Post variables not via URL

Hello to all,
I build a site based on the JSP - servlet technology . My problem is that I want to post variables from JSP to servlet and vise vera without reveal their value to the end user through the URL. I am using the setAttribute parameter but by this way even user's password is visible in the url. I 've heard that there is an invisible way posting variables, but I don't know how. Does anybody know how this can be done?
Tnx in advance

You use <form method="post">
This prevents the request parameters from being shown in the URL.
request.setAttribute() will not affect the URL at all - it is the preferred way to pass values between jsps and servlets when using the requestDispatcher at the servlet end.
Cheers,
evnafets

Similar Messages

Transfer multi variable values via URL

Hi there,
Does anyone know how to transfer more than 1 value to a variable via URL?
VAR_NAME_I=ZZZ&VAR_VALUE_EXT_I=A,B?
Thanks
Shlomi

Hello,
I am having the same problem. Can the function module Z_VARIABLE_GET_DETAIL from the "How to...BPS Variables of Type Exit" be modified to get the node value of a hierarchy node variable so it can be used as a global variable?
Thanks, Linda

Blog Post does not create URL

We have a user who is trying to create a blog post, but on multiple occassions, when they copy and paste the title in, it does not auto-create a URL for the post. If they type in a title, that doesn't work either. They are using Chrome on Windows 7. The issue is intermittent, works sometimes but not others.
Any ideas? They are on a limited internet connection -- would that be the issue? Is it pinging the server before auto-creating the URL?

I woiuld first check to make sure there are no plugins / extensions running in chrome and javascript is enabled.
The URL field should mirror the typing. That's Javascript (clientside). The data would be submitted on POST.

Can't receive variables from HTML to Flash in AS3 passed via URL (not Flashvars)

hey all,
can't seem to get AS3 to recognize variables passed via URL
(not Flashvars). i can get vars passed with Flashvars in the
javascript but I don't want to use that method. i'm simply
extending the .swf call with .swf?var=123 in the embed and on the
AS3 side i'm calling loaderInfo.parameters.var
thought this would work but doesn't. what am i doing wrong?
HTML:
<object
classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="
http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=9,0,0,0"
width="1024" height="768" id="main" align="middle">
<param name="allowScriptAccess" value="sameDomain" />
<param name="allowFullScreen" value="false" />
<param name="movie" value="main.swf?var=123"
/><param name="quality" value="best" /><param
name="bgcolor" value="#ffffff" /> <embed
src="main.swf?var=123" quality="best" bgcolor="#ffffff"
width="1024" height="768" name="main" align="middle"
allowScriptAccess="sameDomain" allowFullScreen="false"
type="application/x-shockwave-flash" pluginspage="
http://www.macromedia.com/go/getflashplayer"
/>
</object>
AS:
t = new TextField();
t.text = String(loaderInfo.parameters.var);
thx in adv.
michael

appreciate you were going for brevity, but i think the
answer's going to be hidden either in your complete html code or
your complete AS code. without seeing this i can only keep
guessing.
that said, my latest guess is that you're not passing your
variable within the AC_FL_RunContent function. there are two
properties set in this function - src and movie, which contain your
movie name, to which you can add any parameters you wish to pass.
eg.
'src', 'main?var=123',
'movie', 'main?var=123',
where main is the name of your swf and var the name of the
parameter you wish to pass.
if this function fails - if javascript isn't available in the
browser, for example, or AC_RunActiveContent.js is missing, then
the <object> tag you described is used. (this object tag is
sitting inside a <noscript> tag.)

