RE: RegExp issues with Tomcat 5

2004-03-03 Thread Slavik Markovich
On a side note, try using bind variables (prepared statements) in your sql statements.
This way, you don't have to escape anything, gain performance and avoid sql-injection 
attacks.

Slavik.

-Original Message-
From: Karl Coleman [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 02, 2004 10:01 PM
To: Tomcat Users List
Subject: RE: RegExp issues with Tomcat 5


Either. I'll look at the java.util.regex one. I posted at taglib-user earlier and 
still waiting for response. Thanks again.

-Original Message-
From: Shapira, Yoav [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 02, 2004 2:52 PM
To: Tomcat Users List
Subject: RE: RegExp issues with Tomcat 5



Hi,

Is there a regexp library people recommend? I saw there is one on the
Jakarta site.

Library in general or JSP tag library specifically?

I've been fine with java.util.regex, which I think requires JDK 1.4.  If
you must use a JDK older than 1.4, use jakarta-regexp (which tomcat
uses).

For a JSP tag library to handle regular expressions: I don't know and
don't have time to research, but it does seem Glenn is actively working
on the regexp taglib and I can't imagine its next release not working on
tomcat 5.  As I said previously, ask on taglib-user, and I'm sure he'll
respond.

Yoav Shapira



This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---
This message contains information that may be confidential or privileged.
If you are not the intended recipient, you may not use, copy or disclose
to anyone any of the information in this message. If you have received
this message and are not the intended recipient, kindly notify the sender
and delete this message from your computer.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: RegExp issues with Tomcat 5

2004-03-03 Thread Christopher Schultz
Karl,

Using the regexp tag library I think it is still at version 1.0.

Because INSERT into tablename (field1) values ('I CAN'T DO THIS')
generates an error in SQL Server.
If you use a PreparedStatement, then you can send any string to the
statement object and it will do it's own escaping.
-chris



signature.asc
Description: PGP signature


signature.asc
Description: OpenPGP digital signature


RE: RegExp issues with Tomcat 5

2004-03-02 Thread Shapira, Yoav

Hi,

We upgraded tomcat running one of our applications from 4 to 5 this
past =
Friday, March 27th. Since, one of our regular expressions is not =
functioning properly. Here is the expression:

s/(\\|')/\\$1/g

Instead of escaping the apostrophe with another apostrophe for SQL =
purposes, it is replacing the apostrophe with the literal '$1'. It was
=
working with Tomcat 4 and that is the only thing that has changed.

So. What are you suggesting? ;)

The jakarta-regexp that tomcat uses to handle regular expressions has
not changed since September 2003, so many of the tomcat 4.1.x releases
have used it.  Did you use these tomcat 4 releases without a problem?

Alternatively, if you're referring to regexps directly used in your
application, and you're using JDK regexps (the java.util.regex package),
obviously tomcat has nothing to do with that.

Is the rest of your webapp functioning properly in tomcat5, or are there
other errors that perhaps make this regexp one come up?

Yoav Shapira



This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: RegExp issues with Tomcat 5

2004-03-02 Thread Christopher Schultz
Karl,

We upgraded tomcat running one of our applications from 4 to 5 this past =
Friday, March 27th. Since, one of our regular expressions is not =
functioning properly. Here is the expression:
s/(\\|')/\\$1/g

Instead of escaping the apostrophe with another apostrophe for SQL =
purposes, it is replacing the apostrophe with the literal '$1'. It was =
working with Tomcat 4 and that is the only thing that has changed.
What regex library are you using? Tomcat shouldn't have anything in it 
that would affect your regexs.

Not to open up too big of a can of worms, but if you're using JDBC, why 
do you have to escape your own SQL statements?

-chris


signature.asc
Description: OpenPGP digital signature


RE: RegExp issues with Tomcat 5

2004-03-02 Thread Karl Coleman
We are using the regexp tag library in our jsp's. Yes, it worked fine with Tomcat 4. 
The rest of the application is working fine. Users just started noticing that where 
they are putting apostrophes and saving, when they bring the information back up it 
shows as $1. Mary's purse is being brought into the application as Mary$1s purse. 
It is like it isn't interpreting the meaning of the $1 anymore.

Karl

-Original Message-
From: Shapira, Yoav [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 02, 2004 11:57 AM
To: Tomcat Users List
Subject: RE: RegExp issues with Tomcat 5



Hi,

We upgraded tomcat running one of our applications from 4 to 5 this
past =
Friday, March 27th. Since, one of our regular expressions is not =
functioning properly. Here is the expression:

s/(\\|')/\\$1/g

Instead of escaping the apostrophe with another apostrophe for SQL =
purposes, it is replacing the apostrophe with the literal '$1'. It was
=
working with Tomcat 4 and that is the only thing that has changed.

So. What are you suggesting? ;)

The jakarta-regexp that tomcat uses to handle regular expressions has
not changed since September 2003, so many of the tomcat 4.1.x releases
have used it.  Did you use these tomcat 4 releases without a problem?

Alternatively, if you're referring to regexps directly used in your
application, and you're using JDK regexps (the java.util.regex package),
obviously tomcat has nothing to do with that.

Is the rest of your webapp functioning properly in tomcat5, or are there
other errors that perhaps make this regexp one come up?

Yoav Shapira



This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: RegExp issues with Tomcat 5

2004-03-02 Thread Karl Coleman
Using the regexp tag library I think it is still at version 1.0.

