1.1 sources. I noticed some case where a
> session
> > > > is created that seems to me 'uncontroled' :
> > > >
> > > >
> > > > RequestProcessor uses request.getSession() :
> > > > - in processLocale if controller is configured to use Locale (default
> =
> > > > true)
> > > >
> > > > HTMLTag uses request.getSession() :
> > > > - in currentLocale() : if any JSP uses  a session is
> created !
> > > >
> > > > o.a.s.validator.Ressouces uses request.getSession() :
> > > > - in getLocale(request) : If validator is used (for example to
> validate login
> > > > page) a session will allways be created
> > > >
> > > >
> > > > Isn't they're any way NOT to create a session for a user that hasn't
> been
> > > > authentified ?
> > > >
> > > > Nico.
> > > >
> > >
> > > Besides the places where Struts itself creates a session, if you're
> using JSP
> > > you should be aware that every JSP page will create a session unless you
> tell
> > > it not to:
> > >
> > >   <%@ page session="false" %>
> > >
> > > Craig
> > >
> > >
> > > -
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Configuring Struts NOT to create (unauthentified) sessions

[Nicolas De Loof]

Here is what I need to do to avoid creating session before the user has been 
authentificated :


. add <%@ page session="false" %> to the JSP used by my login tile definition (layout 
& tiles)
=> requesting login.jsp doesn't create a session

. set  in struts-config.xml
. set validate="false" for the login action
(. set scope="requet" for the login action)
=> requesting login.do doesn't create a session until I create it myself when 
authentification has succeded (or some
action-mapping has scope="session").


Thank you all for help.

Nico.





> Quoting Nicolas De Loof <[EMAIL PROTECTED]>:
>
> > I've made a grep on Struts 1.1 sources. I noticed some case where a session
> > is created that seems to me 'uncontroled' :
> >
> >
> > RequestProcessor uses request.getSession() :
> > - in processLocale if controller is configured to use Locale (default =
> > true)
> >
> > HTMLTag uses request.getSession() :
> > - in currentLocale() : if any JSP uses  a session is created !
> >
> > o.a.s.validator.Ressouces uses request.getSession() :
> > - in getLocale(request) : If validator is used (for example to validate login
> > page) a session will allways be created
> >
> >
> > Isn't they're any way NOT to create a session for a user that hasn't been
> > authentified ?
> >
> > Nico.
> >
>
> Besides the places where Struts itself creates a session, if you're using JSP
> you should be aware that every JSP page will create a session unless you tell
> it not to:
>
>   <%@ page session="false" %>
>
> Craig
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Configuring Struts NOT to create (unauthentified) sessions

[Nicolas De Loof]

I would like to set my login JSP to have this directive (<%@ page session="false" %>)
and others ones to be in WEB-INF (not visible to users)

I use an application specific authentification.

I would like any user (friend or hacker) to get access to the (internationalized) 
login page, be able commit login form
to "/login.do", and use struts-validator to validate required inputs. For all this no 
session should be created. When
user is authentified, access to other URIs of the applicaton are granted by a custom 
processRole.

Nico.



> How are you performing authentication? Depending on the process you're using, it
> may be possible to avoid hitting any of those conditions until after it's
> successful.
>
> P.S.
> By default, a JSP will create a session if one doesn't already exist (nothing to
> do with Struts), so any pages that can be hit by unauthenticated users should do:
>
> <%@ page session="false" %>
>
> Quoting Nicolas De Loof <[EMAIL PROTECTED]>:
>
> > I've made a grep on Struts 1.1 sources. I noticed some case where a session
> > is created that seems to me 'uncontroled' :
> >
> >
> > RequestProcessor uses request.getSession() :
> > - in processLocale if controller is configured to use Locale (default =
> > true)
> >
> > HTMLTag uses request.getSession() :
> > - in currentLocale() : if any JSP uses  a session is created !
> >
> > o.a.s.validator.Ressouces uses request.getSession() :
> > - in getLocale(request) : If validator is used (for example to validate login
> > page) a session will allways be created
> >
> >
> > Isn't they're any way NOT to create a session for a user that hasn't been
> > authentified ?
> >
> > Nico.
> >
> >
> >
> >
> >
> > >
> > > This is exactly what I'm looking for.
> > >
> > > For some of the applications I'm working on, my customers are paranoiac
> > about security. I think that if a
> > unauthentified
> > > user is able to create a session on the server, it can expose the server to
> > DOS attack, because every created session
> > > will use some memory.
> > >
> > > It is realy simple to write a client that sends hundred of request to the
> > server. If a session is created on each
> > > request, server will quickly be out of memory (Session object + stored
> > objects (Locale) size).
> > >
> > > If a session is created only for authentified users, server will survive
> > such (simple) attack.
> > >
> > > Perhaps I'm wrong about this, if this scenario is stupid please tell me.
> > >
> > > For example, I've seen that RequestUtils.retrieveUserLocale() uses request
> > scope if no session exists. This way, no
> > > session is created when displaying a login JSP that uses i18n.
> > >
> > > With locale="true" (default) a new session is created when ActionServlet
> > process a request. We need to set it to false
> > > to control session creation. I want to know if they're is other Struts
> > properties to set to avoid creating new session
> > > for non-authentified user.
> > >
> > >
> > > Nico.
> > >
> > >
> > >
> > > > Hi Manfred
> > > >
> > > > I think Nicolas is trying to find all places where Struts manipulates
> > the
> > > > session in some way..
> > > >
> > > > Locale=True does indeed manipulate the session..thus resulting in the
> > > > session being created, if not already there.
> > > >
> > > > When no one (action, object, tag, whatever) has requested attributes to
> > be
> > > > stored in the session, no session object will exist..Session info
> > (cookie,
> > > > URL rewriting, etc) is only created if there are attributes on the
> > Session
> > > > object. Am I correct on this one??
> > > >
> > > > I don't understand WHY Nicolas does not want the session to be
> > created...Is
> > > > it because of memory usage...denial of service attacks...?
> > > >
> > > > Maybe, I don't understand, Nicolas, too...but it did gave my few
> > pennies
> > > > away :-)
> > > >
> > > > Regards
> > > >
> > > > Henrik
> > > >
> > > > - Original Message - 
> > > > From: "Manfred Wolff" <[EMAIL PROTECTED]>
> > > > To: 

Re: Configuring Struts NOT to create (unauthentified) sessions

[Nicolas De Loof]

I've made a grep on Struts 1.1 sources. I noticed some case where a session is created 
that seems to me 'uncontroled' :


RequestProcessor uses request.getSession() :
- in processLocale if controller is configured to use Locale (default = true)

HTMLTag uses request.getSession() :
- in currentLocale() : if any JSP uses  a session is created !

o.a.s.validator.Ressouces uses request.getSession() :
- in getLocale(request) : If validator is used (for example to validate login page) a 
session will allways be created


Isn't they're any way NOT to create a session for a user that hasn't been authentified 
?

