Dave Brown

Good job I looked closer, somehow they'd installed the thing to /var/tmp/.tmp

Inside were all sorts of files they were sharing filling up the HD.

Not sure how they got in either but I think I'll do some googling now on security and try learn a bit more.

Hi there,

Just recently a very disgruntled forum user of one of the charity organisations I'm involved with launched an all out attack on our server, this matter is now being dealt with by the police but today on a different forum, I had a member asking if anything had changed as the forum was acting weird.. Anyway to get to the point I've been looking at logs etc, can't see anything new in the logs whihc point to an attack but I noticed one particular Java process was taking quite a bit of CPU time, when I looked what the process was I saw this:

www-data 4488 8.8 0.7 470844 60480 ? Sl 11:56 6:05 /var/tmp/.tmp/java/jdk1.5.0_13/bin/java -Dlog4j.configuration=file:conf/log4j-default.properties -Xms3m -Xmx128m -Djava.library.path=lib -classpath lib/wrapper.jar:lib/log4j-1.2.8.jar:lib/slave.jar:lib/oro.jar -Dwrapper.key=_Kfnq7zqj5s4Sc6A -Dwrapper.port=32000 -Dwrapper.jvm.port.min=31000 -Dwrapper.jvm.port.max=31999 -Dwrapper.disable_console_input=TRUE -Dwrapper.pid=6521 -Dwrapper.version=3.4.1 -Dwrapper.native_library=wrapper -Dwrapper.service=TRUE -Dwrapper.disable_shutdown_hook=TRUE -Dwrapper.cpu.timeout=10 -Dwrapper.jvmid=20 org.tanukisoftware.wrapper.WrapperSimpleApp org.drftpd.slave.Slave


I can't recall every seeing that before so I'm trying to determine whether the people who attacked before are still at it and if this is some backdoor process they've launched..

If anyone can give me any information on that java lib I'd really appreciate it, must admit although I am very confortable around linux & programming, being the victim of an attack has left me feeling somewhat ignorant in the security field.

Thanks

You have a couple of options here, I tend to place reusable code that doesn't belong in Domain classes/Controllers or Services into it's own class in either the src/groovy or src/java folder depending on whether its groovy or pure java code obviously.

Alternatively for you specific task, have you considered the use of meta-programming? That is you can create a function that becomes part of the String class, so you would be able to call your function on any String instance.

I had a similar requirement where I needed a 'truncate' method so Strings over a certain length would be returned with a trailing "..." after a specified number of characters.

Have a look at my tiny post on how to accomplish it..

http://www.grailsforum.co.uk/showthread.php/17-Why-you-shouldn-t-NOT-learn-about-meta-programming.?p=30#post30

Rgds,

Actually I had another thought.. I've been concentrating solely on the wrong aspect of the problem..

If I used WebDav on the server, a user/Word can open up documents from the WebDav repository and Save straight back to it..

And it just so happens there's a Grails Plugin already out there for WebDav support!

So this I think would be an ideal solution, security etc would need to be carefully looked at but in theory it's more promising than the other solutions I was thinking of.. i.e. word macros yek!.

If I get chance to put together a grails test, then i'll give some feedback on here.. I'm sure it's not so uncommon a requirement.

Hi all,

I wanted to bring this question up as I'd really just like to hear other peoples thoughts on the matter and to see how others would go about solving the issue.

Basically, there is an old windows legacy application, and the people behind it are looking at different possibilities for a re-write. It's basically a case management application which present the users with many different forms displaying different aspects of data, e.g. client managment etc. The more complex aspects of the application lie with it's integration with other tools. Document creation is based on a whole bunch of MS-Word templates, which a chosen template would be populated with data then a document would be saved and presented to the user for final adjustments in MS-Word with the filename being stored in the database. It's the document creation and the user bases reliance and preference for MS-Word that is the thorn in my side from suggesting the application could be re-written as a web based application. Which is what I would personally prefer to suggest over desktop java or .Net but I'm not so sure it would be easy/possible to do as a webapp.

I know, and often do generate PDF documents through my web-apps, and control layout etc using iText or since Grails has become my framework of choice, gsp's but that wouldn't satisfy the customer. They are so used to maintaining documents with Word that to suggest something else is a no no.