HTTP Status 405 - HTTP method POST is not supported by this URL

dear all
can u solve my problem.am getting the *"HTTP Status 405 - HTTP method POST is not supported by this URL"* msg from the browser when i press the search button in my form.plz suggest me the solution for my fault.these are the following html,xml,class files:
search.html*
<html>
<head>
<title>Search Page</title>
</head>
<body>
<p align="center"><font size="6" color="#0000FF"><b>Search Module</b></font></p>
<p align="center"> </p>
<center>
<form method="POST" action="./emp">
<table border="1" width="43%">
<tr>
<td width="50%">
<p align="right">Employee Name</td>
<td width="50%"><input type="text" name="empname" size="36"></td>
</tr>
<tr>
<td width="100%" colspan="2">
<p align="center"><input type="submit" value="Search" name="B1"></td>
</tr>
</table>
</form>
</center>
</body>
</html>
web.xml*
<web-app>
<servlet>
<servlet-name>jdbc</servlet-name>
<servlet-class>searchModule</servlet-class>
<init-param>
<param-name>driver</param-name>
<param-value>sun.jdbc.odbc.JdbcOdbcDriver</param-value>
</init-param>
<init-param>
<param-name>url</param-name>
<param-value>jdbc:odbc:first</param-value>
</init-param>
<init-param>
<param-name>user</param-name>
<param-value>scott</param-value>
</init-param>
<init-param>
<param-name>pass</param-name>
<param-value>tiger</param-value>
</init-param>
</servlet>
<servlet-mapping>
<servlet-name>jdbc</servlet-name>
<url-pattern>/emp</url-pattern>
</servlet-mapping>
<welcome-file-list>
<welcome-file>search.html</welcome-file>
</welcome-file-list>
</web-app>
SearchModule.java*
import java.util.*;
import java.io.*;
import java.sql.*;
import javax.servlet.*;
import javax.servlet.http.*;
public class searchModule extends HttpServlet
Connection con;
public void init() throws ServletException
String d=getInitParameter("driver");
String u=getInitParameter("url");
String us=getInitParameter("user");
String pwd=getInitParameter("pass");
try
Class.forName(d);
con=DriverManager.getConnection(u,us,pwd);
catch(ClassNotFoundException e)
System.out.println(e);
catch(SQLException e)
System.out.println("Unable to establish the connection");
}//init
public void doGet(HttpServletRequest req,HttpServletResponse res) throws ServletException,IOException
String empname=req.getParameter("empname");
res.setContentType("text/html");
PrintWriter pw=res.getWriter();
try
pw.println("<html><body><center>");
Statement st=con.createStatement();
String sql="select * from employee where empname="+empname;
ResultSet rs=st.executeQuery(sql);
if(rs.next())
pw.println("<h2>Employee Details</h2>");
pw.println("<table border=1>");
pw.println("<tr><th>Employee No.</th>");
pw.println("<th>Employee Name</th>");
pw.println("<th>Designation</th>");
pw.println("<th>Department</th>");
pw.println("<th>Salary</th>");
pw.println("</tr><tr>");
pw.println("<td>"+rs.getInt(1)+"</td>");
pw.println("<td>"+empname+"</td>");
pw.println("<td>"+rs.getString(3)+"</td>");
pw.println("<td>"+rs.getString(4)+"</td>");
pw.println("<td>"+rs.getInt(5)+"</td>");
pw.println("</tr></table>");
else
pw.println("<h2>Employee Record Not Found</h2>");
pw.println("</center></body></html>");
pw.close();
rs.close();
st.close();
catch(SQLException e)
System.out.println(e);
}//doPost
public void destroy()
if(con!=null)
try
con.close();
catch(Exception e)
System.out.println("Connection Closed");
}//destroy
}//searchModule
in control panel i selected System DNS and created the name as first and driver as Microsoft ODBC for Oracle
plz suggest me the solution where i committed mistake.

<form method="*POST*" action="./emp">
public void doGet (HttpServletRequest req,HttpServletResponse res) throws ServletException,IOException
HTTP method POST is not supported by this URL

HTTP method POST is not supported by this URL

Hi everyone,
I'm having a problem in my application.
I used the ADF Security Wizard to enable the ADF Security in my application. So, it created the pages login.html, error.html and welcome.jsp.
The problem is when I try to sign in in my applicaton. On the page login.html I filled in the fields username and password and click on the button to post the form. But when the form is posted I get the message: "HTTP method POST is not supported by this URL".
The form is posted to the bean j_security_check.
Does anybody know why is it happening? What should I do to fix it?
Thanks a lot
Daniel
Edited by: [email protected] on 23/02/2010 05:37

Normally when you get this error, your username/password is not correct.
It's not a clean way of errorhandling. I have had the same issue and after a while i noticed the password i entered was not correct.