Nico.





>
> This is exactly what I'm looking for.
>
> For some of the applications I'm working on, my customers are paranoiac about 
> security. I think that if a
unauthentified
> user is able to create a session on the server, it can expose the server to DOS 
> attack, because every created session
> will use some memory.
>
> It is realy simple to write a client that sends hundred of request to the server. If 
> a session is created on each
> request, server will quickly be out of memory (Session object + stored objects 
> (Locale) size).
>
> If a session is created only for authentified users, server will survive such 
> (simple) attack.
>
> Perhaps I'm wrong about this, if this scenario is stupid please tell me.
>
> For example, I've seen that RequestUtils.retrieveUserLocale() uses request scope if 
> no session exists. This way, no
> session is created when displaying a login JSP that uses i18n.
>
> With locale="true" (default) a new session is created when ActionServlet process a 
> request. We need to set it to false
> to control session creation. I want to know if they're is other Struts properties to 
> set to avoid creating new session
> for non-authentified user.
>
>
> Nico.
>
>
>
> > Hi Manfred
> >
> > I think Nicolas is trying to find all places where Struts manipulates the
> > session in some way..
> >
> > Locale=True does indeed manipulate the session..thus resulting in the
> > session being created, if not already there.
> >
> > When no one (action, object, tag, whatever) has requested attributes to be
> > stored in the session, no session object will exist..Session info (cookie,
> > URL rewriting, etc) is only created if there are attributes on the Session
> > object. Am I correct on this one??
> >
> > I don't understand WHY Nicolas does not want the session to be created...Is
> > it because of memory usage...denial of service attacks...?
> >
> > Maybe, I don't understand, Nicolas, too...but it did gave my few pennies
> > away :-)
> >
> > Regards
> >
> > Henrik
> >
> > - Original Message - 
> > From: "Manfred Wolff" <[EMAIL PROTECTED]>
> > To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
> > Sent: Thursday, January 08, 2004 3:22 PM
> > Subject: Re: Configuring Struts NOT to create (unauthentified) sessions
> >
> >
> > > Nicolas.
> > >
> > > I perhaps don't understand you. but (!) The locale attribut has nothing
> > > to do with creating sessions! The locale attribute tells struts to save
> > > a Locale-Object in the session, if there is nothing stored.
> > >
> > > Manfred
> > >
> > > Nicolas De Loof wrote:
> > >
> > > >Hy all,
> > > >
> > > >I would like Struts NOT to create a session for an unauthentified user.
> > As far as I understand Struts code, I need to
> > > >set locale="false" in struts-config.xml .
> > > >
> > > >Is they're any ohter Struts mecanism that can create a session (excluding
> > action-mapping declared as scope="session") ?
> > > >
> > > >Doesn't the "locale" default value (true) expose lot's of struts
> > application to attack ? (server Out of Memory because
> > > >to much sessions have been created - isn't this what is called "Deny Of
> > Service" ?)
> > > >
> > > >Nico.
> > > >
> > > >
> > > >-
> > > >To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > >For additional commands, e-mail: [EMAIL PROTECTED]
> > > >
> > > >
> > > >
> > >
> > > -- 
> > > ===
> > > Dipl.-Inf. Manfred Wolff
> > > -

Re: Configuring Struts NOT to create (unauthentified) sessions

[Nicolas De Loof]

A session CONTEXT is created when some code uses
request.getSession() or request.getSession(true)

session tracking (using coockie or URL rewriting) is used keep association between 
user and contexte. Session tracking
mecanism use a random number generator but doesn't use memory to store some data until 
a CONTEXT is created.

Nico.



> HG.
>
> I _don't_ think you are right. A session object exsists with and without
> struts. The documentation says:
>
> -->
> The Hypertext Transfer Protocol (HTTP) is by design a stateless
> protocol. To build
> effective web applications, it is imperative that requests from a
> particular client be
> associated with each other. Many strategies for session tracking have
> evolved over
> time, but all are difficult or troublesome for the programmer to use
> directly.
> This specification defines a simple HttpSession interface that allows a
> servlet
> container to use any of several approaches to track a user’s session without
> involving the Application Developer in the nuances of any one approach.
> <--
>
> The session is more than the attributes, struts can put into it ;-)
>
> Manfred
>
> HG wrote:
>
> >Hi Manfred
> >
> >I think Nicolas is trying to find all places where Struts manipulates the
> >session in some way..
> >
> >Locale=True does indeed manipulate the session..thus resulting in the
> >session being created, if not already there.
> >
> >When no one (action, object, tag, whatever) has requested attributes to be
> >stored in the session, no session object will exist..Session info (cookie,
> >URL rewriting, etc) is only created if there are attributes on the Session
> >object. Am I correct on this one??
> >
> >I don't understand WHY Nicolas does not want the session to be created...Is
> >it because of memory usage...denial of service attacks...?
> >
> >Maybe, I don't understand, Nicolas, too...but it did gave my few pennies
> >away :-)
> >
> >Regards
> >
> >Henrik
> >
> >- Original Message - 
> >From: "Manfred Wolff" <[EMAIL PROTECTED]>
> >To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
> >Sent: Thursday, January 08, 2004 3:22 PM
> >Subject: Re: Configuring Struts NOT to create (unauthentified) sessions
> >
> >
> >
> >
> >>Nicolas.
> >>
> >>I perhaps don't understand you. but (!) The locale attribut has nothing
> >>to do with creating sessions! The locale attribute tells struts to save
> >>a Locale-Object in the session, if there is nothing stored.
> >>
> >>Manfred
> >>
> >>Nicolas De Loof wrote:
> >>
> >>
> >>
> >>>Hy all,
> >>>
> >>>I would like Struts NOT to create a session for an unauthentified user.
> >>>
> >>>
> >As far as I understand Struts code, I need to
> >
> >
> >>>set locale="false" in struts-config.xml .
> >>>
> >>>Is they're any ohter Struts mecanism that can create a session (excluding
> >>>
> >>>
> >action-mapping declared as scope="session") ?
> >
> >
> >>>Doesn't the "locale" default value (true) expose lot's of struts
> >>>
> >>>
> >application to attack ? (server Out of Memory because
> >
> >
> >>>to much sessions have been created - isn't this what is called "Deny Of
> >>>
> >>>
> >Service" ?)
> >
> >
> >>>Nico.
> >>>
> >>>
> >>>-
> >>>To unsubscribe, e-mail: [EMAIL PROTECTED]
> >>>For additional commands, e-mail: [EMAIL PROTECTED]
> >>>
> >>>
> >>>
> >>>
> >>>
> >>-- 
> >>===
> >>Dipl.-Inf. Manfred Wolff
> >>---
> >>phone neusta  : +49 421 20696-27
> >>phone : +49 421 534522
> >>mobil : +49 178 49 18 434
> >>eFax  : +49 1212 6 626 63 965 33
> >>---
> >>
> >>Diese E-Mail enthält möglicherweise vertrauliche und/oder rechtlich
> >>
> >>
> >geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder
> >diese

