Server attacked using PROPFIND method

While reading the access.log I saw I had a Microsoft WebDAV attack using the PROPFIND method and they accessed a bunch of stuff that is hidden to HTTP. Server is running 10.6 so it is a little old. I turned off SMB which was on for some reason but was that even how they got in? WebDAV was not enabled so I am a little confused how it happened. Agent string of the attacker is "Microsoft-WebDAV-MiniRedir/6.0.6001".
Please advise.

Why don't you upgrade?

Similar Messages

  • System Copy of our Production Server using orabrcopy method.

    Hi
    We are planning to do a System Copy of our Production Server using orabrcopy method.
    But as the Production Server Java Version is below 1.4.1, Orabrcopy could not be executed.
    As per the planned downtime of the Production Server, we have copied all the database offline. ( say 9th of August)
    but we could not create the control , trace, init<sid>.ora files using ORABRCOPY.. during offline database copy.
    Now the system is up and running.. We havent created the files yet.
    I have 2 questions..
    1. Is there any other method so that we can create the control , trace, and init<sid>.ora files.
    2. If we create the control trace files now ( 13th of August ) can we use the offline backup that we took on (9th of August) to perform a System Copy..
    Need your addvice..
    Thanks and Regards
    Paguras

    Basically, orabrcopy does (aside from other things) an
    alter database backup controlfile to trace;
    You can enter that manually (anytime) and use the resulting .trc file in saptrace directory as a base for control.sql, however, in this case you need to "know" what you're doing. ORABRCOPY is a "nice frontend" for this because it uses the same statement to create CONTROL.SQL, it just edits it appropriately which you will need to do manually.
    Markus

  • How to transfer database table contain null values, primary key, and foreign key to the another database in same server. using INSERT method.

    how to transfer database table contain null values, primary key, and foreign key to the another database in same server. using INSERT method.  thanks

    INSERT targetdb.dbo.tbl (col1, col2, col3, ...)
       SELECT col1, col2, col3, ...
       FROM   sourcedb.dbo.tbl
    Or what is your question really about? Since you talke about foreign keys etc, I suspect that you want to transfer the entire table definition, but you cannot do that with an INSERT statement.
    Erland Sommarskog, SQL Server MVP, [email protected]

  • Sending XML messages from server to client using POST method

    Dear everyone,
    I have a simple client server system - using Socket
    class on the server side and URLConnection class on
    the client side. The client sends requests to the
    server in the form of an XML message using POST method.
    The server processes the request and responds with
    another XML message through the same connection.
    That's the basic idea.
    I have a few questions about headers and formats
    especially with respect to POST.
    1. In what format should the response messages from the
    server be, for the client? Does the server need to
    send the HTTP headers - for the POST type requests?
    Is this correct?:
       out.println("HTTP/1.1 200 My Server\r");
       out.println("Content-type: text/xml\r");
       out.println("Content-length: 1024\r");
       out.println("\r");
       out.println("My XML response goes here...");2. How do I read these headers and the actual message
    in the client side? I figured my actual message was
    immediately after the blank line. So I wrote
    something like this:
       String inMsg;
       // loop until the blank line is through.
       while (!"".equals(inMsg = reader.readLine()))
          System.out.println(inMsg);
       // get the actual message and process it.
       inMsg = reader.readLine();
       processMessage(inMsg);But the above did not work for me. Because I seem to
    be receiving a blank line after each header! (I suppose
    that was because of the "\r".) So what should I do?
    3. What are the different headers I must pass from
    server to the client to safeguard against every
    possible problem?
    4. What are the different exceptions I must be prepared
    for this situation? How could I cope with them? For
    example, time outs, IOExceptions, etc.
    Thanks a lot! I appreciate all your help!
    George

