Re: Expression Language in JSP and JasperException

2007-02-20 Thread Eric Haszlakiewicz
On Tue, Feb 20, 2007 at 03:23:32PM -0500, David Smith wrote: Ok forgive me now, but this is getting confusing. Where does result come into this picture? Were you expecting actionBean to be an instance of a different class? You aren't offering a lot to go on here. That's what it

Re: Web spiders - disabling jsessionid

2006-12-03 Thread Eric Haszlakiewicz
On Fri, Dec 01, 2006 at 04:50:02PM -0500, Christopher Schultz wrote: Mikolaj Rydzewski wrote: Caldarale, Charles R wrote: That contradicts what Len said about his site: On my site (as on many others) you can browse the site without a session, but if you want to log in (to add content or

Re: StandartSession.accessCount bug?

2006-10-31 Thread Eric Haszlakiewicz
On Tue, Oct 31, 2006 at 08:38:37AM -0500, Christopher Schultz wrote: Also, did your +50ns figure mean that the /overhead/ was +50ns, or that waiting for the other thread to release the lock (which would include execution of the method itself) took 50ms longer. Since those threads cannot really

Re: permission on server.xml

2006-10-29 Thread Eric Haszlakiewicz
On Sun, Oct 29, 2006 at 02:33:31PM -0600, Caldarale, Charles R wrote: I mean with a jsp code you can see/write file can a user write outside the webapps defined in the server.xml? Certainly code in a .jsp or servlet can read or write anywhere that Tomcat's userid is allowed to (subject

Re: Apache with Windows 98

2006-10-28 Thread Eric Haszlakiewicz
On Fri, Oct 27, 2006 at 02:21:06PM +0800, Eric wrote: i wanna avoid this problem too but i am a student now having my internship to do my Final Year Project. so there is no choice because i got a PC that is running on Windows98. so what to do. i have to live with it and find solutions to work

Re: Platform list

2006-09-25 Thread Eric Haszlakiewicz
On Mon, Sep 25, 2006 at 01:19:58PM -0500, Caldarale, Charles R wrote: From: David Kerber [mailto:[EMAIL PROTECTED] Subject: Platform list I just looked, but couldn't find the list of supported platforms for tomcat 5.5.x. I'm specifically looking to see if it will run ok on a

Re: Putting tomcat on Mainframe running z/OS

2006-09-11 Thread Eric Haszlakiewicz
On Mon, Sep 11, 2006 at 02:26:24PM -0700, Kevin Mullin wrote: Does anyone have experience in porting tomcat (I'm using version 5.5.17) to a mainframe system that is running z/OS operating system software? I'd appreciate getting any kind of 'heads up' information. I'm

Re: configuration setting to disable URL sessions?

2006-09-09 Thread Eric Haszlakiewicz
On Thu, Sep 07, 2006 at 06:33:41PM -0400, Chetan Sabnis wrote: Is there a way to disable the Tomcat server (5.5) from accepting sessions that are sent in the URL using jsessionid? This would be useful in preventing certain session fixation attacks. Basically, I would want sessions to be

Re: Retrieve certain session data inside a servlet

2006-06-02 Thread Eric Haszlakiewicz
On Fri, Jun 02, 2006 at 11:15:03AM +0200, Carlos Alonso Vega wrote: Bob, Thanks for the reply. My problem is that the session info I need is not of the session that makes the request. I need to check other sessions in the same context. I can use the request because it is in the same

Re: Easy Tomcat Linux/Unix Platform

2006-05-01 Thread Eric Haszlakiewicz
On Sun, Apr 30, 2006 at 10:03:49AM -0400, Mark Thomas wrote: When starting a new thread (ie sending a message to the list about a new topic) please do not reply to an existing message and change the subject line. To many of the list archiving services and mail clients used by list subscribers

Re: is there a possibility to define the startup order for webapps?

2006-04-24 Thread Eric Haszlakiewicz
On Mon, Apr 24, 2006 at 11:20:54AM -0400, David Smith wrote: This question comes up every so often and the answer is always no. The webapp load order cannot be relied upon. In your case, might I suggest the database webapp be run on a separate instance of tomcat? Can the connection be done

Re: Form login UTF-8 username problem

2006-03-06 Thread Eric Haszlakiewicz
Daniel Blumenthal [EMAIL PROTECTED] wrote: As a security concern, you might not want to allow full UTF-8 usernames. There are a number of invisible characters (from the soft hyphen to various connector characters) which people can use to spoof other users' names. On Sun, Mar 05, 2006 at

Re: JSP with use beans calls do not work

2006-02-27 Thread Eric Haszlakiewicz
On Sat, Feb 25, 2006 at 05:04:18PM -0300, Claudio Veas wrote: Hello list, I m really new to tomcat ,I have the following problem recently I tried to resume my practices on JSP on my tomcat server but I seem to have a problem and I do not know what it is. Every time I

Re: turning off sessions

2006-02-09 Thread Eric Haszlakiewicz
On Wed, Feb 08, 2006 at 12:14:36AM +0100, Ed wrote: Yep, JSPs automatically create sessions (part of the JSP spec certainly). To turn session off put %@ page session=false % in your JSP. Beware, that web frameworks such as struts may also create sessions for other purposes (eg, storing