405 HTTP method POST is not supported by this URL

When I use GET method to browse a servlet by using TOMCAT or Resin, receive the following message:
405 HTTP method POST is not supported by this URL
Thanks!

Just post your question once and be patient:
http://forum.java.sun.com/thread.jspa?threadID=573890
%

POST method not supported by this URL

Hello gentlemen,
          We are trying to migrate our servlets from another Web Application
          Server (IBM WebSphere 2.02) to Weblogic 4.5.1.
          A servlet that did work fine with WebSphere, now produces the "POST
          method not supported by this URL" error under Weblogic.
          Of course, we implement doPost method in our servlet.
          Any idea to fix this problem? thank you.
          emanuele


          Emanuele--
          In the ICSessionServlet file you are posting the data to ICIdentification servlet which is
          again a servlet
          So you need to register this servlet in weblogic.properties file before you post something to
          this servlet.
          Also the way you are calling the servlet is totally wrong from weblogic standpoint
          You don't need to specify the package name in weblogic(this is OK in java web server) for e.g.
          icdoor.myservlet.session.ICIdentificationServlet.
          Because we are registering the servlet with full package name in properties file so we don't
          need to mention the package
          name here..
          Call the servlet in the following way or whichever way is suitable for you.
          Here is how i'm calling ICIdentificationServlet
          http://localhost:7001/ICIdentificationServlet
          Here is the output i'm getting after entering user name/password
          "Welcome Startfighter"
          Requested URL
          http://localhost:7001/Stupida
          Hope this helps
          Kumar
          emanuele wrote:
          > Here's the source code for a servlet producing "HTTP method POST is not
          > supported by this URL".
          >
          > I have registered servlet Stupida in the file weblogic.properties. This
          > servlet subclass the ICSessionServlet.
          > The service() method of ICSessionServlet ask for a userid and a password
          > (user and password are not verified, anyway) and then calls the doPost()
          > method of ICIdentification servlet. This one displays a sort of "Welcome
          > page" and then the calling URL. (if it works fine...).
          >
          > On WebSphere, it works. On Weblogic, it doesn't.
          >
          > Any idea?
          >
          > emanuele
          >
          > "Kumaraswamy A." wrote:
          >
          > > can you post the stacktrace , also if possible send your java file
          > > too!..
          >
          >

Error while posting xml file to URL using URLConnection

Hello everyone,
I am facing an issue from long time related to URLConnection. If this would be resolved by your help then I would be very grateful to you.
One application which posts xml file to URL hangs and after waiting for 5 mins it throws 504 error:
java.io.IOException: Server returned HTTP response code: 504 for URL: http:hostname.
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:715)
Same application is running fine without error on another environment from last 5 years. But on another env it is erroring out from the day 1.
We have many workarounds in place none worked.
I tried to use HttpClient from apache but that too hanged at URLConnection.getInputStream() method call.
App is running on iPlanet web server 6.1 using JDK 1.4.0_03
We still dont know why this program hangs at that particular line in only one env but many times it runs fine. That means 30% of the times it posts xml file without error but 70% times it errors out. So our program logic is to retry until post is successful.
Once this issue is resolved we will remove the logic of trying again and agian.
Please provide inputs.
Thanks,
Nitin

