Re: Security guideline

2016-06-21 Thread Paul Benedict
Very good. Cheers, Paul On Sat, Jun 18, 2016 at 1:25 AM, Lukasz Lenart wrote: > Hello > > Please take a look on this, we are constantly updating it based on > reported vulnerabilities. > http://struts.apache.org/docs/security.html > > > Regards > -- > Łukasz > + 48 606 323 122 http://www.lenart

Re: how to use ejb 3.1/3.2 in struts2?

2016-03-08 Thread Paul Benedict
Are you using an EE 7 server? I believe 7 integrates CDI and EJB so you can @Inject your remote bean interfaces. This may also be available in 6, but you'd have to research that. PS: @EJB is a specialized injection annotation that only deals with EJB. Obviously, but just wanted to point that out.

Re: Data Transfer Between Android and MySQL

2016-03-02 Thread Paul Benedict
Android is a remote client, and a web service is the common solution to transfer data back to the host. You are free to use whatever technology you want to implement the web service. You have (1) message standard and (2) technology standard to consider. The first are things like XML, SOAP, JSON, e

Re: Remove Me

2015-10-13 Thread Paul Benedict
Fernando, removing is a self-service. Please see this: https://struts.apache.org/mail.html Cheers, Paul On Tue, Oct 13, 2015 at 10:15 AM, Fernando FLORES CORCOBA < fef.flo...@gmail.com> wrote: > Remove me from this list. > Thank you. > -- > > -- > *visite www.librodelcastil

Re: Struts1 & Struts2 implementation

2015-02-23 Thread Paul Benedict
Do you have different extensions? For example, *.do goes to S1 and *.action goes to S2. Cheers, Paul On Mon, Feb 23, 2015 at 10:48 AM, Lilylove toshop < lilylove2s...@yahoo.com.invalid> wrote: > Dear All, > I want to use Strut1 & Struts2 in my coexist application. I have both the > struts-con

Re: Can't find utils.js

2014-11-13 Thread Paul Benedict
Okay. This means the two (no action extension and plugin script resources) are mutually incompatible at this time. I look forward to 2.5 to fixing this. Cheers, Paul On Thu, Nov 13, 2014 at 2:04 AM, Lukasz Lenart wrote: > 2014-11-13 7:44 GMT+01:00 Paul Benedict : > > Yes... but

Re: Can't find utils.js

2014-11-12 Thread Paul Benedict
Yes... but now it's "," Cheers, Paul On Thu, Nov 13, 2014 at 12:40 AM, Lukasz Lenart wrote: > 2014-11-12 21:45 GMT+01:00 Paul Benedict : > > Using outputs a link to utils.js: > > > > > > > > But the file can't be found. FYI, I ha

Re: Can't find utils.js

2014-11-12 Thread Paul Benedict
FYI, I created an issue to track this: https://issues.apache.org/jira/browse/WW-4418 Cheers, Paul On Wed, Nov 12, 2014 at 3:27 PM, Paul Benedict wrote: > Okay, I solved it. I found a "solution" in the wee bottom of this page: > > http://stackoverflow.com/questions/1260

Re: Can't find utils.js

2014-11-12 Thread Paul Benedict
xtension a comma. However, this doesn't satisfy me as it's clearly a hack :-) but at least it works. Cheers, Paul On Wed, Nov 12, 2014 at 2:45 PM, Paul Benedict wrote: > Using outputs a link to utils.js: > > > > But the file can't be found. FYI, I have no act

Can't find utils.js

2014-11-12 Thread Paul Benedict
Using outputs a link to utils.js: But the file can't be found. FYI, I have no action extension and the filter processes /* Any idea why the file can't be found? Cheers, Paul

Re: Anyway to map properties to different request names?

2014-11-05 Thread Paul Benedict
to set the attribute name of the field > > > > You can even use a different Id, if you want to refer to the field in > javascript. Why does it bother you? > > 2014-11-05 15:39 GMT-05:00 Paul Benedict : > > > Let's say I have a getter/setter for field personId. That means i

Anyway to map properties to different request names?

