Ah yes,

> Perhaps what you're thinking of is that JSP files should not be called
> directly or bookmarked. They should be hidden from the user completely,
and
> only accessible through an action.

that was it - sorry - stupid of me.
Could you tell me how to secure the jsps so that they are only a result of
the action?
cheers,
Brian


----- Original Message -----
From: "Kruse, Matt" <[EMAIL PROTECTED]>
To: "Struts Users Mailing List" <[EMAIL PROTECTED]>
Sent: Thursday, June 05, 2003 3:12 PM
Subject: RE: calling actions directly


> > I read that one of the things about struts is the actions are
> > only able to be called from the pages directly. Ie, you
> > shouldn't be able to bookmark the actions themselves like:
> > http://myhost/myaction.do
>
> Where did you hear this? That's totally not true - any action can be
called
> directly as long as it has a mapping. It's just a URL. Otherwise, how
would
> you enter the first action? :)
>
> Perhaps what you're thinking of is that JSP files should not be called
> directly or bookmarked. They should be hidden from the user completely,
and
> only accessible through an action.
>
> Matt Kruse
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to