Because INSERT into tablename (field1) values ('I CAN'T DO THIS')
generates an error in SQL Server.

Karl

-Original Message-
From: Christopher Schultz [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 02, 2004 12:03 PM
To: Tomcat Users List
Subject: Re: RegExp issues with Tomcat 5


Karl,

 We upgraded tomcat running one of our applications from 4 to 5 this
past =
 Friday, March 27th. Since, one of our regular expressions is not =
 functioning properly. Here is the expression:
 
 s/(\\|')/\\$1/g
 
 Instead of escaping the apostrophe with another apostrophe for SQL =
 purposes, it is replacing the apostrophe with the literal '$1'. It was
=
 working with Tomcat 4 and that is the only thing that has changed.

What regex library are you using? Tomcat shouldn't have anything in it 
that would affect your regexs.

Not to open up too big of a can of worms, but if you're using JDBC, why 
do you have to escape your own SQL statements?

-chris

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: RegExp issues with Tomcat 5

2004-03-02 Thread Shapira, Yoav

Hi,

Using the regexp tag library I think it is still at version 1.0.

You mean http://jakarta.apache.org/taglibs/doc/regexp-doc/intro.html?

I wouldn't be surprised if this taglib didn't work on tomcat 5.  It's
designed and tested for a JSP 1.1/1.2 spec container, like tomcat 4.
Tomcat 5 as you know implements the JSP 2.0 spec, with its new
expression language and several changes to expression evaluation.  It'd
be almost shocking if the taglib worked without modification on tomcat
5.  Ask on taglibs-user
(http://jakarta.apache.org/taglibs/index.html#MailingLists).

Yoav Shapira



This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: RegExp issues with Tomcat 5

2004-03-02 Thread Karl Coleman
Thanks a lot. I will check into it further.



-Original Message-
From: Shapira, Yoav [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 02, 2004 1:14 PM
To: Tomcat Users List
Subject: RE: RegExp issues with Tomcat 5



Hi,

Using the regexp tag library I think it is still at version 1.0.

You mean http://jakarta.apache.org/taglibs/doc/regexp-doc/intro.html?

I wouldn't be surprised if this taglib didn't work on tomcat 5.  It's
designed and tested for a JSP 1.1/1.2 spec container, like tomcat 4.
Tomcat 5 as you know implements the JSP 2.0 spec, with its new
expression language and several changes to expression evaluation.  It'd
be almost shocking if the taglib worked without modification on tomcat
5.  Ask on taglibs-user
(http://jakarta.apache.org/taglibs/index.html#MailingLists).

Yoav Shapira



This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: RegExp issues with Tomcat 5

2004-03-02 Thread Karl Coleman
Is there a regexp library people recommend? I saw there is one on the Jakarta site.

Karl

-Original Message-
From: Shapira, Yoav [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 02, 2004 1:14 PM
To: Tomcat Users List
Subject: RE: RegExp issues with Tomcat 5



Hi,

Using the regexp tag library I think it is still at version 1.0.

You mean http://jakarta.apache.org/taglibs/doc/regexp-doc/intro.html?

I wouldn't be surprised if this taglib didn't work on tomcat 5.  It's
designed and tested for a JSP 1.1/1.2 spec container, like tomcat 4.
Tomcat 5 as you know implements the JSP 2.0 spec, with its new
expression language and several changes to expression evaluation.  It'd
be almost shocking if the taglib worked without modification on tomcat
5.  Ask on taglibs-user
(http://jakarta.apache.org/taglibs/index.html#MailingLists).

Yoav Shapira



This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: RegExp issues with Tomcat 5

2004-03-02 Thread Shapira, Yoav

Hi,

Is there a regexp library people recommend? I saw there is one on the
Jakarta site.

Library in general or JSP tag library specifically?

I've been fine with java.util.regex, which I think requires JDK 1.4.  If
you must use a JDK older than 1.4, use jakarta-regexp (which tomcat
uses).

For a JSP tag library to handle regular expressions: I don't know and
don't have time to research, but it does seem Glenn is actively working
on the regexp taglib and I can't imagine its next release not working on
tomcat 5.  As I said previously, ask on taglib-user, and I'm sure he'll
respond.

Yoav Shapira



This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: RegExp issues with Tomcat 5

2004-03-02 Thread Karl Coleman
Either. I'll look at the java.util.regex one. I posted at taglib-user earlier and 
still waiting for response. Thanks again.

-Original Message-
From: Shapira, Yoav [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 02, 2004 2:52 PM
To: Tomcat Users List
Subject: RE: RegExp issues with Tomcat 5



Hi,

Is there a regexp library people recommend? I saw there is one on the
Jakarta site.

Library in general or JSP tag library specifically?

I've been fine with java.util.regex, which I think requires JDK 1.4.  If
you must use a JDK older than 1.4, use jakarta-regexp (which tomcat
uses).

For a JSP tag library to handle regular expressions: I don't know and
don't have time to research, but it does seem Glenn is actively working
on the regexp taglib and I can't imagine its next release not working on
tomcat 5.  As I said previously, ask on taglib-user, and I'm sure he'll
respond.

Yoav Shapira



This e-mail, including any attachments, is a confidential business communication, and 
may contain information that is confidential, proprietary and/or privileged.  This 
e-mail is intended only for the individual(s) to whom it is addressed, and may not be 
saved, copied, printed, disclosed or used by anyone else.  If you are not the(an) 
intended recipient, please immediately delete this e-mail from your computer system 
and notify the sender.  Thank you.


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]