Re: How to pass request value to generator

[Joerg Heinicke]

But have in mind that this solutions has a major security issue when 
setting hiddenPath input to something like ../../../aPath, /aPath or 
file://C:/Windows/aPath. I would recommend at least 
src="context://{request-param:hiddenPath}", so that the path can not be 
outside the servlet context directory. Or using an action testing for 
valid values of hiddenPath.

Joerg

On 10.05.2004 13:28, Johannes Textor wrote:

Hi,

you can use the following syntax:
<map:generate type="directory" src="{request-param:hiddenPath}">
HTH, Johannes
[EMAIL PROTECTED] wrote:
Hi,
 
How can we retrieve the parameters sent by a html form and send this 
as an input to a generator
 
I have a html page
 
<form name="test" action"TestPage"
< input type=hidden name ="hiddenPath" value="/test">
</form>
 
 
I want to extract the content of hiddenPath variable which has been 
submitted as part of the request and pass this value as a input to 
"src" of directory tag.
     <map:generate type="directory" src="">
 
So that I can get the listing of a directory sent from the html form.
 
I was thinking of retrieving the value using flowscript and storing in 
the session, not sure how to access value from session variable and 
send it to <map:generate src attribute.
 
Can any one throw some pointers on how to achieve the same.
 
Thanks in advance.
Regards,
Moin
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]