Re: Security Issue with GET method

2010-09-29 Thread Chris Pratt
Or you could just check if request.getMethod().equals("POST") (*Chris*) On Wed, Sep 29, 2010 at 10:11 AM, Maurizio Cucchiara < [email protected]> wrote: > Hi, > you could obtain session id through session.getId() and put it inside > the form as hidden field, after you could verify th

Re: Security Issue with GET method

2010-09-29 Thread Maurizio Cucchiara
Hi, you could obtain session id through session.getId() and put it inside the form as hidden field, after you could verify the correctness. did I answer your question? Maurizio Cucchiara 2010/9/29 Orpu : > > Hi All, > > My application is developed using struts framework. Where it takes user id

Security Issue with GET method

2010-09-29 Thread Orpu
Hi All, My application is developed using struts framework. Where it takes user id and password at the time of login and goes to next page. I am using method="POST" when i am invoking action class as below. [b] Basically i dont have any problem when i am logging after giving user id and passwor