Return-Path: 
 <user-return-197808-apmail-struts-user-archive=struts.apache.org@struts.apache.org>
Delivered-To: apmail-struts-user-archive@www.apache.org
Received: (qmail 69867 invoked from network); 9 Apr 2009 15:39:48 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by minotaur.apache.org with SMTP; 9 Apr 2009 15:39:48 -0000
Received: (qmail 99441 invoked by uid 500); 9 Apr 2009 15:39:44 -0000
Delivered-To: apmail-struts-user-archive@struts.apache.org
Received: (qmail 99389 invoked by uid 500); 9 Apr 2009 15:39:44 -0000
Mailing-List: contact user-help@struts.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:user-unsubscribe@struts.apache.org>
List-Help: <mailto:user-help@struts.apache.org>
List-Post: <mailto:user@struts.apache.org>
List-Id: "Struts Users Mailing List" <user.struts.apache.org>
Reply-To: "Struts Users Mailing List" <user@struts.apache.org>
Delivered-To: mailing list user@struts.apache.org
Received: (qmail 99379 invoked by uid 99); 9 Apr 2009 15:39:44 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 09 Apr 2009 15:39:44 +0000
X-ASF-Spam-Status: No, hits=2.2 required=10.0
	tests=HTML_MESSAGE,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: domain of mgainty@hotmail.com
 designates 65.55.111.88 as permitted sender)
Received: from [65.55.111.88] (HELO blu0-omc2-s13.blu0.hotmail.com)
 (65.55.111.88)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 09 Apr 2009 15:39:34 +0000
Received: from BLU142-W19 ([65.55.111.73]) by blu0-omc2-s13.blu0.hotmail.com
 with Microsoft SMTPSVC(6.0.3790.3959);
	 Thu, 9 Apr 2009 08:39:13 -0700
Message-ID: <BLU142-W19407B7496DE940AE026EAAE830@phx.gbl>
Content-Type: multipart/alternative;
	boundary="_d22495eb-451a-4d86-aac1-2d5e308c97d3_"
X-Originating-IP: [71.232.86.84]
From: Martin Gainty <mgainty@hotmail.com>
To: Struts Users Mailing List <user@struts.apache.org>
Subject: RE: Struts Action Issue
Date: Thu, 9 Apr 2009 11:39:13 -0400
Importance: Normal
In-Reply-To: <273308.72038.qm@web50304.mail.re2.yahoo.com>
References: <22959505.post@talk.nabble.com>
 <767D071B5A2D4AD7B074B4D911410541@Aspiresys.com>
 <273308.72038.qm@web50304.mail.re2.yahoo.com>
MIME-Version: 1.0
X-OriginalArrivalTime: 09 Apr 2009 15:39:13.0240 (UTC)
 FILETIME=[5548C580:01C9B929]
X-Virus-Checked: Checked by ClamAV on apache.org

--_d22495eb-451a-4d86-aac1-2d5e308c97d3_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


agree with Rommel=20
a FieldValidationInterceptor would accomplish this objective
http://struts.apache.org/2.0.14/docs/fieldexpression-validator.html
HINT place validation logic in expression validator e.g.
<param name=3D"expression"><![CDATA[#myField <> '']]></param

Unless you're using Hibernate or iBatis (or any ORM which will create SQL S=
tatements) I would strongly suggest your DBA to place Triggers to validate =
Data inserts before pushing into DB..(Once the aberrant character is in you=
r DB there is no extracting)

I would also suggest incorporating jsp precompile jsp's into your build cyc=
le to catch
any misconfigs in tld's
here is one courtesy of Glassfish
--assumes AS_INSTALL is set to GlassfishDefaultInstallationFolder
--assumes AS_JAVA is set to GlassfishJavaDefaultInstallationFolder
--assumes AS_ANT_LIB is set to GlassfishAntLibrary

@echo off
REM
REM Copyright 1997-2007 Sun Microsystems=2C Inc. All Rights Reserved.
REM Use is subject to license terms.
REM
setlocal
call "%AS_INSTALL%\config\asenv.bat"
"%AS_JAVA%\bin\java" -cp "%AS_INSTALL%\lib\javaee.jar=3B%AS_INSTALL%\lib\ap=
pserv-ext.jar=3B%AS_INSTALL%\lib\appserv-rt.jar=3B%AS_ANT_LIB%\ant.jar=3B%A=
S_ANT_LIB%\ant-launcher.jar=3B%AS_INSTALL%\lib\appserv-jstl.jar=3B%AS_INSTA=
LL%\lib\jsf-api.jar=3B%AS_INSTALL%\lib\jsf-impl.jar=3B%AS_JAVA%\lib\tools.j=
ar=3B%AS_INSTALL%\lib" org.apache.jasper.JspC -schemas "/schemas/" -dtds "/=
dtds/" %*
endlocal

