On 22.02.2009, at 12:09, Lachlan Deck wrote:

I have the simplest "WOHelloWorld" app where I am not able to get rid of the
wosid from the DirectAction URL.

In your Session class' constructor...

setStoresIDsInCookies( true );
setStoresIDsInURLs( false );

The hard part might be if any page requires specific session data. Either the app can handle that (coming to any page without a session and creating one from there) or you have to build a direct action based app.

I'd get rid of that method (performActionNamed) right away - it's a security issue par excellence. I'd rather build specific methods and not allow anybody to go to any page by just name guessing.

cug
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list      ([email protected])
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com

This email sent to [email protected]

Reply via email to