Re: Configuring Struts NOT to create (unauthentified) sessions

[Nicolas De Loof]

This is exactly what I'm looking for.

For some of the applications I'm working on, my customers are paranoiac about 
security. I think that if a unauthentified
user is able to create a session on the server, it can expose the server to DOS 
attack, because every created session
will use some memory.

It is realy simple to write a client that sends hundred of request to the server. If a 
session is created on each
request, server will quickly be out of memory (Session object + stored objects 
(Locale) size).

If a session is created only for authentified users, server will survive such (simple) 
attack.

Perhaps I'm wrong about this, if this scenario is stupid please tell me.

For example, I've seen that RequestUtils.retrieveUserLocale() uses request scope if no 
session exists. This way, no
session is created when displaying a login JSP that uses i18n.

With locale="true" (default) a new session is created when ActionServlet process a 
request. We need to set it to false
to control session creation. I want to know if they're is other Struts properties to 
set to avoid creating new session
for non-authentified user.


Nico.



> Hi Manfred
>
> I think Nicolas is trying to find all places where Struts manipulates the
> session in some way..
>
> Locale=True does indeed manipulate the session..thus resulting in the
> session being created, if not already there.
>
> When no one (action, object, tag, whatever) has requested attributes to be
> stored in the session, no session object will exist..Session info (cookie,
> URL rewriting, etc) is only created if there are attributes on the Session
> object. Am I correct on this one??
>
> I don't understand WHY Nicolas does not want the session to be created...Is
> it because of memory usage...denial of service attacks...?
>
> Maybe, I don't understand, Nicolas, too...but it did gave my few pennies
> away :-)
>
> Regards
>
> Henrik
>
> - Original Message - 
> From: "Manfred Wolff" <[EMAIL PROTECTED]>
> To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
> Sent: Thursday, January 08, 2004 3:22 PM
> Subject: Re: Configuring Struts NOT to create (unauthentified) sessions
>
>
> > Nicolas.
> >
> > I perhaps don't understand you. but (!) The locale attribut has nothing
> > to do with creating sessions! The locale attribute tells struts to save
> > a Locale-Object in the session, if there is nothing stored.
> >
> > Manfred
> >
> > Nicolas De Loof wrote:
> >
> > >Hy all,
> > >
> > >I would like Struts NOT to create a session for an unauthentified user.
> As far as I understand Struts code, I need to
> > >set locale="false" in struts-config.xml .
> > >
> > >Is they're any ohter Struts mecanism that can create a session (excluding
> action-mapping declared as scope="session") ?
> > >
> > >Doesn't the "locale" default value (true) expose lot's of struts
> application to attack ? (server Out of Memory because
> > >to much sessions have been created - isn't this what is called "Deny Of
> Service" ?)
> > >
> > >Nico.
> > >
> > >
> > >-
> > >To unsubscribe, e-mail: [EMAIL PROTECTED]
> > >For additional commands, e-mail: [EMAIL PROTECTED]
> > >
> > >
> > >
> >
> > -- 
> > ===
> > Dipl.-Inf. Manfred Wolff
> > ---
> > phone neusta  : +49 421 20696-27
> > phone : +49 421 534522
> > mobil : +49 178 49 18 434
> > eFax  : +49 1212 6 626 63 965 33
> > ---
> > 
> > Diese E-Mail enthält möglicherweise vertrauliche und/oder rechtlich
> geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder
> diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den
> Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die
> unbefugte Weitergabe dieser Mail ist nicht gestattet.
> >
> > This e-mail may contain confidential and/or privileged information. If you
> are not the intended recipient (or have received this e-mail in error)
> please notify the sender immediately and destroy this e-mail. Any
> unauthorised copying, disclosure or distribution of the material in this
> e-mail is strictly forbidden.
> >
> >
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Configuring Struts NOT to create (unauthentified) sessions

[Nicolas De Loof]

Hy all,

I would like Struts NOT to create a session for an unauthentified user. As far as I 
understand Struts code, I need to
set locale="false" in struts-config.xml .

Is they're any ohter Struts mecanism that can create a session (excluding 
action-mapping declared as scope="session") ?

Doesn't the "locale" default value (true) expose lot's of struts application to attack 
? (server Out of Memory because
to much sessions have been created - isn't this what is called "Deny Of Service" ?)

Nico.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: simple question

[Nicolas De Loof]

It should work (I use it !)

Did you include the taglib directive for struts-bean ?

Nico.



How can i have a dynamic value in the action ?

The following is not working .







Thanks !


