DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=21624>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=21624

Extend TokenProcessor to handle a list of transaction tokens





------- Additional Comments From [EMAIL PROTECTED]  2004-07-23 13:56 -------
I've posted another potential mechanism to solve this issue in
http://issues.apache.org/bugzilla/show_bug.cgi?id=30295
Sorry for the duplication.

BTW, storing the next token in the session is not correct, as Erik mentions it,
but storing it in the request won't work either (as is). You need to make sure
to get the next token from the request parameters or the request attributes in
the form tag. Indeed, if the form tag gets it from the request attribute only,
the following scenario won't work:

- request
- generate token and put it in the request
- display the form: get the token from the request attribute and put it in a
hidden field
- post the form
- validate fails: forward to input
- display the form: the token is not in the request attribute anymore, so no
token hidden field is generated.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to