I know of two general categories of security issues:
First, all security issues that apply to Web Applications apply to
Struts. Fortunately, there is lots of documentation in the web, a few
books, and quite a few tools that test the security of your web
application.
Second, *use a recent versio
I find that "no framework" allows quicker writing while using a
framework (i.e.: Struts) leads the thought processes to eventually
produce cleaner, better organized, easier to maintain code. At least at
first, using a framework will be slower, with productivity catching up
as you gain experience an
Also, if you are dealing with credit card numbers, make sure you study
up on PCI regulations. There are specific rules about how much of the
number you may keep short-term and long-term, what strength of
encryption is required, etc. And pretty severe penalties for your
company if you fail to foll
I have to agree. Having a separate Struts 2 list would be nice, but
let's face it...
- Struts 1 "owned" the web presentation space, making the move from 1.x
to 1.y brainless.
- But since Struts 2 is a complete rewrite and JSF is competing strongly
for the same space (with much help from the t
I think that even in the late versions of Struts 1.x the TLD files were
no longer needed in WEB-INF, and were accesible directly from the Struts
JARs. And as another poster said, the thought continued in 2.0 so that
you need even less.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[E
I too like Netbeans, although I now use Eclipse because my company
focuses on using Eclipse and RAD.
I am not sure if I'd recommend MyEclipse for Struts. I heard wonderful
things about it, but when I checked their website I only saw support for
Struts 1.0 and 1.1... not good enough. I'd want at
I have not used Netbeans for over a year and my memory of it is starting to
fade, but I think the answer is "all".
-Original Message-
From: Martin Gainty [mailto:[EMAIL PROTECTED]
Sent: Sunday, February 25, 2007 10:38 AM
To: Struts Users Mailing List
Subject: Offtopic netbeans
O/T quer
There probably is a better "struts" way of doing this, but here is one
way that gets the job done:
- Use a list of string-formatted datetimes. Format the dates before
putting them on the list.
- For formatting, review the classes java.util.Date, java.util.Calendar,
java.text.DateFormat, java.tex
IBM seems to have abandoned Struts (stuck at Struts 1.1, with no plans
to support newer versions) on their RAD 6 IDE and later. They also
strongly discourages replacing the Struts JAR files in RAD with newer
versions, stating that various problems would occur.
I am trying to find a way to solve
You could also consider a continous integration environment:
- Code in one machine
- Submit changes to a version control system (i.e.: CVS or ClearCase)
- Use a Continous Integration tool to do the formal build (i.e.:
CruiseControl or Buildforge
But I must admit... I'm a bit puzzled with the idea
27;s buffers.
Would you recommend avoiding portal architectures for the first version?
Many of the potential customers are government agencies, and they're big
into the portal models -- helps them avoid having to coordinate the work
of many different contractors.
Thanks Again,
--Phil
Bruno
You'll have to pick different tools for different needs, then put them
together. Here are some ideas based on open source:
- JDK 1.5
- An IDE. Netbeans and Eclipse are good. Eclipse usually requires
picking and installing plug-ins, but nowadays there are distributions
you can get, or you can us
Yes, I know this is embarassing, but my company still uses Struts 1.1...
because of a RAD6 dependency.
Somebody just mentioned that there is a security hole in Struts 1.1.
When I searched for it, I did find a reference to it in a pre-1.3
discussion, but no details. It seemed to be a vulnerability
I think there are many of us drooling but patiently waiting for a GA
(General availability) version of Struts 2, especially if the version of
Spring it "officially" integrated with was the current one (2.0.x).
Without it, most of the companies we work for won't allow us touch
Struts 2.
But please
Struts 1.2.9 is particularly attractive because Spring 2.0 "officially"
supports 1.2.9. Of course, every report I've heard is that 1.3.5 and
even Struts 2.0.x work well with Spring 2.0, but it's not the
"officially supported" version.
bruno
-Original Message-
From: Joseph McGranaghan [ma
rt IBM RAD?
What about RAD 7.0? The IDE in my PC is going to be upgraded to RAD 7.0
in a few days. Is it possible to use the most recent version of the
Exadel as a tool for the Struts framework? Thanks for advice.
--Caroline
--- Bruno Melloni <[EMAIL PROTECTED]> wrote:
> I doubt it.
I doubt it. RAD 6 is based on an old version of Eclipse (I think 3.0),
and old versions of Struts and other technologies. It also includes its
own attempt at what Exadel does for Struts. Works well if you can live
with the limitations, but otherwise... Not so hot. Exadel seems
targeted at those
ope that helps.