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Custom page for roles rejection

[Nicolas De Loof]

You have to write the response before returning from processRole. For example, you can 
set response status to some error
so that default associated error-page is displayed :

response.sendError(HttpServletResponse.SC_FORBIDDEN, 
getInternal().getMessage("notAuthorized", mapping.getPath()));



Nico.



- Original Message - 
From: "Paul-J Woodward" <[EMAIL PROTECTED]>
To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
Sent: Monday, January 05, 2004 1:05 PM
Subject: Custom page for roles rejection


> Dear All,
>
> I have extended the RequestProcessor.processRoles() function. When it returns false 
> (i.e. user rejected) I get a blank
screen. How/where do I set a custom page or action to perform?
>
> Thanks, Paul
> 
> Global Equity Derivatives Technology
> Deutsche Bank [/]
> Office  +44 (0)20 754 55458
> Mobile +44 (0)7736 299483
> Fax  +44 (0)20 7547 2752
> 
>
>
> --
>
> This e-mail may contain confidential and/or privileged information. If you are not 
> the intended recipient (or have
received this e-mail in error) please notify the sender immediately and destroy this 
e-mail. Any unauthorized copying,
disclosure or distribution of the material in this e-mail is strictly forbidden.
>
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Custom Link Tag

[Nicolas De Loof]

You have to copy/paste extended taglib description in your custom tld.

You should write a simplest custom tag that includes it's body into response (the way 
logic: tags do) on some
application-specific conditions, and use it this way :


test


Your tag will be reusable for various presentation items.

Nico.


> Thanks Nico.
>
> However, I'm facing a problem with using my custom linktag.
>
> I am trying to specify the "href" attribute from which I shall get the
> "path" by using:
> test tag
>
> However, my jsp is giving me the error: "Error(12): Attribute: href is not a
> valid attribute name"
>
> I suspect that since it is looking up the tld which I've written, which
> doesn't have the href attribute, that's causing the error.
>
> Now, my tag class extends the struts html LinkTag, but how do I get it (my
> TLD) to include the attributes of the LinkTag in the original
> struts-html.tld.
>
> Thanks.
> Sanjay
>
> -Original Message-
> From: Nicolas De Loof [mailto:[EMAIL PROTECTED]
> Sent: Friday, January 02, 2004 3:32 PM
> To: Struts Users Mailing List
> Subject: Re: Custom Link Tag
>
>
> public int doStartTag() {
>
> if (skip_condition) {
> return SKIP_BODY;
> }
> return super.doStartTag()
> }
>
> Nico.
>
> > Nico,
> >
> > Thanks for your response.
> > However, what will happen to the existing code in the doStartTag of the
> > org.apache.struts.taglib.html.LinkTag?
> > Because I will still need the existing functionality of the
> > org.apache.struts.taglib.html.LinkTag as well !!
> > Should I make a call to the super.doStartTag()?
> >
> > Please advise.
> >
> > Thanks.
> > Sanjay
> >
> > -Original Message-
> > From: Nicolas De Loof [mailto:[EMAIL PROTECTED]
> > Sent: Wednesday, December 31, 2003 6:25 PM
> > To: Struts Users Mailing List
> > Subject: Re: Custom Link Tag
> >
> >
> > Place your code in doStartTag as it can return SKIP_BODY to exclude body
> > from resulting HTML.
> >
> > return EVAL_BODY_INCLUDE if you want the body to be included
> >
> > Nico.
> >
> > > Hi,
> > >
> > > I am writing a custom tag: MyLinkTag that extends the
> > > org.apache.struts.taglib.html.LinkTag.
> > >
> > > MyLinkTag has two fields. They are
> > > showAlways : Boolean & alternateLink : String.
> > >
> > > The functionality of the MyLinkTag is captured in the following code
> > > snippet:
> > >
> >
> 
> > > ***
> > > HttpServletRequest request = pageContext.getRequest();
> > > ActionMappings actionMappings =
> > > (ActionMappings)request.getAttribute(Action.MAPPINGS_KEY);
> > > String path = getHref();
> > > ActionMapping actionMapping = actionMappings.findMapping(path);
> > > String[] roleNames = actionMapping.getRoleNames();
> > > boolean userInRole = false;
> > > for(int i=0; i > > {
> > > userInRole = request.isUserInRole(roleNames);
> > > if(!userInRole){
> > > if((alternateLink != null) && !("".equals(alternateLink))){
> > > setHref(alternateLink);
> > > }
> > > else{
> > > if(showAlways){
> > > setDisabled(true);
> > > }
> > > else{
> > > //don't show the link
> > > return SKIP_BODY;
> > > }
> > > }
> > > }//end if !userInRole
> > > }//end for loop
> > >
> >
> 
> > > ***
> > >
> > > The problem is I don't know where to place this code i.e. in which
> method:
> > > doStartTag() or doEndTag() or doAfterBody() or any other??
> > > What method should I override??
> > > And what should be the return [integer] values??
> > >
> > > Thanks in advance.
> > > Sanjay
> > >
>
> 
> This message contains information that may be privileged or confidential and
> is the property of the Cap Gemini Ernst & Young Group. It is intended only
> for the person to whom it is addressed. If you are not the intended
> recipient, you are not authorised to read, print, retain, copy, disseminate,
> distribute, or use this message or any part thereof. If you receive this
> message in error, please notify the sender immediately and delete all copies
> of this message.
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Problem with BeanUtils.copyProperties()

[Nicolas De Loof]

I think the javabean spec doesn't allow multiple setters for a single property.
If I'm right, you cannot have two setXXX method with different parameters types, as 
beanutils just looks for a method
named "setXXX" without using parameter types.

Nico.


> Ivan De La Pena wrote:
> > Hope this helps :
> Thanks Ivan, It did help :-).
>
> The problem I had was a bit strange: in my business object a had a method
> setSomeProperty(String[] data) and a method setSomeProperty(Vector data).
> copyProperties() called setSomeProperty(Vector data) on my business bean
> although the method signature of the source bean has the first method signature
> (witch a String[]).
> If there are multiple methods with the same name, shouldn't copyProperties()
> pick the one with the same method signature as in the source bean??? In my
> opinion this would at least be a desirable default behavior
>
> Has anybody else experienced this problem?
>
> Patrick
>
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Custom Link Tag

[Nicolas De Loof]

public int doStartTag() {

if (skip_condition) {
return SKIP_BODY;
}
return super.doStartTag()
}

Nico.