2014-11-05 Thread Paul Benedict
Let's say I have a getter/setter for field personId. That means in my markup, I need to have a field named personId too. However, I am not really found of bleeding Java naming conventions into my web page. Shouldn't there be a way -- is there a way? -- of assigning another name to it? Hopeful exam

Re: Struts 1 Thread safe action classes

2014-11-04 Thread Paul Benedict
alized a new action for every > request. It shot up the server memory by a bunch but who cares, memory is > cheap compared to me re-writing all those classes. > > Regards, > Eric > > > > > -Original Message- > From: Paul Benedict [mailto:pbened...@apache.org]

Re: Struts 1 Thread safe action classes

2014-11-04 Thread Paul Benedict
To be thread safe, your services should never store user data in instance variables. That's all there is to it. Keep everything local. Cheers, Paul On Tue, Nov 4, 2014 at 3:14 PM, Sekar, Sowmya wrote: > How do I accomplish that? > > -Original Message- > Fr

Re: Struts 1 Thread safe action classes

2014-11-04 Thread Paul Benedict
Your service classes should be thread-safe to begin with. You don't need multiple instances of a business service. Cheers, Paul On Tue, Nov 4, 2014 at 3:08 PM, Sekar, Sowmya wrote: > Hi, > > To invoke service classes from each method in the action classes, are > there any other options to make

Re: Is the email regex validator in Struts validation incorrect?

2014-08-25 Thread Paul Benedict
t; > I can't seem to find the actual standard though (i.e., the one in place > > that essentially doesn't allow these characters). For documentation > > purposes, does anyone know what effective standard disallows these > > characters? > > > > Cheers! >

Re: Is the email regex validator in Struts validation incorrect?

2014-08-25 Thread Paul Benedict
I looked up the RFC. The document lists itself as a "proposed standard" [1] so it's not really available yet for general use (but correct me if wrong). I propose that an enhancement should be made in JIRA to handle this. [1] http://tools.ietf.org/html/rfc6531 Cheers, Paul On Mon, Aug 25, 2014

Re: Fix security vulnerability

2014-07-09 Thread Paul Benedict
Yes, we have releases planned: https://issues.apache.org/jira/browse/STR/?selectedTab=com.atlassian.jira.jira-projects-plugin:roadmap-panel Cheers, Paul On Wed, Jul 9, 2014 at 4:08 PM, Dave Newton wrote: > I'm not sure. > > In the meantime: > > > http://h30499.www3.hp.com/t5/HP-Security-Resea

Re: Struts1->Struts2 JSP tags

2014-07-02 Thread Paul Benedict
Use JSTL or the struts "if" tag Cheers, Paul On Wed, Jul 2, 2014 at 3:42 PM, Christopher Gokey wrote: > So I'm making progress in porting Struts1->Struts2, I've got a couple uses > of Struts tags that I'd like to convert over as well: > logic:iterate > logic:equal > logic:notEmpty > > seem to

Re: Struts1 RequestProcessor

2014-07-01 Thread Paul Benedict
It sounds like what you want is to create a new result type. Cheers, Paul On Tue, Jul 1, 2014 at 4:08 PM, Christopher Gokey wrote: > We've got some pretty old code that I'm trying to port over to Struts2 and > if someone could point me in the right direction in how I can rewrite this > code

Re: dynamic interceptor insertion

2014-06-26 Thread Paul Benedict
I have asked for that feature myself :-) No, that's not possible today. But if you have the time, you can code the solution and share it with everyone! Cheers, Paul On Thu, Jun 26, 2014 at 9:51 AM, Gildas de Cadoudal < gildas.de.cadou...@gmail.com> wrote: > Hi all, > > I would like to dynamica

Re: Issues in Struts2 unit testing

2014-06-13 Thread Paul Benedict
I think you need to minimize your test case and start from something simpler to diagnose the problem. First try using the default stack alone. Let us know how that turns out. Cheers, Paul On Fri, Jun 13, 2014 at 8:25 AM, Krishnaraj A < akrajmscjavaquest...@gmail.com> wrote: > Hi Team, > > > Is

Re: Issues in Struts2 unit testing

2014-06-13 Thread Paul Benedict
Go set a breakpoint in Struts where the ISE is being thrown and see what condition is being tested. If possible, take some time to determine when that condition is being set before your invocation. Cheers, Paul On Fri, Jun 13, 2014 at 8:25 AM, Krishnaraj A < akrajmscjavaquest...@gmail.com> wrot

Re: Issues in Struts2 unit testing

2014-06-12 Thread Paul Benedict
Put a breakpoint in your execute() and see if it's being called. The error message might be telling the truth: the action has already been executed. Cheers, Paul On Thu, Jun 12, 2014 at 10:15 AM, Dave Newton wrote: > Without knowing what's in your interceptor stack it's impossible to help. >

Re: Struts2 iterator twice for select tag

2014-06-03 Thread Paul Benedict
Maybe you found a bug. Hopefully Struts cleans up its iterator when the tag finishes. Maybe you can look into the source code to find out for us. Cheers, Paul On Tue, Jun 3, 2014 at 12:17 PM, Matt Williams < mattwms1998...@yahoo.com.invalid> wrote: > > I am using struts 2.1.8. I am extending

