Thanks Dale, Yes, done that. I just wondering in case DyanmicMethodInvocation is require, if I showing the customize 404 error page will it enough to prevent user to steal the information from the action property?
Regards Louis ________________________________ From: Dale Newfield <d...@newfield.org> To: Struts Users Mailing List <user@struts.apache.org> Sent: Thursday, August 13, 2009 5:45:53 PM Subject: Re: How to prevent user invoke a method? Louis Voo wrote: > Is there anyway to prevent user invoke a method which is not define in the > configuration file? Yes: Set "struts.enable.DynamicMethodInvocation" to "false" -Dale --------------------------------------------------------------------- To unsubscribe, e-mail: user-unsubscr...@struts.apache.org For additional commands, e-mail: user-h...@struts.apache.org
