A question about security...

[Timothy Sam]

I have a JSP that submits to a Action class... There are validation methods done manually in my execute() method ... However, when I try to invoke URL like this...

http://localhost:8080/myapp/actions/submitapplication.do?page=apply&personalInfo.age=99999


The action class accepts the values, and my validation methods are ignored... Why is that? Could someone please provide me a security checklist with my action servlet? Thanks!

[Dom Lassy]

Post the code that does your validation. If the action is called and your validation is in the execute method of the action, your validation should be done.

[Timothy Sam]

I figured out the problem, it was my File Upload routine causing an exception! Thanks!