Re: Required Info on Upgrading Struts 1.2.x to Struts 2.3.x

2014-06-03 Thread Paul Benedict
Struts 1 uses a DTD which doesn't allow custom elements in the configuration... or does it? I have never seen this before. Cheers, Paul On Tue, Jun 3, 2014 at 4:57 AM, Lukasz Lenart wrote: > I have no idea if it is possible or not, but you can use like this > > ${['key1','key2','key3']} > >

Re: Struts 1 Logging

2014-05-30 Thread Paul Benedict
Websphere is notorious for its poor logging support. I used Websphere for about 5 years. The server exposes Commons Logging in the parent class loader so it's already configured -- and not configurable by you. That was my experience, at least. I think you should google "Websphere Struts Logging" an

Re: Struts 1 Logging

2014-05-30 Thread Paul Benedict
Usha, I don't understand your response. So you have a log file and it's logging? Cheers, Paul On Fri, May 30, 2014 at 7:58 AM, Usha Ladkani wrote: > property file is in classpath , As the log file is being created with > trace. > > We are not using tomcat. we are using our own webserver which

Re: Struts 1 Logging

2014-05-29 Thread Paul Benedict
.Logger in our application. > > Regards > Usha > > > On Fri, May 30, 2014 at 9:02 AM, Paul Benedict > wrote: > > > Usha, what logging framework are you using? > > > > > > Cheers, > > Paul > > > > > > On Thu, May 29, 2014 at 10:28 PM, Usha

Re: Struts 1 Logging

2014-05-29 Thread Paul Benedict
Usha, what logging framework are you using? Cheers, Paul On Thu, May 29, 2014 at 10:28 PM, Usha Ladkani wrote: > Hello , > > We are using Struts 1 , Can someone tell me how can I enable Struts logs in > debug mode, Basically I am looking for statements as below - > > BeanUtils 1 org.apach

Re: utf-8 characters and xslt result type

2014-05-24 Thread Paul Benedict
Your XSL (stylesheet) has the ability to set the output content encoding. Are you using that? And does that work? Cheers, Paul On Sat, May 24, 2014 at 2:05 PM, Lukasz Lenart wrote: > Can you register a bug in JIRA? Then we can extend XSLTResult to set > content-encoding with response. > > 201

Re: No parameters set in action when file upload exceeds max size

2014-05-16 Thread Paul Benedict
https://issues.apache.org/jira/browse/WW-3025 Cheers, Paul On Fri, May 9, 2014 at 10:43 AM, Greg Lindholm wrote: > When I try to upload a file that exceeds the configured 2M max then no > parameters get set on my action. > > I can't present the user with a pretty error message since all contex

Struts2 Tiles deprecation warning

2014-04-16 Thread Paul Benedict
Struts 2.3.16.1 Tiles 2.2.2 Everytime my application boots, this shows up in the logs: DEPRECATION WARNING! You are using parameter-based initialization, that is no longer supported! Please see docs: http://tiles.apache.org/framework/tutorial/configuration.html I did some internet research; my fi

Re: No action instance for path /welcomeAction could be created

2014-04-09 Thread Paul Benedict
A 500 error means server error. I bet your configuration has a typo or something. Struts won't service anything until you review your logs and correct what's wrong. On Wed, Apr 9, 2014 at 1:15 PM, Lukasz Lenart wrote: > What's the problem? Do you see anything in the logs? > > 2014-04-09 18:24 GM

Re: Request parameters need corresponding getters/setters in action?

2014-03-27 Thread Paul Benedict
Can you please clarify where you're upgrading from. You said 2.8.1 ... but did you really mean Struts 1.2.8? On Thu, Mar 27, 2014 at 3:41 PM, Manuel López Blasi < lopezbl...@conicet.gov.ar> wrote: > Hello everybody, > > i'm in the process or migrating our application from struts 2.8.1 to the > l

Re: Dispatcher attempts to write on the response after it has been commited

2014-03-18 Thread Paul Benedict
Yeah. It should be -- but let's also log the response code we couldn't set. Maybe debug()? On Tue, Mar 18, 2014 at 9:28 AM, Lukasz Lenart wrote: > 2014-03-18 15:21 GMT+01:00 Paul Benedict : > > Lukasz, the ServletResponse interface does contain an isCommitted() > method.

