If your User bean is constructed from data in a database ONLY, via the
constructor and not by set() methods, then the object can only contain info
it was constructed with. This means that you cant guess and pass whatever
parameters because they were obtained from the database. So unless someone
What a great time to be a Geek
-Original Message-
From: Jonathan [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 09, 2001 8:11 AM
To: [EMAIL PROTECTED]
Subject: Re: Potential Security Flaw in Struts
MVCChristian...are you lurking about?
If your User bean
2 matches
Mail list logo