> Nico,
> 
> Thanks for your response.
> However, what will happen to the existing code in the doStartTag of the
> org.apache.struts.taglib.html.LinkTag?
> Because I will still need the existing functionality of the
> org.apache.struts.taglib.html.LinkTag as well !!
> Should I make a call to the super.doStartTag()?
> 
> Please advise.
> 
> Thanks.
> Sanjay
> 
> -Original Message-
> From: Nicolas De Loof [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, December 31, 2003 6:25 PM
> To: Struts Users Mailing List
> Subject: Re: Custom Link Tag
> 
> 
> Place your code in doStartTag as it can return SKIP_BODY to exclude body
> from resulting HTML.
> 
> return EVAL_BODY_INCLUDE if you want the body to be included
> 
> Nico.
> 
> > Hi,
> > 
> > I am writing a custom tag: MyLinkTag that extends the
> > org.apache.struts.taglib.html.LinkTag.
> > 
> > MyLinkTag has two fields. They are 
> > showAlways : Boolean & alternateLink : String. 
> > 
> > The functionality of the MyLinkTag is captured in the following code
> > snippet:
> >
> 
> > ***
> > HttpServletRequest request = pageContext.getRequest();
> > ActionMappings actionMappings =
> > (ActionMappings)request.getAttribute(Action.MAPPINGS_KEY); 
> > String path = getHref();
> > ActionMapping actionMapping = actionMappings.findMapping(path);
> > String[] roleNames = actionMapping.getRoleNames();
> > boolean userInRole = false;
> > for(int i=0; i > {
> > userInRole = request.isUserInRole(roleNames);
> > if(!userInRole){
> > if((alternateLink != null) && !("".equals(alternateLink))){
> > setHref(alternateLink);
> > }
> > else{
> > if(showAlways){
> > setDisabled(true);
> > }
> > else{
> > //don't show the link
> > return SKIP_BODY;
> > }
> > }
> > }//end if !userInRole
> > }//end for loop
> >
> 
> > ***
> > 
> > The problem is I don't know where to place this code i.e. in which method:
> > doStartTag() or doEndTag() or doAfterBody() or any other?? 
> > What method should I override??
> > And what should be the return [integer] values?? 
> > 
> > Thanks in advance.
> > Sanjay
> > 
> > 
> > This message contains information that may be privileged or confidential
> and
> > is the property of the Cap Gemini Ernst & Young Group. It is intended only
> > for the person to whom it is addressed. If you are not the intended
> > recipient, you are not authorised to read, print, retain, copy,
> disseminate,
> > distribute, or use this message or any part thereof. If you receive this
> > message in error, please notify the sender immediately and delete all
> copies
> > of this message.
> > 
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> This message contains information that may be privileged or confidential and
> is the property of the Cap Gemini Ernst & Young Group. It is intended only
> for the person to whom it is addressed. If you are not the intended
> recipient, you are not authorised to read, print, retain, copy, disseminate,
> distribute, or use this message or any part thereof. If you receive this
> message in error, please notify the sender immediately and delete all copies
> of this message.
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: creating a class that extends Action Mapping...what is the purpose of it?

[Nicolas De Loof]

Sometime we need to add some info to struts mappings, and for this we use a class that 
extends ActionMapping. As an
example, we need for a webapp to add a "description" to any mapping to build some 
stats.

DescActionMapping defines a "description" attribute.

every action-mapping in struts-config sets this property :










(...)

Nico.



> Hi,
>
> I was trying one struts example. In that example, it has created one class
> whcih extends ActionMapping class. I was just wondering why we need to
> create this class and when is it used and whether we define this class in
> struts-config or web.xml?
>
> Regards
> Deepak Saini
>
> _
> Contact brides & grooms FREE! Only on www.shaadi.com.
> http://www.shaadi.com/ptnr.php?ptnr=hmltag Register now!
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Custom Link Tag

[Nicolas De Loof]

Place your code in doStartTag as it can return SKIP_BODY to exclude body from 
resulting HTML.

return EVAL_BODY_INCLUDE if you want the body to be included

Nico.

> Hi,
> 
> I am writing a custom tag: MyLinkTag that extends the
> org.apache.struts.taglib.html.LinkTag.
> 
> MyLinkTag has two fields. They are 
> showAlways : Boolean & alternateLink : String. 
> 
> The functionality of the MyLinkTag is captured in the following code
> snippet:
> 
> ***
> HttpServletRequest request = pageContext.getRequest();
> ActionMappings actionMappings =
> (ActionMappings)request.getAttribute(Action.MAPPINGS_KEY); 
> String path = getHref();
> ActionMapping actionMapping = actionMappings.findMapping(path);
> String[] roleNames = actionMapping.getRoleNames();
> boolean userInRole = false;
> for(int i=0; i {
> userInRole = request.isUserInRole(roleNames);
> if(!userInRole){
> if((alternateLink != null) && !("".equals(alternateLink))){
> setHref(alternateLink);
> }
> else{
> if(showAlways){
> setDisabled(true);
> }
> else{
> //don't show the link
> return SKIP_BODY;
> }
> }
> }//end if !userInRole
> }//end for loop
> 
> ***
> 
> The problem is I don't know where to place this code i.e. in which method:
> doStartTag() or doEndTag() or doAfterBody() or any other?? 
> What method should I override??
> And what should be the return [integer] values?? 
> 
> Thanks in advance.
> Sanjay
> 
> 
> This message contains information that may be privileged or confidential and
> is the property of the Cap Gemini Ernst & Young Group. It is intended only
> for the person to whom it is addressed. If you are not the intended
> recipient, you are not authorised to read, print, retain, copy, disseminate,
> distribute, or use this message or any part thereof. If you receive this
> message in error, please notify the sender immediately and delete all copies
> of this message.
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: dynamic arg0 in bean:message?

[Nicolas De Loof]

Your first example is invalid :

" />

A JSP tag cannot be used as attribute value of another tag (XML syntax)

This should work :




Nico.