Re: Dispatcher attempts to write on the response after it has been commited

2014-03-18 Thread Paul Benedict
Lukasz, the ServletResponse interface does contain an isCommitted() method. We can avoid this situation by checking it first. On Tue, Mar 18, 2014 at 1:24 AM, Lukasz Lenart wrote: > 2014-03-18 7:01 GMT+01:00 Jose L Martinez-Avial : > > Well, that's a good thing, but anyway I think the default di

Re: Why do I get this XHTML validation errors? (second attempt)

2014-03-07 Thread Paul Benedict
We need a JIRA ticket to solve this permanently. On Fri, Mar 7, 2014 at 2:37 PM, Lukasz Lenart wrote: > YooHoo! That's suppose to work template inheritance! > > 2014-03-07 21:03 GMT+01:00 Fredrik Andersson : > > Hello guys! > > > > I think you solved it! > > > > I put a new file "hidden.ftl" in

Re: Re: Why do I get this XHTML validation errors? (second attempt)

2014-03-06 Thread Paul Benedict
Very interesting. First, the validator is correct. The tag does not accept elements as a child -- obviously an error. This is a problem with the Struts output -- it isn't paying attention that it is rendering a table with its layout and thus emitting bad HTML. This sounds like a ticket. Would yo

Re: Why do I get this XHTML validation errors? (second attempt)

2014-03-06 Thread Paul Benedict
Please note the "wrap" attribute on is new to (X)HTML5. So it definitely won't validate version <= 4. Chris is right, you should remove it unless you want to validate at a higher HTML version. On Thu, Mar 6, 2014 at 10:48 AM, Chris Pratt wrote: > Did you try moving the elements to the top of t

Re: MESSAGE TO ADMINIISTRATOR: Unscribing from this mailing list

2014-01-07 Thread Paul Benedict
Email user-unsubscr...@struts.apache.org and wait for a message. When you receive the message, just respond to it and you'll be finished. On Tue, Jan 7, 2014 at 6:30 PM, Michel Prévost wrote: > I have attempted to remove myself from this list at several occasions, > never > worked. The link sent

[OT] Setting up mail server on Linux?

2014-01-07 Thread Paul Benedict
Anyone experienced with installing/configuring mail servers on Linux? I have chosen Postfix as my tool but I'll take any working solution. I don't need to receive any emails, only send emails from my domain from a Struts application. -- Cheers, Paul

Re: Tiles with Annotations

2014-01-02 Thread Paul Benedict
Annotations usually help augment the class being annotated. I don't think annotating a Struts action with Tile definitions is very appropriate for this purpose. The purposes are just very different. XML seems more appropriate than annotations here. On Thu, Jan 2, 2014 at 10:02 AM, Christoph Nen

Re: Token Session Interceptor and back button

2013-12-06 Thread Paul Benedict
at. Were you thinking > of something else? > > > Miguel > > On Thu, 2013-12-05 at 14:59 -0600, Paul Benedict wrote: > > > Make sure your back-button action refreshes the page. You can't reuse a > > token from the browser's cache. It needs to regenerate

Re: Token Session Interceptor and back button

2013-12-05 Thread Paul Benedict
Make sure your back-button action refreshes the page. You can't reuse a token from the browser's cache. It needs to regenerated. On Thu, Dec 5, 2013 at 12:39 PM, semog12 wrote: > Hi, > > I am using the token session interceptor for a form and I have this > situation: > 1) I am in the form page;

Re: Concealing primary key in web application with struts 2 from security perspective?

2013-11-30 Thread Paul Benedict
issue. My intention of question is just to ask > > does struts 2 provide any kind of implementation off the shelf (some kind > > of interceptor or any other approach)to address this. Thanks in advance > > > > > > On Sat, Nov 30, 2013 at 12:16 PM, Paul Benedict >

Re: Concealing primary key in web application with struts 2 from security perspective?

2013-11-29 Thread Paul Benedict
Exposing the primary key is not a security issue; you always have to key off something. What you need is business logic that ensures that a user may only access what he may. That's not a Struts issue; it's logic that you need to add in your business services. On Fri, Nov 29, 2013 at 11:24 PM, Moh

Re: can we avoid extension "action"?

2013-11-12 Thread Paul Benedict
> *http://yaragalla.blogspot.in/ <http://yaragalla.blogspot.in/>* > > > On Wed, Nov 13, 2013 at 1:03 AM, Paul Benedict > wrote: > > > In addition, make sure your web.xml is sending the new paths/extensions > to > > the Struts 2 filter. > > > > > &g

Re: struts1 with Ajax using struts tags

2013-11-12 Thread Paul Benedict
When you do AJAX in S1, you are always responding directly to the browser. You need to write your data to the ServletOutputStream and return null. You do not need to use any ActionForward. Paul On Mon, Nov 11, 2013 at 9:35 PM, Narayana wrote: > I have a problem/doubt and describing here.I am us

Re: can we avoid extension "action"?