    hello,
    1) if you want to develop a distributed application with XML messages, you can look in SOAP.
    it's a solution to communicate objects distributed java (or COM or other) and it constructs XML flux to communicate between them.
    2) if it can help you, I have developed a chat in TCP/IP and, to my mind, when you send datas it's only text, so the format isn't important, the important is your traitement behind.
    examples :
    a client method to send a message to the server :
    public void send(String message)
    fluxOut.println(message);
    fluxOut.flush();
    whith
    connexionCourante = new Socket(lAdresServeur, noPort);
    fluxOut= new PrintWriter( new OutputStreamWriter(connexionCourante.getOutputStream()) );
    a server method in a thread to receive and print the message :
    while(true)
    if (laThread == null)
    break;
    texte = fluxIn.readLine();
    System.out.println(texte);
    that's all ! :)
    If you want to use it for your XML communication, it could be a good idea to use a special message, for example "@end", to finish the server
    ex :
    while(true)
    if (laThread == null)
    break;
    texte = fluxIn.readLine();
    // to stop
    if (texte.equals("@end"))
    {break;}
    processMessage(texte );
    hope it will help you
    David

  • How use the method hasPermission in weblogic server 6.1

    Hello everybody !
    In my application web ,i restrict access to some ressources (some jsp)
    to some specified groups .
    So,i create permissions in the file web.xml , as indicated in the doc
    6.0 .
    For example only the user : system can access to all the jsp , and the
    others users no .
    Now ,in my code ,I would like to use the method hasPermission in order
    to modify my application according to the differents groups of users .
    But my problem is that i don't know the parameter aclName !
    For the parameter permission I use the syntax "new
    weblogic.security.acl.PermissionImpl(".../x.jsp") .
    For the parameter sep (char),i use : '.' .
    But i don't find the parameter aclName .
    When i was in weblogic 5.1 ,i created permission in the file
    weblogicURL.policy with the syntax : " Permission
    weblogic.security.acl.URLAcl "weblogic.url",".../x.jsp" " and after
    i gave "weblogic.url" as parameter for aclName .
    But in version 6.0, I try web.xml, web ? but nothing is good .
    Is there any person which have an idea or the solution ?
    All the sugestions are welcome !
    Thanks by advance !
    Good bye .

    hi,
    maybe a better approach could be to use roles instead of permissons.
    Your menu.jsp could look like this:
    <%
    if(request.isUserInRole("super-user"))
    %>
    ... code HTML where the button "Creation" is created
    <%
    %>
    You can map the role 'super-user' to an individual principal or a
    user group in weblogic.xml. In that case only users that are in
    the mapped group/principal will see the 'creation' link. So simply
    add user 'system' to a group 'super-user'.
    regards,
    przemek
    Marc Alfonsi schrieb:
    Hi Kirann and everybody!
    Thanks for your message .
    I'm going to explain better than the first time .
    I set up security-constraints in my web.xml .
    For example only "system" can access to the directory Creation and
    all its .jsp , and the others users no .
    Now ,in my code , there is a jsp : menu.jsp which displays some
    possibilities : creation of an employee , visualisation ...with HTML
    code : button "Creation" which call a .jsp of the directory Creation .
    Actually , if a user different of "system" try to click on the button
    "Creation" there is a dialog box of login . The user writes its loggin
    but the access is prohibited ( because security-constraint in web.xml
    ).It's normal but not very well .I would like that a user who don't
    have access to the functionality "Creation" don't see the button
    "Creation" !
    So in menu.jsp , i would like to use the method hasPermission at the
    location of the button "Creation" is created with HTML code :
    <%
    if weblogic.security.acl.Security.hasPermission(.....,new
    weblogic.security.acl.PermissionImpl("/Creation/x.jsp"),'.')
    %>
    code HTML where the button "Creation" is created
    <%
    %>
    But my problem is that i don't know the first parameter which
    correspond
    to aclName .
    Any suggestions are welcome .
    Thanks for help .