- Original Message - 
From: "Domingo A. Rodriguez S." <[EMAIL PROTECTED]>
To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
Sent: Monday, December 29, 2003 1:48 PM
Subject: Re: dynamic arg0 in bean:message?


>
> Either escape the double quotes (" property=\"minChars\" />" ) or use single quotes (" name='globals' property='minChars' />" ).
>
>  --- Frank Maritato <[EMAIL PROTECTED]> escribió: > Hi,
> >
> > What I want to do is something like this:
> >
> >  >   arg0="" />
> >
> > or
> >
> >  >   arg0="<%=minChars%>" />
> >
> > Where arg0 is the result of a bean property, but I can't seem to get it
> > to work. If I hard-code the value
> >
> > 
> >
> > It works, but it kinda defeats the purpose.
> >
> > What am I doing wrong, or is there a better way to accomplish this?
> >
> > Thanks
> > --
> > Frank
> >
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
>
> _
> Do You Yahoo!?
> Información de Estados Unidos y América Latina, en Yahoo! Noticias.
> Visítanos en http://noticias.espanol.yahoo.com
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Dynamic html:image

[Nicolas De Loof]

Assuming imageList contains String taht are absolute (in application context) path to 
your images, this should work :






Nico.

- Original Message - 
From: "gentyjp" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, December 19, 2003 11:04 AM
Subject: Dynamic html:image 


> 
> 
>  Hi
> 
>   Struts and tags newbie again !!
> 
>   I have a string vector of image name.
> I wish to view them using html:image.
> 
> My question is how can I initialize my page attribute ?
> 
> 
>  
>
>  
> 
>   Thanks
> 
>Jean-Paul
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Question dynamic value for a logic:iterate

[Nicolas De Loof]

Oups, sory :





On a jsp1.2+ container you can use jstl and struts-el tags too.


Nico.

- Original Message - 
From: "struts" <[EMAIL PROTECTED]>
To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
Sent: Thursday, December 18, 2003 11:25 AM
Subject: Re: Question dynamic value for a logic:iterate


> Got the following error.
> 
> symbol  : method setValue (java.lang.Object)
> location: class org.apache.struts.taglib.logic.EqualTag
>   _jspx_th_logic_equal_1.setValue(foo);
> ^
> 1 error
> 
> 
> Thx !
> 
> 
> - Original Message - 
> From: "Nicolas De Loof" <[EMAIL PROTECTED]>
> To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
> Sent: Thursday, December 18, 2003 11:12 AM
> Subject: Re: Question dynamic value for a logic:iterate
> 
> 
> > use this :
> >
> > 
> > 
> > ...
> >
> > Nico
> >
> >
> > - Original Message - 
> > From: "struts" <[EMAIL PROTECTED]>
> > To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
> > Sent: Thursday, December 18, 2003 11:09 AM
> > Subject: Question dynamic value for a logic:iterate
> >
> >
> > How can i have a dynamic value ?
> >
> > eg:
> >
> > 
> >
> > should be something like
> >
> > ">
> >
> > but that is not working.
> >
> > Any Idea ?
> >
> > Thanks
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> >
> 
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Question dynamic value for a logic:iterate

[Nicolas De Loof]

use this :



...

Nico


- Original Message - 
From: "struts" <[EMAIL PROTECTED]>
To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
Sent: Thursday, December 18, 2003 11:09 AM
Subject: Question dynamic value for a logic:iterate


How can i have a dynamic value ?

eg:



should be something like

">

but that is not working.

Any Idea ?

Thanks

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [OT] using tld inside jar

[Nicolas De Loof]

So simple I didn't thik about it !

Thanks.


- Original Message - 
From: "Kris Schneider" <[EMAIL PROTECTED]>
To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
Sent: Wednesday, December 10, 2003 4:06 PM
Subject: Re: [OT] using tld inside jar


> Don't put anything in web.xml. Just do this in your JSP:
> 
> <%@ taglib prefix="string"
>uri="http://jakarta.apache.org/taglibs/string-1.0.1"; %>
> 
> Quoting Nicolas De Loof <[EMAIL PROTECTED]>:
> 
> > Hi all,
> > 
> > I would like to use the jakarta String-1.0.1 taglib in my app, but tld is
> > packaged inside jar.
> > 
> > I use tomcat 4.1.27, that is servlet 2.3 compliant so taht should be able to
> > use this taglib "as is", but I don't know
> > what to set in web.xml as  element (especially for
> > )
> > 
> > Could you help me please ?
> > 
> > Nico.
> 
> -- 
> Kris Schneider <mailto:[EMAIL PROTECTED]>
> D.O.Tech   <http://www.dotech.com/>
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[OT] using tld inside jar

[Nicolas De Loof]

Hi all,

I would like to use the jakarta String-1.0.1 taglib in my app, but tld is packaged 
inside jar.

I use tomcat 4.1.27, that is servlet 2.3 compliant so taht should be able to use this 
taglib "as is", but I don't know
what to set in web.xml as  element (especially for )

Could you help me please ?

Nico.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[OT] problem with binary ressource when packaged in jar (war)

[Nicolas De Loof]

Hello all,

This is'nt a Struts related question, but I know lot's off peoples here are java 
experts ;)


My application uses a binary ressource - a gif file - that is loaded from classpath 
(the application changes some colors
and put it into response.out)


When testing the code (a simple java class + the gif file) inside the WEB-INF classes 
dir, it works fine.

When used inside the webapp, generated gif is incorect : it has lot's of strange 
binary errors.

When putting the classe and the gif file into a jar, it fails too.


I use java 1.4.2 on windows 2000.
I get the exact same behaviour on sun solaris with java 1.4.1_03


Do you know any problem when putting binary files inside a jar file ?



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: best practice to avoid chaining actions

[Nicolas De Loof]

Very interesting thread, Thanks a lot

Nico.


Hi,
There was a long discussion about action chainning some time ago.
http://marc.theaimsgroup.com/?l=struts-user&m=104427309720653&w=2
And as summarized in the above discussion, I think if you are using 2 actions to 
complete 1 logical function, then it is
bad design.And that is what I think the approach suggested by you looks like.


To answer you specific question,like already suggested, I will put the validation 
logic in the form bean(SO that same
validation can be used in some other action if it is using same form ) and then put 
the validation call in the
action(Something like form.validate) and forward to error if the validation fails.