2013-11-12 Thread Paul Benedict
In addition, make sure your web.xml is sending the new paths/extensions to the Struts 2 filter. On Tue, Nov 12, 2013 at 1:24 PM, Yaragalla Muralidhar < yaragallamur...@gmail.com> wrote: > Thank you so much Dave. > > *Thanks and Regards,* > Muralidhar Yaragalla. > > *http://yaragalla.blogspot.in/

Re: [ANNOUNCEMENT] Struts2-JSR303-Validation-Plugin available

2013-10-25 Thread Paul Benedict
JSR-303 validation should be the norm for Struts 3. On Fri, Oct 25, 2013 at 1:53 PM, bphill...@ku.edu wrote: > Works now - thank you for the help and for creating a very useful plugin. > > Would you mind if I wrote an article about how to use this plugin for my > blog (http://www.brucephillips.

Re: "Cancel" button is not redirecting

2013-10-15 Thread Paul Benedict
If you want to do a redirect, you need your action mapping to handle "cancel" and use a redirectAction result. On Tue, Oct 15, 2013 at 12:53 PM, Antonio Sánchez wrote: > Hi. > > Simple CRUD sample application, paramsPrepareParams, wildcard method > selection. > > Cancel button in edit form, when

Re: S2: Using HTTPS, when I redirect, I get HTTP

2013-10-01 Thread Paul Benedict
Hmm. Well, there's a couple issues to consider here. 1) When you're behind a load balancer, the machine name (domain) you're running on may not be the domain that's fronted to the public. For example, the user might be accessing www.company.org but you're on host123.company.org. When you're changi

Re: Prevent Ajax Multi-Request in Struts 2

2013-09-26 Thread Paul Benedict
Alireza, use some sort of pre-authenticated token. Ignore requests that have a bad token. On Thu, Sep 26, 2013 at 7:43 AM, JOSE L MARTINEZ-AVIAL wrote: > Hi, > Since XHR request can not be cross-domain, you can not get a CSRF through > XHR( the browser will not allow other page to send a XHR t

Re: Value not persisting in domain object

2013-09-01 Thread Paul Benedict
; Hi All, > > Can anyone please help ? > > Thanks.. > > > On Fri, Aug 30, 2013 at 10:23 PM, Srineel Mazumdar >wrote: > > > Yes.. the same collection. > > > > > > On Wed, Aug 28, 2013 at 6:55 PM, Paul Benedict >wrote: > > > >> Are you r

Re: Value not persisting in domain object

2013-08-28 Thread Paul Benedict
Are you retrieving the same collection? On Wed, Aug 28, 2013 at 8:22 AM, Srineel Mazumdar wrote: > Hi, > > I am creating a shopping cart application in Struts 2. I am updating a list > in Cart domain object when the user selects some items in shopping list > using checkboxes and clicks Next. In

Re: Struts1 to Struts2 Migration Support Query

2013-08-15 Thread Paul Benedict
The Struts 1 plugin supports S1 Action classes only -- there is no view support. The S1 tag libraries won't be functional so you should convert your pages to use S2 tags. On Thu, Aug 15, 2013 at 6:10 AM, wrote: > Hi, > > Sincere Apologies for raising this issue with the entire team. I'm not > a

Re: Annotation Support for bypassing prepare

2013-08-07 Thread Paul Benedict
quot;}). > > -- > Thanks & Regards > Srikanth > Software Developer > > eGovernments Foundations > www.egovernments.org > Mob : 9980078913 > > > > On Thu, Aug 8, 2013 at 9:42 AM, Paul Benedict > wrote: > >

Re: Annotation Support for bypassing prepare

2013-08-07 Thread Paul Benedict
Not an array of prepares, but an array of strings for which "execute" methods the Preaparable callback should be excluded. On Aug 7, 2013 11:09 PM, "Sreekanth S. Nair" < sreekanth.n...@egovernments.org> wrote: > With all gratitude, I strongly disagree with that idea . That bring more > clumsiness

Re: Annotation Support for bypassing prepare

2013-08-07 Thread Paul Benedict
; > > > Too many methods :( needs its own prepare then. >>> > > > > > >>> > > > > > -- >>> > > > > > Thanks & Regards >>> > > > > > Srikanth >>> > > > > > Software Developer >>> > > > > > ---

Re: Apple sec breach.. Struts?

