Re: Code Submission - Wild Card Aliases

2005-05-03 Thread 国炳 陈 
??


Jin Yu <[EMAIL PROTECTED]> 写道:
On 5/2/05, George Sexton wrote:
> I have completed the coding in o.a.t.u.http.mapper.Mapper to implement
> wild-card aliases.
> 
> If a request for a host is made, and that host is not found, the code tests
> the host and aliases list and looks for wild-cards.
> 
> So, a host name of www.mydomain.com would match an alias of *.mydomain.com.
> This additional level of testing is only done if the the presented host name
> is not found in the standard host list. Once a host is found via wild-card,
> it is added to the standard host list. Subsequent requests for that host
> name will find it via the standard search mechanism.
> 

Is there any provision to things from the host list or to limit its
size? It seems the behavior of adding wild-card matches to the host
list can be easily exploited in a denial of service attack by simply
requesting a lot of different host names matching some wild-card until
the host list consume all available memory.

Jin Yu

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



祝福你开心生活每一天!
\\\|///
\\ - - //
( @ @ )
┏ ━━oOOo- (_)-oOOo━━
┃姓名:gzlongzhijian 
┃QQ(OICQ) 40831127 （请大家Q我） 
┃信箱:[EMAIL PROTECTED] 
┃主页:http://www.gzlzj.com 
┃广州市石牌西路西华大街二巷二号401 
┃邮编:510630 电话:020-33629058 
┃ 
┃茫茫人海，相识你是我的福份； 
┃ 
┃岁月如梭，送上我口里喊出的祝福 
┃ Oooo 
┗━━━ oooO━ ( )━━
( ) ) /
\ ( (_/
\_)



-
Do You Yahoo!?
150万曲MP3疯狂搜，带您闯入音乐殿堂
美女明星应有尽有，搜遍美图、艳图和酷图
1G就是1000兆，雅虎电邮自助扩容！

Re: Encoding problem during authentication

2005-04-30 Thread 国炳 陈 
???

Andrey Grebnev <[EMAIL PROTECTED]> wrote:Hello,

I suppose I found the problem with Tomcat. I have already
write about it into tomcat-user mailting list but I did not
get feedback.

I have a problem under following environment:
- Windows XP SP2
- JDK 1.4.2_04
- Tomcat 5.5.9
- Struts 1.2.4

I use characterEncodingFilter to setup UTF-8 encoding
into request before
using the content of the request. When I submit form with
POST
method it works well. I use FORM based authentication.

However if I perform the following steps I have the
problems with
encoding:

1. Open JSP with HTML form which submit some UTF-8 string
data using POST
method.
2. Waiting when the HTTP session is invalidated (session
timeout).
3. Submit the form.
4. Because session is invalidated I need to
re-authenticate myself.
5. After success authentication The processing of the
original request is
continued.
6. The data of the form (from first step) is saved in
incorrect
encoding.

I suppose that Valve (FormAuthenticator) which
responsible for authentication is
processed earlier then characterEncodingFilter and the
parameters from
POST request are parsed using
DEFAULT_CHARACTER_ENCODING="ISO-8859-1" when the original
request
information is saved into session.

I have tried to specify
enctype="application/x-www-form-urlencoded;
charset=utf-8" attribute for my FORM tag. But e.g.
Mozilla browser
specify only Content-Type:
application/x-www-form-urlencoded header
and cut out specified charset.

Any ideas?

--
Best regards.
Andrey Grebnev

Треть суток на треть дешевле!
МАРК-ИТТ ввёл льготные цены на ночной 
трафик в Народном Интернете
цены на трафик на 30% ниже дневных в период с 
1:00 до 9:00.
600-й - 1.75р, Профессиональный - 1.89р, Деловой - 
1.96р, 5-ка - 2,03р, Домашний - 2,10р

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




祝福你开心生活每一天!
\\\|///
\\ - - //
( @ @ )
┏ ━━oOOo- (_)-oOOo━━
┃姓名:gzlongzhijian 
┃QQ(OICQ) 40831127 （请大家Q我） 
┃信箱:[EMAIL PROTECTED] 
┃主页:http://www.gzlzj.com 
┃广州市石牌西路西华大街二巷二号401 
┃邮编:510630 电话:020-33629058 
┃ 
┃茫茫人海，相识你是我的福份； 
┃ 
┃岁月如梭，送上我口里喊出的祝福 
┃ Oooo 
┗━━━ oooO━ ( )━━
( ) ) /
\ ( (_/
\_)



-
Do You Yahoo!?
150万曲MP3疯狂搜，带您闯入音乐殿堂
美女明星应有尽有，搜遍美图、艳图和酷图
1G就是1000兆，雅虎电邮自助扩容！

Re: cvs commit: jakarta-tomcat-connectors/jni/examples/org/apache/tomcat/jni Echo.java

2005-04-15 Thread 国炳 陈 
???

[EMAIL PROTECTED] wrote:jfclere 2005/04/15 07:24:53

Modified: jni/examples/org/apache/tomcat/jni Echo.java
Log:
Quick hack to get it compiled.

Revision Changes Path
1.3 +6 -4 jakarta-tomcat-connectors/jni/examples/org/apache/tomcat/jni/Echo.java

Index: Echo.java
===
RCS file: 
/home/cvs/jakarta-tomcat-connectors/jni/examples/org/apache/tomcat/jni/Echo.java,v
retrieving revision 1.2
retrieving revision 1.3
diff -u -r1.2 -r1.3
--- Echo.java 14 Apr 2005 06:46:28 - 1.2
+++ Echo.java 15 Apr 2005 14:24:53 - 1.3
@@ -51,8 +51,8 @@
props.load(is);
is.close();
echoAddr = props.getProperty("echo.ip", "127.0.0.1");
- echoPort = Integer.decode(props.getProperty("echo.port", "23"));
- echoNmax = Integer.decode(props.getProperty("echo.max", "1"));
+ echoPort = Integer.decode(props.getProperty("echo.port", "23")).intValue();
+ echoNmax = Integer.decode(props.getProperty("echo.max", "1")).intValue();
}
catch (Throwable t) {
; // Nothing
@@ -159,15 +159,17 @@
worker.start();
}
}
+ /* XXX: JFC quick hack
catch(Error err ) {
if (Status.APR_STATUS_IS_TIMEUP(err.getError())) {
- /* TODO: deal with timeout */
+ /0 TODO: deal with timeout 0/
}
else {
err.printStackTrace();
break;
}
}
+ */
catch( Exception ex ) {
ex.printStackTrace();
break;




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




祝福你开心生活每一天!
\\\|///
\\ - - //
( @ @ )
┏ ━━oOOo- (_)-oOOo━━
┃姓名:gzlongzhijian 
┃QQ(OICQ) 40831127 （请大家Q我） 
┃信箱:[EMAIL PROTECTED] 
┃主页:http://www.gzlzj.com 
┃广州市石牌西路西华大街二巷二号401 
┃邮编:510630 电话:020-33629058 
┃ 
┃茫茫人海，相识你是我的福份； 
┃ 
┃岁月如梭，送上我口里喊出的祝福 
┃ Oooo 
┗━━━ oooO━ ( )━━
( ) ) /
\ ( (_/
\_)



-
Do You Yahoo!?
150万曲MP3疯狂搜，带您闯入音乐殿堂
美女明星应有尽有，搜遍美图、艳图和酷图
1G就是1000兆，雅虎电邮自助扩容！