So I'm left with the possibility of creating documents in word which itself is not a problem but I cannot quite see how I could generate a document, allow the user to edit it... then track the changes and somehow upload the saved document back to the server..

Any thoughts on this would be greatly appreciated, 90% of the application would serve better as web app but these few complications have me at a roadblock so to speak.

Thanks

It looks like something to do with what librarys you are running with.

I actually have two different scenarios with the same project, netbeans runs my project fine with beans only being created once, whereas intellij is having the problem you mention and calling the method twice.

Just curious if you discovered the reason behind it being called twice?

Seems the abstractpagebean, abstractrequest/session beans are all part of the visual web components.

Personally I think thats a really bad design flaw, in that the VWP portion should have only have been there for the purpose of visually designing jsp pages at DESIGN time, and not common backing bean methods used in the runtime.

So now the VWP has been dropped, so much more is lost... I can easily live without a visual designer... but the projects should still in theory be able to run.

What a fluff

Bart Kummel wrote:Hi Dave,

I get your point. It sounds like you made a well thought decision. Pity I can't help you on the ICEfaces/VWP stuff. Let's hope someone else here at the Ranch can help you.

Best regards,
Bart

Me too, there's no support from IF unless you pay for it these days :'(

Hi Bart,

Basically I'm trying JSP firstly because I want to get my project back up to speed.. It's been on hold for a long time now. Since Icefaces dropped their VWP support, meant any work on this project had to be continued using netbeans 6.5. Unfortunately I never realised at the time I was working on the project just how dependent on the VWP icefaces can be, so when it came time to update to Icefaces 1.8 and No VWP dependancy, nothing worked...

I actually tried today to install netbeans 6.5 and use icefaces again, but nowadays even their own netbeans plugin doesnt work with a fresh install of NB6.5..

I did consider changing to facelets but then there's an additional learning curve and a lot of changes to make, at the moment I just want to get working on it again with the code I had lol

Really if I had time, I'd look into porting to JSF 2, & annotations etc, but first things first...

Hi,

Can anyone please help me in my migration from a VWP (Visual Web) project.

I have setup a JSP based IceFaces 1.8 project and am trying to port over my managed beans, my first stumbling block is that the beans extend AbstractPageBean which isn't immediately available.

Can anyone tell me whether I should be trying to use this still or not? And if so the promper import path for the bean.

If I don't use it then I no longer have all the extended methods available, init, prerender etc. which is a lot of code lies.

Thanks

Additionally the in place filtering is extremely useful, and very quick to accomplish.

When setup up the grid will render itself with textboxes above each column, allowing you to type into them and hit return to instantly perform a filter. I think that's a great feature.
as it's very unobtrusive on the page so no need for a seperate or even pop up search form. You're not just limited to textboxes either as obviously that won't always suit every column.

Thanks Gregg, I'll take a look at that. Actually I've heard the name a few times but never followed up on it.

It's been a while since I've looked at java desktop app's but looking into seeing what the current trends are these days and whats hot, and whats not.

Anyone any recent experience creating new projects and picking up a framework e.g. Springs RCP, or is vanilla swing the norm?

I had a look at website earlier for a product called cezenne, which certainly makes swing app's look very modern, although I believe it's just a look and feel, not a framework as such.

Not sure if it's affected anyone else but has anyone had wrist issue's with the latest apple mouse?

I started using an iMac two weeks ago, with the wireless small keyboard and magic mouse. At first I loved the magic mouse with it's lack of bulk yet still great functionality, but after a few days started getting pretty harsh aching sensations in my wrist (no rude comments please!). I persevered in case I'd just sprained it doing something else (again no comments please!) but it got worse so I've had to switch back to my old wired Logitech mouse.

I think it's probably due to the low height of the magic mouse and the fact there's no 'curve' to it. Shame really as I know it's just aesthetics but it does look nice, and works well.

So curious if anyone else has had issues like that?

PS. As for wireless keyboards/mice, I know logitech have a new bundle coming out soon that has a battery life of years and not weeks! I hope they'll do them in white :-)