Re: Validor has a problem with negative expressions

2004-11-03 Thread jeichels
By the way in this I use the expanded forms of & g t ; and & l t ; minus the spaces, but you can't see them on the page below. - Original Message - From: [EMAIL PROTECTED] Date: Thursday, November 4, 2004 2:28 am Subject: Validor has a problem with negative expressions > > I have th

Re: html:text in logic:iterate

2004-11-03 Thread Erik Weber
Couldn't you just use one of the expression languages? For example: . . . in a JSP 2.0 (Expression Language-aware) container, or, using the EL tags: or <%= mymobilephaseloadings.getPercentage() %> using the older runtime expression language. Not sure if my syntax is 100% correct. Also, I thin

Validor has a problem with negative expressions

2004-11-03 Thread jeichels
I have the validator working doing some fairly complex field validations, but I am having a problem with what I think should be a trivial thing. I am trying to create an expression where you get all but html types of characters. I have tried variations, but can't seem to get this to work.

RE: html:text in logic:iterate

2004-11-03 Thread Sebastian Ho
How do I populate it in the Action if I need to iterate through the ActionForms in my JSP? I am thinking that it is just an issue of getting around the parser. In other instance I have, just adding quotes here and there to 'fool' the parser solves my problems. e.g. I can have a bean:write tag insi

RE: html:text in logic:iterate

2004-11-03 Thread Girish Kumar K. P.
Anyway , the value if u give the "value" attribute, the values populated into the form bean from the action will not be displayed. Text field will diplay property="percentage"/> So, poipulate the form bean at the action . That's it Dopn't give the value attribute. It will work -Original Me

RE: html:text in logic:iterate

2004-11-03 Thread Sebastian Ho
The user is actually editing some data that is already saved. So I need the data to be displayed in the textbox (form). sebastian On Thu, 2004-11-04 at 14:52, Girish Kumar K. P. wrote: > U shouldn't give the value attribute there. The value would be read from > the form > > Regards, > Girish >

RE: html:text in logic:iterate

2004-11-03 Thread Girish Kumar K. P.
U shouldn't give the value attribute there. The value would be read from the form Regards, Girish -Original Message- From: Sebastian Ho [mailto:[EMAIL PROTECTED] Sent: Thursday, November 04, 2004 12:18 PM To: Struts Users Mailing List Subject: html:text in logic:iterate Hi I have a i

Re: Why can't I do or with no explicit action

2004-11-03 Thread Erik Weber
I may not fully understand your problem, but won't using a variable to render your form action solve your problem? For example: someBean being some object in some scope that is available to the JSP page, someProperty being the action URL which was set by logic in the page prep (Action) code?

html:text in logic:iterate

2004-11-03 Thread Sebastian Ho
Hi I have a iterate tag which contains a text box. I wish to display value in the textbox. But this line in the JSP couldnt get through the parsing. "/> Anyone knoww how to get around this? Thanks Sebastian Ho -

PageFlow

2004-11-03 Thread Ben
Hi What is the current status of PageFlow? http://cvs.sourceforge.net/viewcvs.py/struts/pageFlow/ Thanks Ben - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

Why can't I do or with no explicit action

2004-11-03 Thread Mark
Hi Folks, Struts newbie here. In "standard" html, a form action is optional. If not specified, when you hit submit, that form's action "goes to" that same URL, thus returns back to that same form. I effectively want to do the same thing in struts. The reason is I want to reuse some

Java, J2EE,Struts requirement

2004-11-03 Thread Vicky
Hello Group, I am looking for a project in NY,NJ area. Let me know if anyone know any open position in these two areas for Java,J2EE,XML developer/architect. Thanks, Vicky __ Do you Yahoo!? Check out the new Yahoo! Front Page. www.yahoo.com

Re: Struts and datasource

2004-11-03 Thread Erik Weber
Glancing at this, I have a couple suggestions. 1) Don't configure your data source in struts-config.xml. This is no longer accepted practice (although that doesn't mean it shouldn't work). Configure your data source in a Struts-independent way (in this case, by doing it in your context XML file

Re: Need an alternative to bean:define

2004-11-03 Thread Eddie Bush
I would question anyone who told me I had to use something that is going away in the future (most of Struts' taglibs), instead of using a standard technology (the JSTL). Are they fully-aware of the decision they're making? Are you running within a container that supports Servlet Specification

