Mailing-List: contact tomcat-dev-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Developers List" <tomcat-dev@jakarta.apache.org>
Received-SPF: pass (asf.osuosl.org: local policy)
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Subject: RE: Problems Parsing Request Paramers
Date: Tue, 27 Sep 2005 14:19:08 -0400
Message-ID: <3F9F30876860BE4D92ACF81E8D65B2E50214FF82@palmhill.sfsltd.com>
Thread-Topic: Problems Parsing Request Paramers
Thread-Index: AcXDjh5h6ZYJKQMpRdOYxqk4WFsvXgAAEs8g
From: "Jeremy Nix" <Jeremy.Nix@sfsltd.com>
To: "Tomcat Developers List" <tomcat-dev@jakarta.apache.org>,
	<yoavs@apache.org>

The original referer variable was a little over 1K chars, so I don't
believe that I'm pushing that limit quite yet.  As for recreating...I
cannot.  I wish I could.  In order for me to cut down the # of
parameters, I'd have to modify the workflow process which could
potentially aggitate our users.  I will try this locally, but I'm almost
certain that my testing will be futile since I've yet to recreate the
scenario.  Any other ideas? =20

I did speak with someone over the phone today who contacted me regarding
this post.  It seems as though they have experienced the same problem
with Tomcat 4 and 5.  He seemed to believe it was related to load.  I
know that our website typically operates at roughly 80 users at a time.
At our peak, 200 users.  So, I'm not so sure it is related to load, but
I'm going to do some further investigating in our test environment with
a load tester to see if I can recreate the problem.

_______________________
Jeremy Nix
Senior Application Developer
Southwest Financial Services, LTD.
(513) 621-6699 x1158
www.sfsltd.com


-----Original Message-----
From: Yoav Shapira [mailto:yoavs@apache.org]=20
Sent: Tuesday, September 27, 2005 2:06 PM
To: Tomcat Developers List
Subject: Re: Problems Parsing Request Paramers


Hi,
Could it be the referer URL is too long, causing the query string to be
ignored or dropped?  There's a limit (2048 characters, I think?) on GET
requests in some browsers.  But actually, you're seeing this on the
server, so I'm not sure.  Can you try testing with less parameters or an
otherwise shorter query string?

Yoav

--- Jeremy Nix <Jeremy.Nix@sfsltd.com> wrote:

> First off, I apologize for the cross-post.  I posted this same message
> in the User's mailing list with no replies.   So, my hope is that one
of
> you developers may have some insight into the problem that I'm having.
>=20
> Certain users of my website are having issues with respect to=20
> submitting a form on a page.  Not all users are experiencing this=20
> problem, and I've yet to replicate it myself so it makes the situation

> even more complex. I have an icking suspicion that its related to the=20
> user's browser, but I've tested on the same browser version/subversion

> without a glitch. Here's the scenario:
> 1) User goes to page.
> 2) User fills out form.
> 3) User clicks submit.
> 4) JSP page then performs sanity checks against submitted data.  In=20
> the event of a failure on the sanity checks, page is redirected back=20
> to previous page.
>=20
> Simple enough.  Well, users are filling out the form and clicking=20
> submit with valid infromation, yet when I parse the parameters out of=20
> the request, I'm finding none of the form values from the previous=20
> page.  I then decided to investigate further and log out all request=20
> information in the event that these sanity checks fail.  The following

