RE: URGENT RE: token issue in hyperlink
Thanks. It sure does help.
cheers,
Amar..
-Original Message-
From: Martin Cooper [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 07, 2001 11:59 PM
To: [EMAIL PROTECTED]
Subject: Re: URGENT RE: token issue in hyperlink
The session ID will only show up in the URL in two cases:
1) On the first request in the session (i.e. session creation time).
2) When cookies are disabled in the browser.
On the first request, the server sends the session ID back to the browser
both in the URL and in a cookie, because it doesn't know yet whether or not
cookies are enabled. If it discovers that cookies are enabled, it will stop
sending the session ID as part of the URL, and just use cookies from then
on. If, however, cookies are disabled, then it will continue to send the
session ID as part of the URL.
Hope this helps.
--
Martin Cooper
- Original Message -
From: "Nanduri, Amarnath" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, March 07, 2001 8:46 AM
Subject: RE: URGENT RE: token issue in hyperlink
>
> Mike,
>
>Thanks a lot. It works. I did vote for this enhancement to take
> place. One question i have is...how come i don't see the session id in the
> address bar ? Is it because GET limits the number of characters that can
be
> kept in the Address Bar ? Also i did not see the sessionid when i did a
> 'view source' and checked the source of my generated page. Clarification
on
> this issue is greatly appreciated.
>
> cheers,
> Amar..
>
> -Original Message-
> From: Michael McCallister [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, March 07, 2001 11:06 AM
> To: [EMAIL PROTECTED]
> Subject: Re: URGENT RE: token issue in hyperlink
>
>
> Here is what I do in a similar situation:
>
>
>
page='<%="/user/saveUser.do?action=Remove&org.apache.struts.taglib.html.TOKE
> N="
> +
> session.getAttribute("org.apache.struts.action.TOKEN")%>'>
> Remove Role
>
> It's ugly, but it works for now. Notice the single quotes around the page
> argument. Very important or the JSP parser will get confused by the
> embedded double quotes in the expression.
>
> I've submitted an enhancement request (Bug #874
> http://nagoya.apache.org/bugzilla/show_bug.cgi?id=874) to add an optional
> parameter to the html:link tag that would do this magic without the need
> for the expression shown above. If I can get Struts set up to build
> locally, I will probably give implementing this a go myself so I can
submit
> a patch rather than just a request. Using the link above, you can vote
for
> the implementation of this enhancement.
>
>
> Mike
>
> At 07:43 AM 3/7/2001, you wrote:
>
> >Hello,
> >
> > I have posted this before. This is extremely urgent for me. I know
> that
> >the token support exists for posting Form(s). How can i ensure that this
> >same token will be issued to a hyperlink so that i can validate that the
> >user will click on the hyperlink only once ? Any help is greatly
> >appreciated. Thanks a lot.
> >
> >cheers,
> >Amar..
> >
> >
> >-Original Message-
> >From: Nanduri, Amarnath [mailto:[EMAIL PROTECTED]]
> >Sent: Tuesday, March 06, 2001 2:23 PM
> >To: '[EMAIL PROTECTED]'
> >Subject: token issue in hyperlink
> >
> >
> >
> >Hello All ,
> >
> > I am using the Action class saveToken() method to ensure that a
token
> >is created and set (so that the user has proper screen flow). My question
> is
> >... how can i add this token to a hyperlink ?
> >
> > I have a hyperlink in a jsp page, which takes me to a different Action
> >class. I am checking for this token in the second Action class. Any help
is
> >greatly appreciated. Thanks.
> >
> >cheers,
> >Amar..
Re: URGENT RE: token issue in hyperlink
The session ID will only show up in the URL in two cases:
1) On the first request in the session (i.e. session creation time).
2) When cookies are disabled in the browser.
On the first request, the server sends the session ID back to the browser
both in the URL and in a cookie, because it doesn't know yet whether or not
cookies are enabled. If it discovers that cookies are enabled, it will stop
sending the session ID as part of the URL, and just use cookies from then
on. If, however, cookies are disabled, then it will continue to send the
session ID as part of the URL.
Hope this helps.
--
Martin Cooper
- Original Message -
From: "Nanduri, Amarnath" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, March 07, 2001 8:46 AM
Subject: RE: URGENT RE: token issue in hyperlink
>
> Mike,
>
>Thanks a lot. It works. I did vote for this enhancement to take
> place. One question i have is...how come i don't see the session id in the
> address bar ? Is it because GET limits the number of characters that can
be
> kept in the Address Bar ? Also i did not see the sessionid when i did a
> 'view source' and checked the source of my generated page. Clarification
on
> this issue is greatly appreciated.
>
> cheers,
> Amar..
>
> -Original Message-
> From: Michael McCallister [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, March 07, 2001 11:06 AM
> To: [EMAIL PROTECTED]
> Subject: Re: URGENT RE: token issue in hyperlink
>
>
> Here is what I do in a similar situation:
>
>
>
page='<%="/user/saveUser.do?action=Remove&org.apache.struts.taglib.html.TOKE
> N="
> +
> session.getAttribute("org.apache.struts.action.TOKEN")%>'>
> Remove Role
>
> It's ugly, but it works for now. Notice the single quotes around the page
> argument. Very important or the JSP parser will get confused by the
> embedded double quotes in the expression.