Viel Gluck/Bon Chance/GoodLuck
Martin=20
______________________________________________=20
Verzicht und Vertraulichkeitanmerkung / Note de d=E9ni et de confidentialit=
=E9=20
Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaeng=
er sein=2C so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiter=
leitung oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient l=
ediglich dem Austausch von Informationen und entfaltet keine rechtliche Bin=
dungswirkung. Aufgrund der leichten Manipulierbarkeit von E-Mails koennen w=
ir keine Haftung fuer den Inhalt uebernehmen.
Ce message est confidentiel et peut =EAtre privil=E9gi=E9. Si vous n'=EAtes=
 pas le destinataire pr=E9vu=2C nous te demandons avec bont=E9 que pour sat=
isfaire informez l'exp=E9diteur. N'importe quelle diffusion non autoris=E9e=
 ou la copie de ceci est interdite. Ce message sert =E0 l'information seule=
ment et n'aura pas n'importe quel effet l=E9galement obligatoire. =C9tant d=
onn=E9 que les email peuvent facilement =EAtre sujets =E0 la manipulation=
=2C nous ne pouvons accepter aucune responsabilit=E9 pour le contenu fourni=
.






> Date: Thu=2C 9 Apr 2009 07:23:42 -0700
> From: charlesmel1974@yahoo.com
> Subject: Re: Struts Action Issue
> To: user@struts.apache.org
> CC: charlesmel1974@yahoo.com
>=20
> Riya=2C
>=20
> I'm sure that if you trace the request submission from JSP to your Action=
 class
> by debugging it step by step you will find where the culprit will be. I h=
ad one experience
> before that took me hours to figure out whats wrong in our JSP page where=
 its not showing
> block of data. After debugging step by step=2C the logic that checks for =
the string to show the block of
> data had a trailing empty character. That string was saved in the databas=
e with the trailing space char.
> and when we pulled it and check for the matching string=2C our JSP was sc=
rewed up. So just a note
> always trim the data(String) you push to your database.
>=20
> Goodluck on the debugging spree :).
>=20
> Rommel
>=20
>=20
>=20
> ________________________________
> From: Muthu Velappan <muthu.velappan@aspiresys.com>
> To: Struts Users Mailing List <user@struts.apache.org>
> Sent: Thursday=2C April 9=2C 2009 5:49:38 AM
> Subject: RE: Struts Action Issue
>=20
> Out of curiosity=2C I gave the same value in my application and tested=2C=
 I got
> the exact junk back in my action not even a truncated one. So=2C please c=
heck
> whether ur action bypasses only this kind of string or even valid string
> like "test" or "sample". If it doesn't show valid string then there is
> problem with view file field name and action variable name. If valid stri=
ngs
> are working fine and only this kind of string seems to be a problem then
> please generate the issue in a small testcase and send it across.=20
>=20
> Thanks=2C
> Muthu
>=20
> -----Original Message-----
> From: riya [mailto:rachana8p@gmail.com]=20
> Sent: Thursday=2C April 09=2C 2009 2:33 AM
> To: user@struts.apache.org
> Subject: Struts Action Issue
>=20
>=20
> Hi=2C=20
>=20
> Recently I observed that if in JSP input text I have entered special
> characters=2C lets say:=20
>=20
> displayIDNumber:  #$!@#%$!#$%!(*)&*()*(&
>=20
> In the action I get displayIDNumber as "" i.e empty string.=20
>=20
> Nowhere in the code we are explicitly emptying the string whenever there =
are
> special characters in the input string.=20
>=20
> I puzzled. Can someone please clarify?=20
>=20
> Thanks in advance!!
> --=20
> View this message in context:
> http://www.nabble.com/Struts-Action-Issue-tp22959505p22959505.html
> Sent from the Struts - User mailing list archive at Nabble.com.
>=20
>=20
> ---------------------------------------------------------------------
> To unsubscribe=2C e-mail: user-unsubscribe@struts.apache.org
> For additional commands=2C e-mail: user-help@struts.apache.org
>=20
>=20
>=20
>=20
> ---------------------------------------------------------------------
> To unsubscribe=2C e-mail: user-unsubscribe@struts.apache.org
> For additional commands=2C e-mail: user-help@struts.apache.org

_________________________________________________________________
Rediscover Hotmail=AE: Get e-mail storage that grows with you.=20
http://windowslive.com/RediscoverHotmail?ocid=3DTXT_TAGLM_WL_HM_Rediscover_=
Storage1_042009=

--_d22495eb-451a-4d86-aac1-2d5e308c97d3_--