On Mon, Nov 1, 2010 at 5:09 PM, James Carman <[email protected]>wrote:

> You could pass the "id" of the object (if possible) as a
> PageParameter.  You can then use a bookmarkable URL for your page.
> You'll have to lookup the object from the db, though.  Again, this is
> only possible if the object is an "entity."
>
>
And, of course, it opens you up to doing more security checks.... i.e., you
have editUserProfile.html?userID=123 - now you have to check that the signed
in person is allowed to edit whatever user they are trying to edit (since
they can twiddle the URL).


-- 
Jeremy Thomerson
http://wickettraining.com
*Need a CMS for Wicket?  Use Brix! http://brixcms.org*

Reply via email to