Re: Different session id per page

2011-12-30 Thread Tim Watts
On Sat, 2011-12-31 at 00:33 -0600, Jerry Malcolm wrote: > I have a web app that's worked for years. I had to go in and do some > renovations on it due to a few new requirements. Now for some reason, I'm > getting a new/different session id for each page. It's easy to see that's > what happening

Different session id per page

2011-12-30 Thread Jerry Malcolm
I have a web app that's worked for years. I had to go in and do some renovations on it due to a few new requirements. Now for some reason, I'm getting a new/different session id for each page. It's easy to see that's what happening since I use the sessionid for a log file name. Where I used to

Re: POST form parameter parsing order

2011-12-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Konstantin, On 12/30/11 3:53 PM, Konstantin Kolinko wrote: > 2011/12/30 Christopher Schultz : >> >> On 12/30/11 4:35 AM, Gadi Katsovich wrote: >>> I am using Tomcat 5.5.30 and am affected by the hashtable >>> collision DoS vulnerability. >> >> Just

Re: POST form parameter parsing order

2011-12-30 Thread Konstantin Kolinko
2011/12/30 Christopher Schultz : > > On 12/30/11 4:35 AM, Gadi Katsovich wrote: >> I am using Tomcat 5.5.30 and am affected by the hashtable collision >> DoS vulnerability. > > Just wondering: are you actually under attack, or are you just saying > that you are vulnerable? > > I would venture a gue

Re: single large tomcat or multiple tomcats

2011-12-30 Thread Matthew Tyson
On Fri, Dec 30, 2011 at 11:57 AM, S Ahmed wrote: > I know with other frameworks (like python/rails) people tend to run > multiple instaces of the web server and round robin requests to each using > something like haproxy. > > Is this known in the tomcat community at all? > > If I have a server wi

Re: single large tomcat or multiple tomcats

2011-12-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ahmed, On 12/30/11 2:57 PM, S Ahmed wrote: > I know with other frameworks (like python/rails) people tend to > run multiple instaces of the web server and round robin requests to > each using something like haproxy. > > Is this known in the tomcat co

Re: POST form parameter parsing order

2011-12-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gadi, On 12/30/11 4:35 AM, Gadi Katsovich wrote: > I am using Tomcat 5.5.30 and am affected by the hashtable collision > DoS vulnerability. Just wondering: are you actually under attack, or are you just saying that you are vulnerable? I would ventur

Re: live redeploys and memory leaks

2011-12-30 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ahmed, On 12/30/11 12:41 PM, S Ahmed wrote: > If I have a running application, and I redeploy, is it possible to > keep the server live or does it have to shut-down and re-load? Any > gotchas with doing this on a busy server? If you just re-deploy,

live redeploys and memory leaks

2011-12-30 Thread S Ahmed
If I have a running application, and I redeploy, is it possible to keep the server live or does it have to shut-down and re-load? Any gotchas with doing this on a busy server? Also, I have been reading that if you don't probably clean things up in a web app, there is a strong possibility that the

Re: OT: Breadcrumbs Tomcat 7.0.11

2011-12-30 Thread Hassan Schroeder
On Thu, Dec 29, 2011 at 7:15 PM, Kiran Badi wrote: > One final doubt can I have one servlet similar to listener which will listen > to the clicks, store the path info,validate the sessions and then push that > data to some jsp and I can include that jsp in my all pages.Do I need to > implement th

Re: When is TC 5.5.35 scheduled to be released?

2011-12-30 Thread Mark Thomas
On 30/12/2011 09:36, Gadi Katsovich wrote: > Hello All, > Can anyone tell me when is TC 5.5.35 scheduled to be released? Soon. The original plan was for it to be tagged late last week. I guess it will be released early in the New Year. Mark ---

Merging multiple XML File in Tomcat

2011-12-30 Thread Lau Eng Huat
Hi guys, Is it possible to merge multiple xml file into a single xml file in tomcat. The web.xml file & server.xml is getting large and I want it to be more organized. Is this possible ?

Re: POST form parameter parsing order

2011-12-30 Thread markt
Gadi Katsovich wrote: >Hello All, >I am using Tomcat 5.5.30 and am affected by the hashtable collision DoS >vulnerability. >I wanted to know if the Request parameter parsing is always invoked? > >Or is it only performed once a servlet asks for a parameter? Meaning if >my servlets don't ask for a

When is TC 5.5.35 scheduled to be released?

2011-12-30 Thread Gadi Katsovich
Hello All, Can anyone tell me when is TC 5.5.35 scheduled to be released? Thank you

POST form parameter parsing order

2011-12-30 Thread Gadi Katsovich
Hello All, I am using Tomcat 5.5.30 and am affected by the hashtable collision DoS vulnerability. I wanted to know if the Request parameter parsing is always invoked? Or is it only performed once a servlet asks for a parameter? Meaning if my servlets don't ask for a parameter, then no hashing,