The HTTP response 504 means that the server, acting as a gateway, has not received a response from an upstream server in the time it expected.
I think this is problem is due to the remote server that receives the XML and takes too long to return a response to the local application that posted the XML.
Try HttpClient and set the timeout variable of the HttpClient instance used.
Here http://svn.apache.org/viewvc/jakarta/commons/proper/httpclient/trunk/src/examples/PostXML.java?revision=480424&view=markup
a Post XML sample.
NB: HttpClient > setTimeout method is deprecated. See : http://jakarta.apache.org/commons/httpclient/apidocs/index.html for an alternative
Hope That Helps

Major JavaScript bug - form variables not submitted

I'm building a page where data is submitted to Paypal via a form and using Javascript to build Select statements on the fly. These appear as expected, but when the form is submitted none of the variables are POSTed through. The same page works perfectly in IE so there must be a major bug in Firefox's impementation of Javascript - this is a total show-stopper for the page I need to implement.
Go to the URL below and then check availability for type of room ANY. On the booking confirmation page if you leave the first select alone and hit the Pay Now button you will arrive at a debug page that dumps all the POST variables in a new window. Now go back and change the room type in the first select statement just above Pay Now - this updates the second select. Maybe even click it again to go back to the original setting. Now click Pay Now - nothing comes through from the select statement and some associated hidden vars.
Try it in IE and it works just like it should.
== URL of affected sites ==
http://www.west-end-bb.co.uk/test/

Found this which has solved the problem:
[http://www.infoqu.com/dev/javascript-development/crazy-firefox-javascript-bug-156760-1/]
There seems to be an issue with FF and InnerHTML when a form is in a table. By moving the form tag around I was able to place it within the table definition so that it works in FF.

Interactive report row-level ("OR") filter via URL?

I know you can perform a column level filter on an Interactive Report via URL, but can you do a row level filter?
I want to do something like where column 1 = 'test' OR column 2 = 'test', not column 1= 'test AND column 2 = 'test'.
Thank you and apologies if I am missing something in the documentation or other forum messages.

Jeff,
Thanks again for the response and for looking into it. However, if I am not mistaken, the url in that excerpt does the same thing as the URL I posted except that you used IREQ_COLNAME instead of IR_COLNAME (which defaults to EQ I believe).
I want to see if a value is in column a OR column b, etc. The "OR" is the all important caveat.
I would settle for being able to pass a value to the IR's main search box (that searches all columns of all rows) if I cannot do a targeted row level filter on a few select columns.
If anyone knows how to do either of those things, that would be great information to have.
Thanks,

Retrieving Posted Data in a URL

I am trying to retrieve data that a third-party vendor is posting to a URL that I supply. I think that I need to use "utl_http.request_pieces(url)" to retrieve the data, but I get "SIGNATURE (parameter names) MISMATCH VARIABLES IN FORM NOT IN PROCEDURE: NON-DEFAULT VARIABLES IN PROCEDURE NOT IN FORM:.." when I printout the contents of the table. Is this error from my retrieval of the url contents or from the third-party vendor's post to the url? Am I doing something wrong? Is this the correct procedure to use to retrieve posted data from a URL that is not passed as parameters?
Any help would be appreciated.
Thank you.

The reason I used deep linking was that was the only way that I could access the variables that were being sent from the first file. It took me most of the day finding a solution that would work! Is there a better way to capture the variables when I link to a file?
Here's what works for me in the file I've connetced to (the critical line is: userName=o.connectionPw;):
import mx.managers.BrowserManager;
import mx.managers.IBrowserManager;
import mx.utils.URLUtil;
private var bm:IBrowserManager;
public function init():void{
    bm = BrowserManager.getInstance();
    bm.init("");
// The following code will parse a URL that passes string parameters after the "#" sign; for example:
    var o:Object = URLUtil.stringToObject(bm.fragment);
    userName=o.connectionPw;