>
> I've submitted an enhancement request (Bug #874
> http://nagoya.apache.org/bugzilla/show_bug.cgi?id=874) to add an optional
> parameter to the html:link tag that would do this magic without the need
> for the expression shown above. If I can get Struts set up to build
> locally, I will probably give implementing this a go myself so I can
submit
> a patch rather than just a request. Using the link above, you can vote
for
> the implementation of this enhancement.
>
>
> Mike
>
> At 07:43 AM 3/7/2001, you wrote:
>
> >Hello,
> >
> > I have posted this before. This is extremely urgent for me. I know
> that
> >the token support exists for posting Form(s). How can i ensure that this
> >same token will be issued to a hyperlink so that i can validate that the
> >user will click on the hyperlink only once ? Any help is greatly
> >appreciated. Thanks a lot.
> >
> >cheers,
> >Amar..
> >
> >
> >-Original Message-
> >From: Nanduri, Amarnath [mailto:[EMAIL PROTECTED]]
> >Sent: Tuesday, March 06, 2001 2:23 PM
> >To: '[EMAIL PROTECTED]'
> >Subject: token issue in hyperlink
> >
> >
> >
> >Hello All ,
> >
> > I am using the Action class saveToken() method to ensure that a
token
> >is created and set (so that the user has proper screen flow). My question
> is
> >... how can i add this token to a hyperlink ?
> >
> > I have a hyperlink in a jsp page, which takes me to a different Action
> >class. I am checking for this token in the second Action class. Any help
is
> >greatly appreciated. Thanks.
> >
> >cheers,
> >Amar..
Re: URGENT RE: token issue in hyperlink
I think you must disable the cookies of your browser "Nanduri, Amarnath" wrote: > >I was able to see the Token . I am talking about the jsessionid that will > be created for a hyperlink. If the tag is used, it automatically > re-writes the url to include a jsessionid. I was unable to see this. Thanks. > > cheers, > Amar.. > > -Original Message- > From: Michael McCallister [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, March 07, 2001 12:23 PM > To: [EMAIL PROTECTED] > Subject: RE: URGENT RE: token issue in hyperlink > > I can't speak about the address bar (different browsers probably behave > differently), but if you aren't seeing it in the generated source then > there is a problem. To confirm, you don't see the > > org.apache.struts.taglib.html.TOKEN=4bb7c9e6084fbf88acc2aa976ea9e3 > > string in your generated hyperlink href? Do you see the > "org.apache...TOKEN" part but not the hex string after the equals sign? If > so, maybe you are not doing a saveToken(request) in an Action before you > forward to your JSP page. > > Mike > > At 10:58 AM 3/7/2001, you wrote: > > >Mike, > > > >Thanks a lot. It works. I did vote for this enhancement to take > >place. One question i have is...how come i don't see the session id in the > >address bar ? Is it because GET limits the number of characters that can be > >kept in the Address Bar ? Also i did not see the sessionid when i did a > >'view source' and checked the source of my generated page. Clarification on > >this issue is greatly appreciated. > > > >cheers, > >Amar.. -- This email is confidential and intended solely for the use of the individual to whom it is addressed. Any views or opinions presented are solely those of the author and do not necessarily represent those of Sema Group. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. --
RE: URGENT RE: token issue in hyperlink
I was able to see the Token . I am talking about the jsessionid that will be created for a hyperlink. If the tag is used, it automatically re-writes the url to include a jsessionid. I was unable to see this. Thanks. cheers, Amar.. -Original Message- From: Michael McCallister [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 07, 2001 12:23 PM To: [EMAIL PROTECTED] Subject: RE: URGENT RE: token issue in hyperlink I can't speak about the address bar (different browsers probably behave differently), but if you aren't seeing it in the generated source then there is a problem. To confirm, you don't see the org.apache.struts.taglib.html.TOKEN=4bb7c9e6084fbf88acc2aa976ea9e3 string in your generated hyperlink href? Do you see the "org.apache...TOKEN" part but not the hex string after the equals sign? If so, maybe you are not doing a saveToken(request) in an Action before you forward to your JSP page. Mike At 10:58 AM 3/7/2001, you wrote: >Mike, > >Thanks a lot. It works. I did vote for this enhancement to take >place. One question i have is...how come i don't see the session id in the >address bar ? Is it because GET limits the number of characters that can be >kept in the Address Bar ? Also i did not see the sessionid when i did a >'view source' and checked the source of my generated page. Clarification on >this issue is greatly appreciated. > >cheers, >Amar..