  • Passing values from applet using POST method to PHP page

    Hello there ;)
    I realy need a help here.. I`ve been working all day on sending mail from applet. I didn`t succeed bcs of the security restrictions.
    So I decided just to pass arguments into PHP page, which process them and send e-mail to me.
    So here is the problem.. I need to send String variables througth POST into my php page. Now I`m using GET method, but I need more than 4000 characters.
    My actual solution is:
      URL url = new URL("http://127.0.0.1/index.php?name=" + name + "&message=" + message);
    this.getAppletContext().showDocument(url,"_self");I really need to rewrite it into POST. Would you be so kind and write few lines example [applet + php code]? I`ve already searched, googled, etc.. Pls don`t copy links to other forums here, probably I`ve read it.
    Thanx in advance to all :)

    hi!
    i`ve got some news about my applet.. so take this applet code:
    public class Apletik extends JApplet {
        public void init() { }
        public void start()
        try
          String aLine; // only if reading response
          String  parametersAsString = "msg=ahoj&to=world";
          byte[] parameterAsBytes = parametersAsString.getBytes();
          // send parameters to server
          URL url = this.getCodeBase();
          url = new URL(url + "spracuj.php");
          URLConnection con = url.openConnection();
          con.setDoOutput(true);
          con.setDoInput(true); // only if reading response
          con.setUseCaches(false);
          con.setRequestProperty("Content=length", String.valueOf(parameterAsBytes.length));
          OutputStream oStream = con.getOutputStream();
          oStream.write(parameterAsBytes);
          oStream.flush();
          String line="";
          BufferedReader in = new BufferedReader(new InputStreamReader(con.getInputStream()));
          while ((aLine = in.readLine()) != null)
           JOptionPane.showMessageDialog(null, aLine);      
           if(aLine.equals("")) break;
          in.close();      
          oStream.close();
        catch (Exception ex)
          JOptionPane.showMessageDialog(null, ex.toString());
    }here is code of spracuj.php which is on server:
    <?php
      if(isset($_POST['msg']))
        echo('hurray!');
    ?>it has only 1 problem.. when i test it on my localhost, everything seems to be all right. but when i post it to my server, i got IOException HTTP 400 error code :( where is the problem? please help me, i`m so close :D thanx

  • Trying to configure a Win 2003 Server to use TLS server authentication . . .