RE: Need an alternative to bean:define

2004-11-03 Thread Janice
Thanks Joe, but I just can't use to refer to a variable I've already defined. Its just a glitch with my versions, but thank you for your answer. What I ended up doing is changing the second to: <% lastClientName = String.valueOf(((mypackage.dataBeans.Survey)widget).getClientName()); %> It work

RE: hacker-proofing Struts-based exposed websites

2004-11-03 Thread Seetamraju, Uday
> -Original Message- > From: Matt Bathje [mailto:[EMAIL PROTECTED] > Just hope they don't break you programming policies and extend > ValidatorForm (or just use DynaValidatorForm!) instead of extending > SafeValidatorForm :) Well, its easier that wondering if all the validations are imp

RE: hacker-proofing Struts-based exposed websites

2004-11-03 Thread Seetamraju, Uday
See numbers in attached email below. 1. You know I can't get that enforced in the team. 2. I agree with you on this, and I did mention this in my web page. BUT. Maybe I have been a "team player" for too long, but I don't see how else, I can take care of human-mistakes during development

Re: hacker-proofing Struts-based exposed websites

2004-11-03 Thread Matt Bathje
Seetamraju, Uday wrote: Like you, that's what I thought initially, until the security scanning application report hit me. For each simulated attack (including null-characters and other characters) our *.do URLs were showing errors and exceptions in all their full glory right on the web page. Take

Re: hacker-proofing Struts-based exposed websites

2004-11-03 Thread Matt Bathje
Yes, you would have to do it for every form in the application. To me that isn't an issue though because for most (I'd say 95%+) of the forms in my application, I already have a validator entry set up - I would just need to add the invalidCharacter validation and its variables to each form. If

RE: hacker-proofing Struts-based exposed websites

2004-11-03 Thread Seetamraju, Uday
Like you, that's what I thought initially, until the security scanning application report hit me. For each simulated attack (including null-characters and other characters) our *.do URLs were showing errors and exceptions in all their full glory right on the web page. That was the basis for my i

RE: how do I count array in logic:iterate

2004-11-03 Thread Peng, Meimin
I miss this tag. Thanks. --MM -Original Message- From: news [mailto:[EMAIL PROTECTED] On Behalf Of Bill Siggelkow Sent: Wednesday, November 03, 2004 3:45 PM To: [EMAIL PROTECTED] Subject: Re: how do I count array in logic:iterate Number of fruits: -Bill Siggelkow Peng, Meimin wrote: >

RE: Logon/Logoff Design Question

2004-11-03 Thread Tim Carr
Magic ! Thank you very much Jeff ! Your code worked almost immediately, all I had to do was check for a null pathInfo in the Action code, in order for users to still be able to log in manually. Again, thanks for your time and effort. Tim -Original Message- From: news [mailto:[EMAIL PRO

Struts and datasource

2004-11-03 Thread Philippe PONSONNET
Hello, I try to use a datasource in the struts-config.xml The file :

Struts and datasource

2004-11-03 Thread Philippe PONSONNET
Hello, I try to use a datasource in the struts-config.xml The file :

RE: Need an alternative to bean:define

2004-11-03 Thread Joe Hertz
Janice, Does this snippet work if you move all of the bean:defines insidea of your logic:iterate? I haven't tested this myself, but I strongly suspect that the problem is the fact that bean:define declares the variable in the resulting servlet code that gets generated. It's trying to declare a va

RE: Need an alternative to bean:define

2004-11-03 Thread Joe Hertz
Janice, Does this snippet work if you move all of the bean:defines insidea of your logic:iterate? I haven't tested this myself, but I strongly suspect that the problem is the fact that bean:define declares the variable in the resulting servlet code that gets generated. It's trying to declare a va

Re: how do I count array in logic:iterate

2004-11-03 Thread Bill Siggelkow
Number of fruits: -Bill Siggelkow Peng, Meimin wrote: Hi, I've an array list called fruits. And, I want to count the number of fruit. How can I do it to write out the number? <%=index%> Thanks. --MM CONFIDENTIALITY NOTICE: The information in this e-mail is privileged

Re: Logon/Logoff Design Question

2004-11-03 Thread Adam Hardy
I did this and spent ages tying myself in knots. With POSTs, I was saving the form that had collected all the parameters. However, it quickly got complicated. Good luck. On 11/03/2004 05:31 PM Jeff Beal wrote: Let me give you some very quick pseudo-code that might help you: In SecureAction exec