And if validation succeeds, go ahead with normal data processing(which is data 
retrieval in this case.)

HTH.
regards,
Shirish



-Original Message-
From: Krishnakumar N [mailto:[EMAIL PROTECTED]
Sent: Friday, November 21, 2003 10:56 AM
To: Struts Users Mailing List
Subject: RE: best practice to avoid chaining actions




> -Original Message-----
> From: Nicolas De Loof [mailto:[EMAIL PROTECTED]
> Sent: Friday, November 21, 2003 2:58 PM
> To: Struts Users Mailing List
> Subject: Re: best practice to avoid chaining actions
>
>
>
>
> > Hello,
> >
> > If action chaining is a design error, then the struts-example that
> > comes with struts distributions has a design error, saveSubscription
> > forwards to editRegistration.do!
> >
> > Anyway, what I do is keep validation off action classes, by moving
> > them off to action forms using validator and/or overridden
> validate()
> > methods. (Business logic validations that need access to
> the data model must
> > be in the model ofcourse, and not in action classes.)
>
> You're right, my description was a little short about this :
>
> In Action1, we use business model validation methods to
> validate some form datas : to know if user is allowed to use
> some datas he entered for the business process he want's to begin.
>
If the logic itself is in the model and action1 only makes the call to
validate the user's inputs, I would guess it is ok to put it in the same
action that fetches and populates data for page2.
>
> >
> > Cheers,
> > Krishna
> >
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: best practice to avoid chaining actions

[Nicolas De Loof]

> Hello,
>
> If action chaining is a design error, then the struts-example that
> comes with struts distributions has a design error, saveSubscription
> forwards to editRegistration.do!
>
> Anyway, what I do is keep validation off action classes, by moving
> them off to action forms using validator and/or overridden validate()
> methods. (Business logic validations that need access to the data model must
> be in the model ofcourse, and not in action classes.)

You're right, my description was a little short about this :

In Action1, we use business model validation methods to validate some form datas : to 
know if user is allowed to use
some datas he entered for the business process he want's to begin.

>
> Cheers,
> Krishna
>


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

best practice to avoid chaining actions

[Nicolas De Loof]

Hi all,

I've read on this list that chaining actions is considered as a design error.

On the project I'm working on, some developers need to make some business validation 
on a form before going to the next
page. This validation occurs in an Action class, let's say Action1.
>From business validation point of view, Action1 return "success" or "error".

Next page needs some pre-computing to select JSP and display, because of some list of 
values that are time and
user-dependant.
>From next-page precomputing point of view, forward can be "simple-select" or 
>"multi-select"

What is the best way :

- Action1 validates, Action2 computes datas before page2 display, and we need to chain 
Action1 and Action2.

- Action1 both validates ans computes datas for page2. It doesn't seems to be good as 
this mix to roles in Action1 and
we cannot display page2 without validating.


Is they're a "good way" to do this without some workflow extension ?

Thanks for any help or suggestion.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: chained actions

[Nicolas De Loof]

Here is what happens :

reset() is called before every form population
form population occurs before every struts action url (*.do) is processed.

When an action forwards to another one using , struts 
actionServlet is called to handle this
second URL. FormBean is then reseted and populated from request.

If you doesn't use a redirect, request is the same an all parameters are still in it, 
so formbean is populated the same
way for the two actions.

If you use a redirect, when first action forwards, a HTTP Redirect response (with 
location="another.do") is sent to the
browser. Browser follows new location and builds a new request, but this new request 
hasn't any parameter. When form
population occurs for "another.do", form-bean is reseted and population has no effect 
(no parameters !).

Nico.


- Original Message - 
From: "Caroline Lauferon" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; "Struts Users Mailing List" <[EMAIL PROTECTED]>
Sent: Wednesday, November 19, 2003 11:31 AM
Subject: Re: chained actions


> > Is it a multipart form (file upload)?
> yes. and since you asked me, I just changed it. and now it works???
> (but the reset method is called between the two action in both cases). I
> don't need this encoding, but I wanted to always use the same skeleton,
> that's why i used it.
> can you explain me what has been happening?
>
>
> Caroline, puzzled
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Newbie question....redirect

[Nicolas De Loof]

excuse me for mistake.

You should read "response.sendRedirect()"
http://java.sun.com/products/servlet/2.2/javadoc/javax/servlet/http/HttpServletResponse.html#sendRedirect(java.lang.String)

Nico.

- Original Message - 
From: "Marcella Turner" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, November 05, 2003 4:06 PM
Subject: Re: Newbie questionredirect


> Nicolas,
>
> I think your reply will help me with my post too -> trying to switch web
> modules - help
> but I don't see a sendRedirect() method of the requestDispatcher object.
> How can I call this sendRedirect() - sounds like the solution to my problem!
>
> Thanks
>
>
> >From: "Nicolas De Loof" <[EMAIL PROTECTED]>
> >Reply-To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
> >To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
> >Subject: Re: Newbie questionredirect
> >Date: Wed, 5 Nov 2003 14:22:47 +0100
> >
> >
> >contextRelative is used to define a forward that is relative to the
> >application context and not to the module context
> >(default).
> >
> >You cannot redirect to an URL outside your app using struts-config
> >. Use a requestDispatcher in your action and
> >call sendRedirect(), or create a new JSP with a  >href="http://www.yahoo.com";> tag
> >
> >Nico.
> >
> >
> >- Original Message -
> >From: "Mathieu Grimault" <[EMAIL PROTECTED]>
> >To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
> >Sent: Wednesday, November 05, 2003 2:16 PM
> >Subject: Newbie questionredirect
> >
> >
> >Hi all !
> >
> >Sorry, about a such stupid question but I try to have my application
> >redirects to an external web site with some
> >parameters.
> >
> >Here is an exemple : http://payOnline/$cashAmout/$name
> >
> >For the moment i'm just try to redirect to an external website like yahoo
> >but the search path is always
> >"/context/http://www.yahoo.fr";. What's wrong ?
> >
> >Here is a snipet from struts-config.xml :
> >
> > >
> >type = "BonjourAction"
> >
> >name = "BonjourForm"
> >
> >scope = "request"
> >
> >input = "/index.jsp"
> >
> >validate = "true"
> >
> > >
> >
> > http://www.yahoo.fr"; contextRelative="false"
> >redirect="true"/>
> >
> >
> >
> >
> >
> >Environment : struts 1.1, tomcat 4.1.27, jdk 1.4.2_02
> >
> >
> >-
> >To unsubscribe, e-mail: [EMAIL PROTECTED]
> >For additional commands, e-mail: [EMAIL PROTECTED]
> >
>
> _
> Is your computer infected with a virus?  Find out with a FREE computer virus
> scan from McAfee.  Take the FreeScan now!
> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963
>
>
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Newbie question....redirect

[Nicolas De Loof]

contextRelative is used to define a forward that is relative to the application 
context and not to the module context
(default).