Forwarding A Servlet Post Variables

Hello, I'm trying to forward some posted variables from form A to this servlet where I am adding one more then forwarding it on. How can I get it to forward and show up in the URL window instead of how I'm doing it here with the servlet context?
package com.shoponlinesecure.order;
   import java.io.*;
   import javax.servlet.*;
   import javax.servlet.http.*;
   import java.util.*;
   public class AddHashAndForward extends HttpServlet {
      public void doPost(HttpServletRequest request,
      HttpServletResponse response)throws ServletException, IOException {
         response.setContentType("text/html");
         PrintWriter out = response.getWriter();
         HttpSession session = request.getSession(true);
        out.write(AuthorizeNetFingerPrint.insertFP("wil481306225","AMONaKPAIXGdLUgB","10.50",
        "789", null));
        out.close();
        RequestDispatcher dispatcher =
        getServletContext().getRequestDispatcher("https://secure.authorize.net/gateway/transact.dll");
        dispatcher.forward(request, response);
      }-thanks

This is basically what I'm trying to do in java without any javascript. They have this thing as you can see called a <%ret variable%> that only gets executed when you hit the submit button. I'm trying to do it the way I am becuase I do not want to use javascript to simulate the asp ret variable. So I thought I forwarded it to a servlet that added it then forwarded it to the gateway I would be ok?
Example 1 � Minimum requirements for requesting a Payment Form
The following HTML code along with the server-side script represents the minimum data that would need to be inserted into a page to provide a connection to the system. It shows that the fingerprint, time stamp, and the sequence number are inserted into the HTML form POST along with Login ID and other required fields. The result of this HTML code snippet is a button. Clicking on the button will take the user to the gateway�s Payment Form.
A call to generate the fingerprint should be made when the button is clicked and before the Payment Form request is made to the gateway. A sequence number should be generated and the total amount of the tranaction calculated before the call to generate the fingerprint is made. The function used to generate the fingerprint takes these fields (amount, transaction key, Login ID, and sequence number) The transaction amount should not change after the fingerprint is generated. All trailing spaces need to be removed from the fields used to generate the fingerprint

<FORM METHOD=POST ACTION="https://secure.authorize.net/gateway/transact.dll">
<% ret = InsertFP (loginid, txnkey, amount, sequence) %>
<INPUT TYPE=HIDDEN NAME="x_login" VALUE="your login ID goes here">
<INPUT TYPE=HIDDEN NAME="x_show_form" VALUE="PAYMENT_FORM">
<INPUT TYPE=HIDDEN NAME="x_amount" VALUE="amount goes here">
<INPUT TYPE=SUBMIT VALUE="Click here for secure payment form">
</FORM>
The function InsertFP is provided by the gateway and can be downloaded from the Merchant Interface. This function must be called within a server-side script on the merchant Web server. The above example shows the call being made in an ASP scripting environment.

ORA-20001: Unauthorized access (security group package variable not set).

I'm creating an app that uses APEX authentication and features self-registration (working) and forgot password (not working) forms.
My forgot password is public (requires no authentication). The user provides username and secret answer, which are validated, then provides the new password. I attempt to use htmldb_util.reset_pw to reset the user's password, but it's not working.
I have a process on the new password page calling a PL/SQL anonymous block that looks like this (see below), where P16_ITEM1 = username and P18_ITEM1 = new password.
BEGIN
apex_040000.htmldb_util.reset_pw( V('P16_ITEM1'), V('P18_ITEM1') );
END;
I also don't know how to send accurate success/failure messages from such PL/SQL block back to APEX, but that's a separate issue I guess.
Anyway, when testing via SQL Developer as the user with APEX_ADMINISTRATOR_ROLE, I get the following error:
ORA-20001: Unauthorized access (security group package variable not set).
ORA-06512: at "APEX_040000.WWV_FLOW_FND_USER_API", line 22
ORA-06512: at "APEX_040000.WWV_FLOW_FND_USER_API", line 1220
ORA-06512: at "APEX_040000.HTMLDB_UTIL", line 1253
ORA-06512: at line 8
I've searched previous threads and tried different suggestions with no luck.
I'm on Oracle DB XE 11g and APEX 4.x.
Any help will be appreciated. Thanks,
Alex.