RE: hacker-proofing Struts-based exposed websites

2004-11-03 Thread Seetamraju, Uday
Our next version goes out two months from now. I shall get the latest struts just before that and verify what is being said. Also, null-values and null-characters are two of the many checks we need. The function below checks for null-value (which I agree is also one the rudimentary hacker att

RE: hacker-proofing Struts-based exposed websites

2004-11-03 Thread Seetamraju, Uday
You may have a point there about me needing to take a better look at the current Validator. But, from what you write below, do you want me to do the following for --every-- form in my application? Is there a 'global-validation' available in the latest validator? -Original Message- From:

Re: hacker-proofing Struts-based exposed websites

2004-11-03 Thread Vic Cekvenich
There are known hacks, some dealing with buffer overruns of the server that gives you acess to the OS shell, or port scans or sniffing, or ... So I see you have apache 1.3 (with it's known hacks) in front of it. I assume you read up on securing apache. I think very little has to do w/ Struts i

Remote Errors and Filters

2004-11-03 Thread Mike Darretta
I am having difficulty using a custom filter to capture remote exceptions. All requests for our application are filtered through a class called "ErrorFilter". If the exception is a client-side error, the filter takes care of the exception handling and forwards to the appropriate trouble report

how do I count array in logic:iterate

2004-11-03 Thread Peng, Meimin
Hi, I've an array list called fruits. And, I want to count the number of fruit. How can I do it to write out the number? <%=index%> Thanks. --MM CONFIDENTIALITY NOTICE: The information in this e-mail is privileged and confidential. Any use, copying or dissemination

Re: hacker-proofing Struts-based exposed websites

2004-11-03 Thread Matt Bathje
[snip] if you feel comfortable typing in struts validations in each and every form class of each and every application, who can stop you? And you are also quite free to edit each and every one of them should you you want to add a new kind of check to your forms. Even if you choose to use the stru

Re: javascript question

2004-11-03 Thread Michael Rush
Excellent. I figured there was something like this. Your solution worked nicely. For any others that may be interested, here's an example of what I used: onclick="this.form['parent.nestedname'][2].checked='true'" Thanks, Michael On Nov 3, 2004, at 10:51 AM, Jason King wrote: document.formnam

Re: Need an alternative to bean:define

2004-11-03 Thread Wendy Smoak
From: "Janice" <[EMAIL PROTECTED]> > Thanks Matt, but I think my problem is that I'm using Struts 1.1 (and can't > change it) > According to: http://struts.apache.org/userGuide/struts-bean.html#define > You can't re-define in 1.1. There must be a workaround? Honestly, I'd last 2.5 seconds in a pl

Re: Need an alternative to bean:define

2004-11-03 Thread Matt Bathje
Ahh, missed that one - note that it is JSP 1.1, not Struts 1.1. Never had the limitation, so I can't help with workarounds, sorry! Matt Janice wrote: Thanks Matt, but I think my problem is that I'm using Struts 1.1 (and can't change it) According to: http://struts.apache.org/userGuide/struts-bean.h

RE: hacker-proofing Struts-based exposed websites

2004-11-03 Thread David G. Friedman
Uday, I'm afraid you maybe mistaken on at least one of your points. At least the HTML taglib makes sure that all values are filtered to prevent cross-site scripting by parsing <> and other characters. Here is a code snippet from (I think) the nightly build. I'm not sure about versions before St

RE: Need an alternative to bean:define

2004-11-03 Thread Janice
Thanks Matt, but I think my problem is that I'm using Struts 1.1 (and can't change it) According to: http://struts.apache.org/userGuide/struts-bean.html#define You can't re-define in 1.1. There must be a workaround? TIA, J -Original Message- From: Matt Bathje [mailto:[EMAIL PROTECTED]

Re: javascript question

2004-11-03 Thread Mark Miller
This is where the HTML styleId attribute comes in handy in combination with indexId of the LOGIC Iterator. This sets up unique object identifiers by id and then you can get at them by reference in your javascript: var ns4 = document.layers? true : false; var ie = document.all? true : false;

RE: hacker-proofing Struts-based exposed websites

2004-11-03 Thread Seetamraju, Uday
Sure. I never mentioned that I was adding totally new functionality to struts. if you feel comfortable typing in struts validations in each and every form class of each and every application, who can stop you? And you are also quite free to edit each and every one of them should you you want to