You cannot redirect to an URL outside your app using struts-config . Use a 
requestDispatcher in your action and
call sendRedirect(), or create a new JSP with a http://www.yahoo.com";> tag

Nico.


- Original Message - 
From: "Mathieu Grimault" <[EMAIL PROTECTED]>
To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
Sent: Wednesday, November 05, 2003 2:16 PM
Subject: Newbie questionredirect


Hi all !

Sorry, about a such stupid question but I try to have my application redirects to an 
external web site with some
parameters.

Here is an exemple : http://payOnline/$cashAmout/$name

For the moment i'm just try to redirect to an external website like yahoo but the 
search path is always
"/context/http://www.yahoo.fr";. What's wrong ?

Here is a snipet from struts-config.xml :



http://www.yahoo.fr"; contextRelative="false" 
redirect="true"/>





Environment : struts 1.1, tomcat 4.1.27, jdk 1.4.2_02


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Help Req on Iterate Tag using HashMap

[Nicolas De Loof]

Sory if this has allready been proposed, I didn't read this thread from begining. 

Did you try something like this :


uid = 
Date of joining = 


Nico.


> Thanks for your reply boss,
>  but still its doesn't solves my problem .. I know this method of iterating
> thru an Array list taking out a bean from that .. but I want to USE A HASH
> MAP ...
> anyone who can help me out of this 
> waiting 4 ur reply guyz .
> chao ...
> shakti
> 
> - Original Message -
> From: "Sashi Ravipati" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, November 04, 2003 6:46 PM
> Subject: Re: Help Req on Iterate Tag using HashMap
> 
> 
> > Hi
> >
> > This is how we iterate in a jsp page
> >
> > 
> >  > property="assocSBList" indexId="i" >
> > 
> >  > size="10"  />
> >   > maxlength="10"size="10" />
> > 
> > 
> > 
> >
> > where addProviderForm is the Struts Form bean and assocSBList is the
> > ArrayList defined in the form bean.
> >
> > Hope this helps.
> >
> > Thanks
> >
> > >>> [EMAIL PROTECTED] 11/4/2003 6:43:27 AM >>>
> > Hi All,
> > I am keeping some table data in a HashMap .
> > My Table is in this form :
> > UID #EMP Details
> >-Date of joining
> >-Date of birth
> >-Misc Detail
> >
> > Now i am creating an EMPDetails bean and storing the bean in a hash map
> > with UID # as the key.
> >
> > Can anyone plz tell me how to show the data in a tabular form in jsp
> > using iterate tag . I am unable to make out as how to
> > iterate the EMPDetails bean which i am getting as value .
> >
> > Thanks & Regards,
> > Shakti
> >
> > -
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: Converting to Struts, where to put Servlet init() code?

[Nicolas De Loof]

You can use the Struts PlugIn mecanism too, but your init code may need some changes.

Nico.

- Original Message - 
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, October 15, 2003 2:11 PM
Subject: RE: Converting to Struts, where to put Servlet init() code?


You dont need to subclass the action servlet just for the init code...

Write u r own servlet(InitializationServlet)and put it in the init method of this 
servlet.

When configuring the servlets in web.xml have somethign like this.


InitializationServlet
InitializationServlet
com.urapp.InitializationServlet
1


And for all other servlets , the load-on-startupvalue should be greater than 
1.This ensures that when the servlets
are initialized(Loaded), the initialization servlet is loaded first which means also 
the init method will be called
before any requests are received.


Additionally u can have any startup code called from the init method of this servlet.

Hope this helps.
Regards,
Shirish

-Original Message-
From: Mark Galbreath [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 15, 2003 2:04 PM
To: Struts Users Mailing List
Subject: RE: Converting to Struts, where to put Servlet init() code?


subclass ActionServlet and put your inits there.

-Original Message-
From: Wendy Smoak [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 14, 2003 7:43 PM
To: [EMAIL PROTECTED]
Subject: Converting to Struts, where to put Servlet init() code?



I'm converting an existing webapp to Struts.  I have some code in a
Servlet init() method, and I don't immediately see where I should put
it.  This is an authentication/authorization webapp, and the code in
question sets up an authentication handler object to be used by every
subsequent request.

What's guaranteed to get executed before the Action code?  (I'm almost
thinking Filter, and to put the object in Application scope, but I'm not
sure yet.)

Any advice?

-- 
Wendy Smoak
Applications Systems Analyst, Sr.
Arizona State University, PA, IRM

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: outputting html with bean:write

[Nicolas De Loof]

What html result do you get ?

If generated HTML has "" check if you included struts-bean taglig 
header in your jsp.

If generated HTML has "hello ..." use filter="false" on bean:write to disable 
HTML markup filtering (active by
default)

Nico.


- Original Message - 
From: "Lars Hammer" <[EMAIL PROTECTED]>
To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
Sent: Wednesday, October 15, 2003 10:17 AM
Subject: outputting html with bean:write


Hello

I'm trying to write the content of a bean property containing html to my page, but the 
html doesn't get interpreted by
the browser.
The following code works :

< div style="height: 70; width: 200; border: 1px solid black; overflow: auto;" >
hello there
< /div >

but this doesn't

< div style="height: 70; width: 200; border: 1px solid black; overflow: auto;" >
 < bean:write name="hit" property="comment"/ >
< /div >


Is there something special about the way text is stored in a bean property?

-thanks

/Lars Hammer
http://www.dezide.com


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]