--
James Mitchell
678.910.8017
On Nov 14, 2006, at 11:21 AM, Bruno Melloni wrote:
> I think I am being misunderstood.
>
> The problem is not related to building a WAR/EAR and running on an
> application server. Using the TLDs from the jars nor using the URI
>
e it helps,
> regards,
> robin
>
> Paul Benedict wrote:
> > The taglib URI should be the the http:// address, not the /META-INF
> > location. If you are unsure what the address is, open up the TLD
> > files and see.
> >
> > -- Paul
> >
> > Bruno Me
ry this...
$ mvn eclipse:eclipse -Dwtpversion=1.0
--
James Mitchell
678.910.8017
On Nov 13, 2006, at 1:11 PM, Bruno Melloni wrote:
> I did some testing and came to the conclusions below. I might be
> wrong, but I think these are correct:
>
> - Eclipse 3.2 (plus plug-ins) is not
e the the http:// address, not the /META-INF
> location. If you are unsure what the address is, open up the TLD files
> and see.
>
> -- Paul
>
> Bruno Melloni wrote:
>> I have a strange problem, with Struts 1.3.5 in Eclipse 3.2.
>> - struts-taglib-1.3.5.jar is in the
I have a strange problem, with Struts 1.3.5 in Eclipse 3.2.
- struts-taglib-1.3.5.jar is in the classpath.
- Inside the jar, in /META-INF/tld are the struts tld files.
- I have the following in index.jsp:
<%@ taglib uri="/META-INF/tld/struts-logic.tld" prefix="logic"
%>
- Ecli
Also, if WorkflowException is your own, you might want consider
exception chaining. Sun included pretty good support for it since JDK
1.4.2
(http://java.sun.com/j2se/1.4.2/docs/guide/lang/chained-exceptions.html)
.
-Original Message-
From: Christopher Schultz [mailto:[EMAIL PROTECTED]
Sen
I am slightly confused about the status of Struts 2. Messages in this
list frequently say that Struts 2 is production-ready and very stable,
yet the Struts site does not show it as a General Availability release.
If a member of the Struts 2 project reads this, could you please
clarify?
-
I can't wait to start using Struts 2.0. The only thing holding me back
is Struts 2.0 "default" use of Spring 1.x instead of the current Spring
2.0. I know it is "supposed" to work with Spring 2.0 just fine, but
call me paranoid... I'll probably wait until Struts 2.0 uses Spring 2.0
by default.
It's been a couple years since I did this, so I apologize for possible
inaccuracies. I remember calling a method (something like beanCopy?)
that allows cloning and setting a form with a single call. When I
searched the API I could not find it, but I noticed
DynaActionForm.getMap() that seems to p
Probably because managers are always looking for the famous "silver
bullet" that will allow them to use untrained developers in half the
time... Yes, it is a dream, but it is the dream being sold by Micro$oft
for .NET, and showing a tool that does it for Struts is the first step
to avoid the miriad
is
available by default which they do not need to include seperately.
Bruno Melloni <[EMAIL PROTECTED]> wrote:
We are constantly getting pressure to consider .NET development
because it is faster than our traditional J2EE/Struts work. After an
in-depth comparison of the two, the main adv
We are constantly getting pressure to consider .NET development because
it is faster than our traditional J2EE/Struts work. After an in-depth
comparison of the two, the main advantage of .NET in regard to "speed of
development" seems to be that you can easily drag and drop a few
controls, build an
I think you need instead of in the
inner tag. But please correct me if I'm wrong.
-Original Message-
From: Puneet Lakhina [mailto:[EMAIL PROTECTED]
Sent: Friday, October 13, 2006 1:58 PM
To: Struts Users Mailing List
Subject: Re: iterating of collection of HashMapsusing logic:iterate
It's been a long time since I did this, so I hope that I won't make a fool of
myself by remembering incorrectly. I believe something like
request.setAttribute(...)or even session.setAttribute(...) allows you to pass
data around. I'm probably missing some pieces, but this should get you
starte
:35 AM
To: Struts Users Mailing List
Subject: Re: Using Spring 2.0 - should I use Struts 1.2.9, 1.3.5, or
2.0?
On 10/5/06 10:20 AM, "Bruno Melloni" <[EMAIL PROTECTED]> wrote:
> - Struts 2.0 is out, but from what I read it is quite different from
> 1.x, and makes me
I decided to use Spring 2.0 with Struts for my next project. But I
can't find info on the highest version of Struts that I can use with it.
This is what I found:
- Spring 2.0 comes with some parts of Struts 1.2.9, so it would be the
"safe bet".
- The latest Struts 1.x is 1.3.5. It seems to ha
33 matches
Mail list logo
