Re: Security Issue with GET method

2010-09-30 Thread Orpu
. Thanks, Raj Maurizio Cucchiara wrote: > > Hi, > you could obtain session id through session.getId() and put it inside > the form as hidden field, after you could verify the correctness. > > did I answer your question? > > Maurizio Cucchiara > > > > 201

Security Issue with GET method

2010-09-29 Thread Orpu
Hi All, My application is developed using struts framework. Where it takes user id and password at the time of login and goes to next page. I am using method="POST" when i am invoking action class as below. [b] Basically i dont have any problem when i am logging after giving user id and passwor