2013-07-31 Thread Paul Benedict
I'll voice my personal opinion. No matter what framework you choose (Struts, MyFaces, Tapestry, etc.), it is the responsibility of all IT shops to do a security vulnerability assessment before first releasing to production and after each update. That is "Security 101" because there are multitude o

Re: Annotation Support for bypassing prepare

2013-07-26 Thread Paul Benedict
n in to prepare. Where that ajax validation doesn't > required to call prepare. > > -- > Thanks & Regards > Srikanth > Software Developer > > eGovernments Foundations > www.egovernments.org > Mob : 9980078913 > ---

Re: Annotation Support for bypassing prepare

2013-07-26 Thread Paul Benedict
Why would you want to bypass it? On Jul 26, 2013 3:47 AM, "Sreekanth S. Nair" < sreekanth.n...@egovernments.org> wrote: > Is there any annotation available to bypass prepare method while invoking > certain methods, just like @skipvalidation > -- > Thanks & Regards > Srikanth >

Re: Using Util class inside JSP

2013-07-23 Thread Paul Benedict
If you want to check if the user is in session, I would create for yourself a BaseAction class which all your Actions extend. In Base Action, expose a getter to do that calculation. It's sounds like you really have a case where you want this property on the Value Stack on each invocation. I use th

Trouble using getText() with parameter substitution

2013-07-18 Thread Paul Benedict
I have a global properties file with this key: emailSent=The email was sent to {0}. I add a message in my action: addActionMessage(getText("emailSent", Arrays.asList(email))); And the {0} stays in the output. Why is this? -- Cheers, Paul

Re: Actions now require INPUT result after installing struts2-spring plugin

2013-07-18 Thread Paul Benedict
elected. > > Interestingly enough, I do not have setters for my @Autowired annotated > Services. I'm guessing the autowire method uses both annotations and > setters (if available) ?? > > Is this JIRA worthy or is this just a RTFM user error thing? > > > > On

Re: Actions now require INPUT result after installing struts2-spring plugin

2013-07-18 Thread Paul Benedict
ors (size 1) > > > > [0]LinkedHashMap$Entry > > > "org.springframework.context.annotation.ConfigurationClassPostProcessor.importRegistry > > => ImportStack: []" > > > > **boggle** > > > > No clue here, google isn't much help. A

Re: Actions now require INPUT result after installing struts2-spring plugin

2013-07-18 Thread Paul Benedict
Yes, Dave's proposal is easier and faster. When validation fails, you should have one or several errors/messages. So dump those out or breakpoint in your input() to inspect them. On Thu, Jul 18, 2013 at 10:09 AM, Dave Newton wrote: > * Is there any validation set up on the action? > * Are there

Re: Actions now require INPUT result after installing struts2-spring plugin

2013-07-18 Thread Paul Benedict
I'd definitely would put a breakpoint in the ValidationInterceptor code and step through. Nothing in the Spring plugin is causing your issue; Spring just does dependency injection. On Thu, Jul 18, 2013 at 9:59 AM, David Greene wrote: > How would I figure out what is failing validation (and more

Re: S2 custom authentication: remembering original request

2013-07-10 Thread Paul Benedict
Forwarding to another action means you want to do chaining: http://struts.apache.org/release/2.3.x/docs/action-chaining.html autenticar On Wed, Jul 10, 2013 at 10:00 AM, Antonio Sánchez wrote: > Can't forward even without using global results: > > http://localhost:8084/mycontext/autentic

Re: How to make interceptor to be invoked only for HTTP Request not for Response

2013-07-09 Thread Paul Benedict
Agreed. What you want is a Servlet filter, not a Struts interceptor. On Tue, Jul 9, 2013 at 9:54 AM, Sreekanth S. Nair < sreekanth.n...@egovernments.org> wrote: > I doubt struts2 interceptor work like a filter, just like in ur pseudo > code. In filter we can specify > what to do with request and

Re: ServletResponseAware - request can be null?

2013-07-08 Thread Paul Benedict
Do this test. Put a breakpoint in the setter that is storing the response. You either have the case where the interceptor is not being fired (and thus your method is not being called) or you have found a null somehow being passed in. I bet the former is the case, but you'll have to test to find out

Re: Actions as welcome files

2013-05-31 Thread Paul Benedict
It's not possible at the moment. It's a feature that I would like to have too. On Fri, May 31, 2013 at 1:17 PM, Antonio Sánchez wrote: > Hello. > > My name is Antonio, I'm beginning with Struts2 and this is my first post. > > Where should store struts.xml if I need to use an action as a welcome

How to process HTTP HEAD requests?

2013-05-17 Thread Paul Benedict
In one particular action, I need to handle HTTP HEAD requests. Is this possible using Struts 2? What must I customize if it doesn't work out of the box? PS: I am not using the REST plugin. This isn't a web service either. :-) Paul

Re: Why Ajax calls don't renew session timeout on Tomcat server?