Anyway, when testing via SQL Developer as the user with APEX_ADMINISTRATOR_ROLE, I get the following error:
ORA-20001: Unauthorized access (security group package variable not set).When running code outside Apex that depends on the Apex security group being set, run the following before your own code:
wwv_flow_api.set_security_group_id(apex_util.find_security_group_id('YOUR_SCHEMA_NAME'));Google "wwv_flow_api.set_security_group_id" for more details, such as this blog post:
http://www.easyapex.com/index.php?p=502
- Morten
http://ora-00001.blogspot.com

Creating (POST) an entity via a navigation property?

Hi All,
Let's say we have a model that has an Employees entityset, and for a given employee, you can navigate to a CurrentCarParkingSpot entity (it's an example not reality).
e.g. Employees('00123456')/CurrentCarParkingSpot would pull up the current CarParkingSpot against the Employee.
Now if the employee didn't have a CarParkingSpot, and I want to create a new CarParkingSpot for this employee, you would think I could POST a standard CarParkingSpot payload to Employees('00123456')/CurrentCarParkingSpot and it should create a new CarParkingSpot against employee (assuming I get the employee key in the GW code). However, when I try this, the framework doesn't even call my code, and it's almost like Gateway does not support creation via a navigation property. PUT works, just not POST.
Note - If I post the same payload directly to /CarParkingSpots, it works fine.
e.g. The payload looks like:
<?xml version="1.0" encoding="utf-8"?>
<entry xml:base="http://server.local/sap/opu/odata/sap/ZEXAMPLE/" xmlns="http://www.w3.org/2005/Atom" xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata" xmlns:d="http://schemas.microsoft.com/ado/2007/08/dataservices">
<id>http://server.local/sap/opu/odata/sap/ZEXAMPLE/CarParkingSpot</id>
<title type="text">CarParkingSpot</title>
<category term="ZEXAMPLE.CarParkingSpot" scheme="http://schemas.microsoft.com/ado/2007/08/dataservices/scheme"/>
<content type="application/xml">
<m:properties>
</m:properties>
</content>
</entry>
So the key question: Is creation (POST) via Navigation Properties supported in GW, and if it is, do you need to alter the payload at all (note - I've tried changing the id and text above to align with navigation property)?
FYI - I've been testing via Gateway Client, and getting successful creation by using "Use as request" from an existing specific Employees('another id')/CurrentCarParkingSpot and removing all id's in the POST payload.
Thanks,
Matt

Hi Matt,
This is a limitation of GW, not OData. If you peruse some non-SAP OData resources you will find mention of posting to navigations.
The OData 4.0 spec states:
To create an entity in a collection, the client sends a POST request to that collection's URL. The POST body MUST contain a single valid entity representation.
An entity may also be created as the result of an Upsert operation.
If the target URL for the collection is a navigation link, the new entity is automatically linked to the entity containing the navigation link.
The GW framework requires you to POST to a canonical URI, i.e. unnavigated direct address.
In my view navigated POST should be supported by GW otherwise it imposes unrealistic design issues, e.g. you now have to include the key of a parent into a child entity to satisfy your requirement.
There are other reasons why it's desirable to POST to the navigation endpoint.
1 - As the navigation points get longer, the need to add more key properties to the endpoint arises:
e.g. for myservice/entityset1(1)/entityset2(2)/siblings(3)/classifications, the classifications entity needs three properties that probably aren't anything like the canonical URI.
This will, at code level mean there are going to be divergences in the access methods that don't need to be present.
2 - The canonical URI may not be addressable. In the above example, classifications is not likely to be something that has any context outside of a navigated path,so a canonical URI for posting one cannot be established.
I don't know why SAP haven't allowed this as the runtime components certainly have the potential to expose the navigation context if the POST request was allowed in.
In the interim, it might be possible design a model that would allow pseudo-navigation posting by using a batched request, so I may have a look into this.
Regards
Ron.

Post variables not via URL

Similar Messages

Maybe you are looking for