Re: javascript question

2004-11-03 Thread Jason King
document.formname["parent.nestedname"] will reference an element in the form formname which has a period in it's name. Michael Rush wrote: I've got a form that's using nested forms, with the following type of layout.. [radio] option 1 [text] value 1 [text] value 2 [radio] option 2 [tex

javascript question

2004-11-03 Thread Michael Rush
I've got a form that's using nested forms, with the following type of layout.. [radio] option 1 [text] value 1 [text] value 2 [radio] option 2 [text] value 1 [text] value 2 [radio] option 3 [text] value 1 [text] value 2 Each of the groups is a nested form, so the form element na

Re: Need an alternative to bean:define

2004-11-03 Thread Matt Bathje
Matt Bathje wrote: Janice - I do multiple bean:defines (with values, not with name/property attributes) in some of my jsps, and never have problems, and am therefore assuming that the name/property attributes are causing the problem. Here may be a non-jstl workaround you can try: Doh...o

Re: Need an alternative to bean:define

2004-11-03 Thread Matt Bathje
Janice - I do multiple bean:defines (with values, not with name/property attributes) in some of my jsps, and never have problems, and am therefore assuming that the name/property attributes are causing the problem. Here may be a non-jstl workaround you can try: Matt Janice wrote: U

RE: Need an alternative to bean:define

2004-11-03 Thread Janice
Unfortunately, I need to get all kinds of approval to use JSTL, is there no Struts tag that will do this? TIA, J -Original Message- From: atta-ur rehman [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 02, 2004 5:04 PM To: Struts Users Mailing List Subject: Re: Need an alternative to be

Re: Logon/Logoff Design Question

2004-11-03 Thread Jeff Beal
Let me give you some very quick pseudo-code that might help you: In SecureAction execute method: if (request.getSession().getAttribute("username") == null) { String pathInformation = mapping.getPath(); request.getSession().setAttribute("securedPath",pathInformation); request.getSession().s

RE: Logon/Logoff Design Question

2004-11-03 Thread Tim Carr
Hello Jeff, thanks for your swift reply, I should have mentioned, I tried roughly what you explained, and came up stuck at your step #2; how do I "continue processing" ? That implies transferring control BACK to the place that originally got hit. I neither know how to determine which place was ori

Re: hacker-proofing Struts-based exposed websites

2004-11-03 Thread Bill Chmura
I can't really speak to the actual code or process itself as I have not worked with struts in a little while - but anytime something is labled as "hacker proof" it kind of sticks under my nail. Maybe its more aptly "securing validation", but I cannot imagine that this would "hacker proof your

Re: Logon/Logoff Design Question

2004-11-03 Thread Jeff Beal
Here's what you'll need to do: 1) In your SecureAction class, prior to returning the "login" forward you need to store the information relevant to the current request in the session. Note that the word 'relevant' is somewhat subjective, but probably includes the exact request URI and the full s

Re: hacker-proofing Struts-based exposed websites

2004-11-03 Thread Wendy Smoak
From: "Seetamraju, Uday" <[EMAIL PROTECTED]> > The entire details are in one nice HTML web page that I wrote up just for this. > http://mysite.verizon.net/sarma/GNU/SafeValidatorForm.html The part that caught my eye was 'testing' it by entering the entire URL to the jsp file. Most of us already p

Re: hacker-proofing Struts-based exposed websites

2004-11-03 Thread Matt Bathje
Seetamraju, Uday wrote: We are putting some websites open to all IP addresses using Appservers. We have successfully stayed well within JSTL and Struts. My google searches didn't get me to any open information on how to use struts in a safe manner. So, I had to start inventing the wheel. I hope I

Logon/Logoff Design Question

2004-11-03 Thread Tim Carr
Hello all, As a Struts n00b I'm trying to make a modification to an already-existing Struts application. Currently there are some Actions that anyone who uses the application is supposed to be able to execute, these Actions simply extend Action and override the execute method (as you'd expect). T

hacker-proofing Struts-based exposed websites

2004-11-03 Thread Seetamraju, Uday
We are putting some websites open to all IP addresses using Appservers. We have successfully stayed well within JSTL and Struts. My google searches didn't get me to any open information on how to use struts in a safe manner. So, I had to start inventing the wheel. I hope I didn't spend this much