RE: URGENT RE: token issue in hyperlink
I can't speak about the address bar (different browsers probably behave differently), but if you aren't seeing it in the generated source then there is a problem. To confirm, you don't see the org.apache.struts.taglib.html.TOKEN=4bb7c9e6084fbf88acc2aa976ea9e3 string in your generated hyperlink href? Do you see the "org.apache...TOKEN" part but not the hex string after the equals sign? If so, maybe you are not doing a saveToken(request) in an Action before you forward to your JSP page. Mike At 10:58 AM 3/7/2001, you wrote: >Mike, > >Thanks a lot. It works. I did vote for this enhancement to take >place. One question i have is...how come i don't see the session id in the >address bar ? Is it because GET limits the number of characters that can be >kept in the Address Bar ? Also i did not see the sessionid when i did a >'view source' and checked the source of my generated page. Clarification on >this issue is greatly appreciated. > >cheers, >Amar..
RE: URGENT RE: token issue in hyperlink
Mike, Thanks a lot. It works. I did vote for this enhancement to take place. One question i have is...how come i don't see the session id in the address bar ? Is it because GET limits the number of characters that can be kept in the Address Bar ? Also i did not see the sessionid when i did a 'view source' and checked the source of my generated page. Clarification on this issue is greatly appreciated. cheers, Amar.. -Original Message- From: Michael McCallister [mailto:[EMAIL PROTECTED]] Sent: Wednesday, March 07, 2001 11:06 AM To: [EMAIL PROTECTED] Subject: Re: URGENT RE: token issue in hyperlink Here is what I do in a similar situation: Remove Role It's ugly, but it works for now. Notice the single quotes around the page argument. Very important or the JSP parser will get confused by the embedded double quotes in the expression. I've submitted an enhancement request (Bug #874 http://nagoya.apache.org/bugzilla/show_bug.cgi?id=874) to add an optional parameter to the html:link tag that would do this magic without the need for the expression shown above. If I can get Struts set up to build locally, I will probably give implementing this a go myself so I can submit a patch rather than just a request. Using the link above, you can vote for the implementation of this enhancement. Mike At 07:43 AM 3/7/2001, you wrote: >Hello, > > I have posted this before. This is extremely urgent for me. I know that >the token support exists for posting Form(s). How can i ensure that this >same token will be issued to a hyperlink so that i can validate that the >user will click on the hyperlink only once ? Any help is greatly >appreciated. Thanks a lot. > >cheers, >Amar.. > > >-Original Message- >From: Nanduri, Amarnath [mailto:[EMAIL PROTECTED]] >Sent: Tuesday, March 06, 2001 2:23 PM >To: '[EMAIL PROTECTED]' >Subject: token issue in hyperlink > > > >Hello All , > > I am using the Action class saveToken() method to ensure that a token >is created and set (so that the user has proper screen flow). My question is >... how can i add this token to a hyperlink ? > > I have a hyperlink in a jsp page, which takes me to a different Action >class. I am checking for this token in the second Action class. Any help is >greatly appreciated. Thanks. > >cheers, >Amar..
Re: URGENT RE: token issue in hyperlink
Here is what I do in a similar situation: Remove Role It's ugly, but it works for now. Notice the single quotes around the page argument. Very important or the JSP parser will get confused by the embedded double quotes in the expression. I've submitted an enhancement request (Bug #874 http://nagoya.apache.org/bugzilla/show_bug.cgi?id=874) to add an optional parameter to the html:link tag that would do this magic without the need for the expression shown above. If I can get Struts set up to build locally, I will probably give implementing this a go myself so I can submit a patch rather than just a request. Using the link above, you can vote for the implementation of this enhancement. Mike At 07:43 AM 3/7/2001, you wrote: >Hello, > > I have posted this before. This is extremely urgent for me. I know that >the token support exists for posting Form(s). How can i ensure that this >same token will be issued to a hyperlink so that i can validate that the >user will click on the hyperlink only once ? Any help is greatly >appreciated. Thanks a lot. > >cheers, >Amar.. > > >-Original Message- >From: Nanduri, Amarnath [mailto:[EMAIL PROTECTED]] >Sent: Tuesday, March 06, 2001 2:23 PM >To: '[EMAIL PROTECTED]' >Subject: token issue in hyperlink > > > >Hello All , > > I am using the Action class saveToken() method to ensure that a token >is created and set (so that the user has proper screen flow). My question is >... how can i add this token to a hyperlink ? > > I have a hyperlink in a jsp page, which takes me to a different Action >class. I am checking for this token in the second Action class. Any help is >greatly appreciated. Thanks. > >cheers, >Amar..
URGENT RE: token issue in hyperlink
Hello, I have posted this before. This is extremely urgent for me. I know that the token support exists for posting Form(s). How can i ensure that this same token will be issued to a hyperlink so that i can validate that the user will click on the hyperlink only once ? Any help is greatly appreciated. Thanks a lot. cheers, Amar.. -Original Message- From: Nanduri, Amarnath [mailto:[EMAIL PROTECTED]] Sent: Tuesday, March 06, 2001 2:23 PM To: '[EMAIL PROTECTED]' Subject: token issue in hyperlink Hello All , I am using the Action class saveToken() method to ensure that a token is created and set (so that the user has proper screen flow). My question is ... how can i add this token to a hyperlink ? I have a hyperlink in a jsp page, which takes me to a different Action class. I am checking for this token in the second Action class. Any help is greatly appreciated. Thanks. cheers, Amar..