> is what I logged out:
> ----------------------------------------------------------------------
> --
> ---------------------------------
> Attributes:
>   "javax.servlet.request.cipher_suite" =3D =
["SSL_RSA_WITH_RC4_128_MD5"]
>   "javax.servlet.request.key_size" =3D ["128"]
>   "javax.servlet.request.ssl_session" =3D
> ["433162398579970fee9289baa55559ac832b8558dcc409382f62cb67a3499b80"]
> Parameters:
> Cookies:
>  "JSESSIONID" =3D [FCB31837FFBD2C0D9F986C42B698BADE]
>  "contact_value" =3D [ABC]
>  "duplicate_type" =3D [None]
>  "duplicate_time" =3D []
>  "mortgage" =3D []
>  "lender_id_label" =3D []
>  "title_alternative" =3D []
>  "can_place_orders" =3D [Y]
>  "flood_default" =3D [126]
>  "can_cancel_lol" =3D [N]
>  "contact_label" =3D []
>  "lender_id_value" =3D [ABC]
>  "census" =3D []
>  "loan_no_label" =3D []
>  "delivery_method" =3D [Online]
>  "apprasail" =3D []
>  "delivery_address" =3D []
>  "title" =3D []
> Headers:
>   "accept" =3D ["image/gif, image/x-xbitmap, image/jpeg, image/pjpeg,
> application/vnd.ms-excel, application/msword,
> application/vnd.ms-powerpoint, application/x-shockwave-flash, */*"]
>   "referer" =3D
>
["https://WEBSITE_URL/CreateOrder.jsp?applicant2HomePhone=3D&streetName=3D=
Ma
> =
in+St&applicant2WorkPhone=3D&applicantOtherPhone=3D&ownerEstimate=3D&appl=
ica
> in+nt
> =
2WorkPhone2=3D&revisionOf=3D&applicantWorkPhoneExtension=3D&unitType=3D&p=
reFix
> Di
>
r=3DE&applicant2OtherPhoneAreaCode=3D&applicantOtherPhone2=3D&applicantMn=
ame=3DL
>
&skipstep=3Dnone&zip4=3D&applicant2HomePhoneAreaCode=3D&applicant2OtherPh=
one=3D&
>
applicantLname=3DDoe&streetNum=3D&applicantHomePhoneAreaCode=3D&zip=3D408=
45&pass
>
code=3DHome&orderHeaderGeneralNotes=3D&applicantHomePhone2=3D&propertyLoa=
nNumb
>
er=3D&productTitle=3D&applicantFname=3DJohn&applicant2WorkPhoneExtension=3D=
&appl
>
icant2WorkPhoneAreaCode=3D&applicant2Mname=3DJ&unitNumber=3D&applicantWor=
kPhon
>
eAreaCode=3D&postFixDir=3D&productAppraisal=3D&propertyParcelNumber=3D&ap=
plicant
>
WorkPhone2=3D&applicantOtherPhoneAreaCode=3D&city=3DHulen&applicantHomePh=
one=3D&
>
applicantWorkPhone=3D&applicant2Lname=3DJane&applicant2OtherPhone2=3D&app=
lican
>
t2HomePhone2=3D&streetType=3D&state=3DKY&contactId=3D10&productMortgagePr=
ep=3D&pro
> ductFlood=3DYes&applicant2Fname=3DDoe"]
>   "accept-language" =3D ["en-us"]
>   "content-type" =3D ["application/x-www-form-urlencoded"]
>   "accept-encoding" =3D ["gzip, deflate"]
>   "user-agent" =3D ["Mozilla/4.0 (compatible; MSIE 6.0; Windows NT =
5.1;
> .NET CLR 1.1.4322)"]
>   "host" =3D ["WEBSITE_DOMAIN"]
>   "connection" =3D ["Keep-Alive"]
>   "cache-control" =3D ["no-cache"]
>   "cookie" =3D ["JSESSIONID=3DFCB31837FFBD2C0D9F986C42B698BADE;
> contact_value=3DABC; duplicate_type=3DNone; duplicate_time=3D; =
mortgage=3D;
> lender_id_label=3D; title_alternative=3D; can_place_orders=3DY;
> flood_default=3D126; can_cancel_lol=3DN; contact_label=3D;
> lender_id_value=3DABC; census=3D; can_view_insurance_tracking=3DN;
> loan_no_label=3D; delivery_method=3DOnline; apprasail=3D; =
delivery_address=3D;
> title=3D"]
>   "content-length" =3D ["0"]
>
------------------------------------------------------------------------
> ---------------------------------
> There are many interesting things about this request.  First, the
> content-length is 0.  Not sure how this could happen...error in
> browser??  Second, and the most intriguing...Notice the "referer"
entry.
> The referer entry actually contains all relevant information that I
> needed in order to process this request, yet if you look at what
> parameters I was actually able to parse off this request you will
> see...NONE.
>=20
> I'm stumped.  Anybody else seen this before?
>=20
> Environment:
> JDK 1.4.2_08
> Tomcat 5.5.9
>=20
> _______________________
> Jeremy Nix
> Senior Application Developer
> Southwest Financial Services, LTD.
> (513) 621-6699 x1158
> www.sfsltd.com
>=20
>=20
>=20
>=20


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org