With most Container's you always want to lock down the WEB-INF directory from any external access. If you use the container with lets say apache you would use the <Location> Override all deny etc.. to keep users out of this directory. Again though this is coming from the jsp/Servlet standpoint. With Struts framework you are using RequestDispatchers to access the files which will not reveal the location of the file and you should be able to access it because its not going through tcp/ip. So yes it will work but not recommend by several books I have read.


> I am new to Struts and learning myself but from what I have read the
 input attribute is for validation if the form/Action fails it will
 send it back to the view.
My book states:
"input - Used to define where the user should be redirected, if a validation
error occurs. Usually, the user is redirected back to the JSP page where
the data was submitted."

And this is exactly what I'm doing. I want to send the user back to the
PostTest.jsp form to let him correct his entry and I want to tell him which
part is wrong showing error messages.

And know that you should never has .jsp
pages located in your WEB-INF directory. Just an idea.

I'm new to Struts too. But this is what I got from the Professional Struts Applications from WROX. They've placed the the jsp directory containing all jsps unter WEB-INF. BTW I wouldn't know what's the trouble with that would be?

Thanks
Tom


--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] * 141 FETCH (FLAGS (\Seen))


--
Sloan Bowman
www.nashlinux.com
www.q3networks.com
www.aboutgoodlettsville.com
www.spudibby.com
---------------------------
Windows 95/NT - 32 bit extensions and a graphical shell for a 16 bit patch to an 8 bit operating system originally coded for a 4 bit microprocessor, written by a 2 bit company that can't stand 1 bit of competition.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to