2013-05-15 Thread Paul Benedict
You don't give enough information to diagnose the problem, but I imagine you're not passing the session information (e.g., jsessionid cookie) back to the server. On Wed, May 15, 2013 at 12:30 PM, Norah Jones wrote: > Hi, > > I have a web application which is deployed on a Tomcat server (version

Re: struts 2 ajax choice

2013-05-13 Thread Paul Benedict
Please note the Dojo plugin is deprecated. On Mon, May 13, 2013 at 4:42 PM, john lee wrote: > > > from the document, > > > Struts 2 support both DoJo plugin and JSON plugin, > > > which one is easy to plugin and use? > > > which one is more powerful? > > thanks in advance > > john

Re: Strategy for navigation in struts 1.2

2013-04-15 Thread Paul Benedict
There's nothing wrong with storing the search criteria in the session. On Mon, Apr 15, 2013 at 2:23 PM, Ashish wrote: > Hi > I can save it in session, just dont want to add all the search criteria's > in > session, but will have to do some thing like save only last search > criteria or > form i

Re: common validator

2013-03-26 Thread Paul Benedict
Do not use UI validation to defend against SQL Injection Attacks. That's the job of JDBC Prepared Statements. Paul On Tue, Mar 26, 2013 at 5:15 PM, J.V. wrote: > I have to add checking each and every form field in my application for sql > injection attacks (I need a method that will return a bo

Re: struts2 (2.2.1) adds field error and doesn't return input!!

2013-03-26 Thread Paul Benedict
Correct. Return true to submit; false to cancel the event. On Tue, Mar 26, 2013 at 1:10 PM, Maurizio Cucchiara wrote: > I could be wrong, but if you don't return true on submit event, the > form will never get submitted. > > Twitter :http://www.twitter.com/m_cucchiara > G+ :https://p

Re: Struts 1.3 : Preventing SQL Injection (form.field validation)

2013-03-22 Thread Paul Benedict
If you use JDBC prepared statements, you will not have to worry about SQL injection. Paul On Fri, Mar 22, 2013 at 6:36 PM, J.V. wrote: > Does anyone out there have a method I could use to pass a form field > variable that would check for all known SQL injection vulnerabilities (with > regards t

Re: Struts 1.3 : Validating forms / password field

2013-03-22 Thread Paul Benedict
The best approach is to make validate() deal with syntax validation. At the beginning of your execute() method, run business logic validation and construct ActionErrors if your business logic fails. You really shouldn't be trying to stuff business logic in the validate() method -- keep that for dat

Re: DynaValidatorActionForm (using Apache Commons Validator project)

2013-03-21 Thread Paul Benedict
Struts looks for the Validator configuration based on a key. The key is selected by the form. The key can either be the URI (DynaValidatorActionForm) or the Form Name (DynaValidatorForm). Your config file is obviously using bean names: So you need the correct Form superclass to select by bean na

Re: DynaValidatorActionForm (using Apache Commons Validator project)

2013-03-21 Thread Paul Benedict
Ooops. You shouldn't need "your_context" -- just the URI after the context. On Thu, Mar 21, 2013 at 4:32 PM, Paul Benedict wrote: > As I said, DynaValidatorActionForm validates by looking for the matching > URI in the Struts Config. If you want to continue using th

Re: DynaValidatorActionForm (using Apache Commons Validator project)

2013-03-21 Thread Paul Benedict
As I said, DynaValidatorActionForm validates by looking for the matching URI in the Struts Config. If you want to continue using that superclass, your Validator XML contents must change to this: Otherwise, switch your base class to DynaValidatorForm and keep your Validator XML contents as-is. P

Re: DynaValidatorActionForm (using Apache Commons Validator project)

2013-03-21 Thread Paul Benedict
DynaValidatorActionForm validates by looking for the matching URI in the Struts Config. Paul On Thu, Mar 21, 2013 at 3:57 PM, J.V. wrote: > > Is DynaValidatorActionForm.java intended for use in extending Action > classes or for use in extending Form classes? > > Does anyone have a working examp

Re: Exception thrown because of struts-config.xml

2013-03-21 Thread Paul Benedict
What is the exception? And if you're on Struts 1.3, you should fix your 1.2 version in the DOCTYPE. On Thu, Mar 21, 2013 at 3:27 PM, J.V. wrote: > I have the following struts-config.xml below (a sample from the file). I > am well versed in well formatted XML and DTD's ( I have checked the DTD >

Re: Default action behaviour with convention plugin change in 2.3.12

2013-03-20 Thread Paul Benedict
What I've suggested before -- but haven't done anything about it -- is to allow the struts.xml packages to have an index action. This will execute if the package is specified but no action. This is different than a default action. Paul On Wed, Mar 20, 2013 at 9:02 AM, Dave Newton wrote: > There

Re: problem with regex validator

2013-03-19 Thread Paul Benedict
Did you add the ^ and $ like I suggested? On Tue, Mar 19, 2013 at 4:34 PM, Muralidhar Yaragalla < java.yaraga...@gmail.com> wrote: > something like "apple<>" (without quotes). > > > On Wed, Mar 20, 2013 at 3:02 AM, Paul Benedict > wrote: > > > What

