Thanks Dale, Yes, done that. I just wondering in case DyanmicMethodInvocation is require, if I showing the customize 404 error page will it enough to prevent user to steal the information from the action property?
Regards Louis ________________________________ From: Dale Newfield <[email protected]> To: Struts Users Mailing List <[email protected]> Sent: Thursday, August 13, 2009 5:45:53 PM Subject: Re: How to prevent user invoke a method? Louis Voo wrote: > Is there anyway to prevent user invoke a method which is not define in the > configuration file? Yes: Set "struts.enable.DynamicMethodInvocation" to "false" -Dale --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