Tiles Summary Tab

2004-11-03 Thread PC Leung
I have tried the implementation of Tiles's Summary Tab. It has a purple boundary and grey tab. How can I 1. add image to tab 2. change color of boundary 3. or remove the boundary. thanks - To unsubscribe, e-mail: [EMAIL PROTECT

RE: JSTL String manipulation

2004-11-03 Thread Lowery, Mat
Jakarta string taglib might be an option: http://jakarta.apache.org/taglibs/doc/string-doc/intro.html -Original Message- From: andy wix [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 03, 2004 4:43 AM To: [EMAIL PROTECTED] Subject: JSTL String manipulation Hi, I iterate through a

RE: commons vs !commons

2004-11-03 Thread David G. Friedman
JAn, Wouldn't you want the commons-digester to go into %tomcat_home%\shared\lib so it could be used by everything? And why do you need a shared struts? Can you get away with changing each context to have the parameter crossContext=true allowing you to get to that context from another webapp, as d

Re: commons vs !commons

2004-11-03 Thread Joe Germuska
At 12:11 PM +0100 11/3/04, Jan H. Hansen wrote: On Tomcat 4.1.30 Putting commons-digester into %tomcat_home%\common\lib makes tomcat not wanna start(Stacktrace under appendix A). Why do you need to put commons-digester into that directory? If you're using it in your webapp, why not keep it in WEB

Tiles Pages Tabs and Summaries Tabs

2004-11-03 Thread PC Leung
What is the difference between Pages Tabs and Summaries Tabs? It seems that they behaves similarly in Tiles examples. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]

RE: JSF or Struts w/ JSF (again)

2004-11-03 Thread Jesse Alexander (KBSA 21)
Hi Howard If you are starting a project from scratch, then Do NOT mix the frameworks. Vic is right when he says "it gets more complicated". --- All the provisions for framework-coexistence built into JSF are usefull for the migration cases. Lets say when you have to add

commons vs !commons

2004-11-03 Thread Jan H. Hansen
On Tomcat 4.1.30 Putting commons-digester into %tomcat_home%\common\lib makes tomcat not wanna start(Stacktrace under appendix A). According to ClassLoader-How-To ClassLoader hierachy looks something like this: Bootstrap | System | Common /\ Catalina Sh

SV: Multibox problem

2004-11-03 Thread Roland Carlsson
Hi Robert! Thanks for your answer. It pointed me to the problem. I used the add instead of addAll of the Collection-interface. So instead of adding the elements (Strings) I added the collection as a collection. Regards Roland Carlsson Den 04-11-03 11.50, skrev "Robert Taylor" <[EMAIL PROTECTED]

RE: Multibox problem

2004-11-03 Thread Robert Taylor
How many items are in the "func" data structure in request scope? This is what drives the number of iterations. robert > -Original Message- > From: Roland Carlsson [mailto:[EMAIL PROTECTED] > Sent: Wednesday, November 03, 2004 5:02 AM > To: Struts Users Mailing List > Subject: Multibox pr

Re: JSTL String manipulation

2004-11-03 Thread Adam Hardy
You would be able to do something using the JSTL functions like split() but I don't think it will be very stable. I think you would be better off manipulating the file names before you get to the JSP or you could make a taglib, using tokenize() for example, and using a few lines of code. I have

Multibox problem

2004-11-03 Thread Roland Carlsson
Hi! I'm trying to create a set of checkboxes with the MulitBox-tag. The problem is that I get an extra checkbox with brackets around its value, like in this html-code where I expect two checkboxes but get three: [test, prov] prov test My page has this code inside it: ("funk" are

Re: Upload file size limit

2004-11-03 Thread Andrew Hill
One technique would be overriding dispatchactions execute method in that action to check for this attribute and then delegating back to the superclass to handle the normal situation when its not found or calling the appropriate method when it is? ie: public ActionForward execute(ActionMapping m

JSTL String manipulation

2004-11-03 Thread andy wix
Hi, I iterate through a collection and the following line yeilds the full path of a file: where messages is a Map and MSG1 is the key. The issue is that I would like only to display the file name, not the full path. Can this be done with JSTL or should I revert to good old fashioned Java? Rega

Upload file size limit

2004-11-03 Thread Diego
Hi! I want to prevent the users from uploading files bigger than 1 MB, so I've put this on my struts-config: The problem is that, AFAIK, when the max file size is exceeded, the same Action which receives the file is invoked with this attribute in the request: MultipartRequestHandler.ATTRIBUTE_M