application to application security

[Patrick Mallahan]

Okay, I have two seperate apps running on the same Tomcat Server. I need to be able to get a variable from the previous jsp and verify it in an if statement in the second jsp. Here is what I have so far, but I am getting an error:

JSP 1

 int userIDNumber = user.getUserID(); 

JSP 2

 String uIDN = request.getParameter("userIDNumber");
int userIDNum = Integer.parseInt(uIDN);
if(userIDNum>2||uIDN==null)
{
    response.sendRedirect("http://www.google.com");
} 

ERROR

 java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at com.aga.forecast.utilities.ActionDispatcher.dispatcher(ActionDispatcher.java:34)
at com.aga.forecast.module.InitialAction.execute(InitialAction.java:40)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:507)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:689)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:237)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:157)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:214)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:198)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:152)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:137)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:118)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:102)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.core.StandardValveContext.invokeNext(StandardValveContext.java:104)
at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:520)
at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:929)
at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:160)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:799)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:705)
at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:577)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:683)
at java.lang.Thread.run(Thread.java:534)
Caused by: java.lang.NullPointerException
at com.aga.forecast.utilities.DBConnection.getConnection(DBConnection.java:42)
at com.aga.forecast.module.DAO.getEmployees(DAO.java:29)
at com.aga.forecast.module.InitialAction.forecast(InitialAction.java:93)
... 36 more 

for some reason it is not working. If you notice user ID hase to be less than 3 to access the second jsp, this is just a temp fix until I can get the second project to interact with the user database.

[Bear Bibeault]

The snippets of code you included and your exception:

Caused by: java.lang.NullPointerException
at com.aga.forecast.utilities.DBConnection.getConnection(DBConnection.java:42)
at com.aga.forecast.module.DAO.getEmployees(DAO.java:29)

don't seem to have much to do with each other.

[Daniel Rhoades]

Whats up with just passing a GET param? (I've never used Struts btw)