Dushyant Agarwal

Hi,
I am running IBM Rational App scan for my application, to scan for SQL injection. Regarding this I want to know whether the tool identifies cases in which malicious Hibernate queries are sent to the server, through request alteration. Will the tool identify these cases as error cases?

Thanks,
Dushyant

Hi,
I am trying to provide solution for a security vulnerability in an application, using servlet 2.4, struts 1.3, JBoss- 4.2.0. For this I require to put cookie type as HttpOnly. I have found that
1. Starting from servlet v. 3.0 Cookie interface has HttpOnly attribute.
2. Starting from Tomcat 6.0 we can provide a useHttpOnly context param in context.xml.

I also found that for older versions the workaround is to rewrite JSESSIONID value using and setting it as a custom header.
String sessionid = request.getSession().getId(); response.setHeader("SET-COOKIE", "JSESSIONID=" + sessionid + "; HttpOnly");

I tried setting useHttpOnly in <JBOSS_HOME>/server/default/deploy/jboss-web.deployer/context.xml. But I can still access the cookie with client side script.

1. Since I am using servlet 2.4 I may have to rebuild the header to put httpSessionOnly.
2. I am using JBoss 4.2.0 - that has embedded Tomcat v. < 5.0, it might not recognize the httpSessionOnly attrbute.



Please help me finding a solution.

Thanks,
Dushyant

You didn't specify what you wanted to do

I want to carry out navigation from one page to another in struts but without using query parameter for passing the action method name.

You can also override the getMethodName method to override the action's default handler selection.

I could not get "getMethodName() " method in the documentation.

Hi David,
I went through the javadoc . Not sure what you wanted me to find out.
I asked if there was a way of not sending the method name in the query string. May be in some other context or some other way in struts.

First I wnna answer your questions:

Are you using JRE or a JDK?

I am using JDK 1.5.0.
I don't know how to find the output of

echo %JAVA_HOME%

I tried

echo %JAVA_HOME%

on the dos prompt. It gave

%JAVA_HOME%

as string output .
However, I have found the solution: if I remove the -server option from %JAVA_OPTS% in the run.bat, I get the server running. As well as I got the server running with eclipse IDE without any changes to run.bat(...yayy).

I am getting the following message on tring to start my JBoss: no 'server' JVM at <JRE_Home>\bin\server\jvm.dll. I am using JDK 1.5, for running the JBoss server. Please help.

Hi all,
Am relatively new to Struts. Am using version 1.3. I have a security issue, where I need to stop from sending anything in the query string. Now I have been told that if we are using Dispatch Action (which is my case) we have to pass the method name of the in the query string, i.e. the query string is going to look like
http://<url>/<formName>.do?method=myActionMethod. Is it true that we can not work with DispatchAction withput sending the method name in the query string?
If there is another way of doing this please let me know.

Hi, I have 2 years and 1 month of experience in Java/ J2EE in a product based software company in Gurgaon. Major development experience in ERP based J2EE project. My responsibility was to develop Business logic (EJB 3.0-SLSB's+ JPA) as well as the presentation logic (JSF 1.2+Apache Myfaces Trinidad 1.2). Extensive work experience in Trinidad(PPR skinning , dialog frameworks).

If some one can provide information where I would find an oppurtunity with the similar profile I would be greatly obliged.



Thanks and regards.

hi,
In my application using JBoss 4.2.1-GA, I have used JSF+trinidad tag library for view and JPA+EJB 3.0 for the business logic. On persisting an entity into the DB using entity manager I got an exception - java.sql.BatchUpdateException. The stack trace is available in <JBOSS_HOME>/server/default/log/server.log.
I want to set up my own log file in<JBOSS_HOME>/bin. For this I set an error.jsp file with isError attribute true in the page.

This provided me with the implicit exception object. But when I used it to log the stack trace, it provided me with only the stack trace of the FacesException.The rest of the exceptions were not logged into my file.

How can I provide all the exception stack traces that were available in jboss server's log file to my own log file??

Thanks,
Dushyant
[ November 27, 2008: Message edited by: Dushyant Agarwal ]

Hi,
First of all the issue of changing the display name is unnecessary. The display name absolutely correct according to the ranch rules.

display name must be a first and a last name separated by a space character, and must not be obviously fictitious.

FYI,Bear the said name is purely traditional Indian name and further critics on this would be offensive.

As for the Exception,Srinivas, this exception would be removed if we used <jsp:forward page="/userLogin.jsp">

As well as try the URL http://localhost:8080/Loginjsf/index.faces[/URL]
[ April 15, 2008: Message edited by: Dushyant Agarwal ]

Hi,
I am using JDev 11g TP3,JBoss 4.2.1, Trinidad 1.2.4.

Suppose we have a select Many Shuttle. It is rendering properly. The content is getting shifted from the leading to trailing list properly. However the trailingFooter & leadingFooter facet does not work i.e. on placing a commandButton inside the facet it is not visible on the view neither has it got rendered( i have checked the source of the html page).

1.What might have been the problem?? Do I need to set any attribute on the jsp to enable the facets??

2.Is it necessary to list all the facets on the jsp and put componrnts in only those where it is necessary & leave the rest of the facets empty??

3.Is it necessary to use Shuttle proxy in the filter facet before putting components in leading / Trailing footer facets??

4.How is it possible to change the commandLinks Move/Move all & Remove/RemoveAll that are rendered by default by the component. As well as the top/bottom up/down links in select Order Shuttle>>

Hi,
What would be perm gen space error ?? I often receive it while deploying my ear with ejb !!

How should i get rid of it?

Hi,
I am using JDev 11g,JBoss 4.2.1, Trinidad 1.2.4.

In my project I have top,bottom & center frames. I have a page in the center frame that consists of a tr:commandNavigationItem component. I have provided the "destination" as another page(target.jsp) and "targetFrame" as bottom frame. However on clicking on it the navigation takes place to target.jsp in the same frame(center).

On the other hand on using a tr:goLink with the same attrinute values as above provides the navigation. But tr:goLink does not have an action attribute as tr:commandNavigationItem.

I need to use tr:commandNavigationItem to navigate to another frame (as tr:goLink). How can I do it???

Hi,
In my project a war is deployed on IBM webSphere & the Session is getting timed out before the time specified in web.xml. Any particular reason in sight for this>>

We all know that the style applied by component level selectors (af|inputText in my case...)will be applied to all the components of the application of that sort.

In my project I am using Apache Trinidad( v1.2.4)

I needed to set a skin on inputText components . In the skin CSS I wrote:



af|inputText::content{

background-color:Red;

}



Now in one inputText component on the page I needed a different style.

So I used the following



af|inputText::content.Change{

background-color:Green;

}



and put styleClass attribute of that component as "Change".



But on rendering the page I could not find the change affecting the component.

It only affected the DOM of the inputText but not the content part.

I could have achieved the same thing using



.Change{

background-color:Green;

}
and setting styleClass="Change".



Am I missing out something??



Do I need to use FireBug to solve the problem??(I do not have it downloaded yet)
[ April 08, 2008: Message edited by: Dushyant Agarwal ]