> the second is I mean that, I don't want User do my action by typing my > action path directly on address bar, such as > http://www.myweb/user/useraction.do, but I allow User do my action by > clicking on certain link on webpage, such as <html:link > page="/user/useraction.do">do</html:link> > > any solution :( You could try using tokens, the relevant methods are in the Action class. From memory you need to use saveToken in the action that prior to your webpage with the link and isTokenValid in the receiving action to validate you have been given a valid token and resetToken to make sure it doesn't get used again. I know it gets included automatically when you use html:form and believe you can have it included when using html:link (by setting an attribute).
Steve --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