Re: how can i retain the field values when there is validation error in field

2013-03-19 Thread Paul Benedict
You retain those values by doing a forward to a view (JSP, freemarker, etc.) whose view knows how to render the appropriate model object in the action. Paul On Tue, Mar 19, 2013 at 4:32 PM, Muralidhar Yaragalla < java.yaraga...@gmail.com> wrote: > Hi when there is validation error in the farm th

Re: problem with regex validator

2013-03-19 Thread Paul Benedict
What input value are you testing against the regex? On Tue, Mar 19, 2013 at 4:28 PM, Muralidhar Yaragalla < java.yaraga...@gmail.com> wrote: > As far as i remember commons logging is one of the implementation of log4j. > but xworks classes does not use log4j. I am saying this because i have used

Re: problem with regex validator

2013-03-19 Thread Paul Benedict
works. I am not sure why? but then I am good with my custom > validator for regex. One note is that xwork classes dont use log4j for > logging. > > > On Wed, Mar 20, 2013 at 2:09 AM, Paul Benedict > wrote: > > > [^<>] means any character that is not the angled brackets.

Re: problem with regex validator

2013-03-19 Thread Paul Benedict
[^<>] means any character that is not the angled brackets. This is correct syntax for XML encoding. Try also using the beginning and ending meta-characters: ^[^<>]$ Paul On Tue, Mar 19, 2013 at 3:35 PM, Muralidhar Yaragalla < java.yaraga...@gmail.com> wrote: > Hi Chris, I tried with the regex

Re: S2 annotations to limit HTTP methods?

2013-03-18 Thread Paul Benedict
that allows a list of methods being defined. Is that a better choice? My use case is that I want S2 AJAX actions that submit data to only be accessed via POST. Paul On Mon, Mar 18, 2013 at 1:25 PM, Lukasz Lenart wrote: > 2013/3/18 Paul Benedict : > > Does S2 have annotations, which can be

S2 annotations to limit HTTP methods?

2013-03-18 Thread Paul Benedict
Does S2 have annotations, which can be applied to an action method, to explicitly specify which HTTP methods are allowed? Thus returning a 405 otherwise? Paul

Re: Struts 1.1 and Tiles 2 compatability

2013-03-11 Thread Paul Benedict
edic...@gmail.com] On > Behalf Of Paul Benedict > Sent: Monday, March 11, 2013 1:15 PM > To: Struts Users Mailing List > Subject: Re: Struts 1.1 and Tiles 2 compatability > > Tiles 2 is not compatible with Struts 1. You must use Tiles 1. > > Paul > > On Mon, Mar

Re: Struts 1.1 and Tiles 2 compatability

2013-03-11 Thread Paul Benedict
Tiles 2 is not compatible with Struts 1. You must use Tiles 1. Paul On Mon, Mar 11, 2013 at 3:01 PM, Sekar, Sowmya wrote: > Hi, > > I am in the process of upgrading from Tiles 1 to Tiles 2.2.2 combined with > Struts 1.1. > > I have the following configuration in struts-config.xml > > processor

Re: Legacy struts 1 dtd's gone?

2013-02-12 Thread Paul Benedict
If your application server is going out to the Internet to get the DTDs, that most likely means you have a configuration issue. The DTDs are part of the library; your application server should be able to load them locally. Paul On Tue, Feb 12, 2013 at 5:36 PM, Eric Rank wrote: > Hi list! > > I'

Re: Struts 1.x and Strtus2.x With Tiles 2.x

2012-08-29 Thread Paul Benedict
Can't be done. Struts 1 needs Tiles 1 and Struts 2 needs Tiles 2. On Aug 29, 2012 7:17 PM, "vsendhil" wrote: > Hi, > > Hi, I have a application in Struts1.x and want to use struts2.x > simultaneously. I followed the steps from the threads and > > now I am getting "java.lang.NoSuchMethodError: > >

Re: behavior of form fields with disabled status

2012-08-26 Thread Paul Benedict
I question why you would want to submit any data that's readonly or disabled. What's the point? If the user can't enter it, there's probably a good chance you don't need to receive it -- especially a "password" field. Paul On Sun, Aug 26, 2012 at 11:41 PM, al so wrote: > looks like readOnly too

Re: behavior of form fields with disabled status

2012-08-26 Thread Paul Benedict
Correct. This is part of the HTML spec. You would have this problem if you used Struts or not. Disabled fields are not submitted to the server. On Sun, Aug 26, 2012 at 10:49 PM, wrote: > As per HTML spec if you have made the field disabled they will not be > submited to the server and I believe

  1   2   3   4   5   6   7   >