    I am trying to
    configure a Win 2003 Server to use TLS server authentication following Method 2 in KB 895443 - see below:-
    Method 2: By using the Certificate Request Wizard
    The following steps describe how to obtain a certificate from a Windows Server 2003 Certification Authority. You can also request a certificate from a Windows 2000
    Certification Authority. Additionally, you must have Read permissions and Enroll permissions on the certificate template file to successfully request a certificate. Use this method if one or more of the following conditions are true:
    You want to request a certificate from an Enterprise Certification Authority.
    You want to request a certificate that is based on a template where the subject name is generated by Windows.
    You want to obtain a certificate that does not require administrator approval before the certificate is issued.
    To obtain a certificate, follow these steps:
    Click Start, click Run, type mmc, and then click OK.
    On the File menu, click Add/Remove Snap-in.
    Click Add, click Certificates, and then click Add.
    Click Computer account, and then click Next.
    If you want to add a certificate to the local computer, click Local computer. If you want to add a certificate to a remote computer, click Another
    computer, and then type the name of that remote computer in the Another computer box.
    Click Finish.
    In the Add Standalone Snap-in dialog box, click Close, and then click OK in the Add/Remove
    Snap-in dialog box.
    Under Console Root, click Certificates (Local Computer).
    Note If you configured the Certificates MMC snap-in to manage a remote computer, click Certificates (servername)instead of Certificates (Local Computer).
    On the View menu, click Options.
    In the View Options dialog box, click Certificate purpose, and then click OK.
    In the right pane, right-click Server Authentication, point to All Tasks, and then click Request New Certificate.
    In the Certificate Request Wizard that starts, click Next.
    In the Certificate types list, click Server Authentication, click to select the Advanced check box,
    and then click Next.
    In the Cryptographic Service Providers list, click Microsoft RSA SChannel Cryptographic Provider.
    I get as far as step 11 and I get the error message:-
    The wizard cannot be started because of one or more of the following conditions:
    - There are no trusted certification authorities (CAs) available.
    - You do not have the permissions to request certificates from the available CAs.
    - The available CAs issue certificates for which you do not have permissions.
    This is covered in KB 927066 – see below:-
    To resolve the problem, follow these steps:
    Verify that the CERTSVC_DCOM_ACCESS group exists in the domain that hosts the certification authority. This group is in the CN=Users container.
    To do this, follow these steps:
    Click Start, click Run,
    type Dsa.msc, and then click OK.
    In the left pane, click the Users container.
    Verify that the CERTSVC_DCOM_ACCESS group is in the right
    pane. If the CERTSVC_DCOM_ACCESS group is not in the right pane, go to step 4.
    Verify that the CERTSVC_DCOM_ACCESS group includes the following member groups:
    Domain Users
    Domain Computers
    If these member groups do not exist in the CERTSVC_DCOM_ACCESS group, go to step 4. 
    Note If users or computers in other domains need to enroll against the certification authority, you must also add those users and computers to the CERTSVC_DCOM_ACCESS group. If the current problem occurs on a domain
    controller, you must also add the Enterprise Domain Controllers group to the CERTSVC_DCOM_ACCESS group. By default, domain controllers are not members of the Domain Computers global group. Therefore, domain controllers
    do not have sufficient DCOM permissions.
    Verify that the CERTSVC_DCOM_ACCESS group has the appropriate DCOM Access permissions and DCOM Launch and Activation permissions on the computer that hosts the certification
    authority.
    Click Start, point to Program,
    point to Administrative Tools, and then click Component Services.
    Expand the Component Services node.
    Expand the Computers node.
    Right-click the My Computer node, and
    then click Properties.
    Click the COM Security tab.
    Under Access Permission, click Edit
    Limits.
    Verify that the CERTSVC_DCOM_ACCESS group has Allow Local Access and Allow
    Remote Access permissions, and then click Cancel.
    Under Launch and Activation Permissions, click Edit
    Limits.
    Verify that the CERTSVC_DCOM_ACCESS group has Allow Local Activation and Allow
    Remote Activationpermissions, and then click Cancel.
    Click Cancel, and then close the Component
    Services console.
    Settings may be incorrect if any one of the following conditions is true:
    The CERTSVC_DCOM_ACCESS group does not exist.
    The default membership of the CERTSVC_DCOM_ACCESS group is incorrect.
    The CERTSVC_DCOM_ACCESS group does not have the correct permissions.
    If any one setting is incorrect, run the following commands at a command prompt. Press ENTER after each command.
    certutil -setreg SetupStatus -SETUP_DCOM_SECURITY_UPDATED_FLAG
    net stop certsvc
    net start certsvc
    Repeat steps 1 through 3 to verify that all the settings are correct.
    Note If the changes affect the group membership of the certification authority server, you must restart the server for the changes to take effect.
    The only part of the above instructions which I have not been able to complete is:-
    “you must also add the Enterprise Domain Controllers group to the CERTSVC_DCOM_ACCESS group”.
    When I click on the CERTSVC_DCOM_ACCESS user then click the Members tab & go to add Enterprise Domain Controllers the option is not there.

    Hi Nick,
    Have you successfully set up an enterprise CA?
    If yes, is the enterprise CA’s certificate located under the Trusted Root Certification Authorities store?
    Best Regards,
    Amy

  • System copy for ABAP+JAVA system using SAPINST method

    Dear support,
    We have recently upgraded to ECC 6.0 system and we have been still doing system copy by using backup and restore method. I know its<b> wrong</b>.
    which involves below steps , this old methos works fine for ABAP engine and evreything looks ok.But java engine will not work.
    So we need to use SAPINST method as described in note 785848 and system copy guide available on OSS. But i am really not able to understand sequence
    for tasks to be carried out in this SAPINST method.
    <b>Can anybody list few sequence along with step by step procedure as i mentioned below for old system copy procedure.</b>
    Is it really difficult to make that for <b>SAPINST</b>  as everybody says refer to standard guide and note ?
    Anybody if possible can make the same way as i did below , i think it would rather be small as far as my understanding after reading those docs.
    Simple old system copy procedure works for ABAP is as:
    Run the following command on source system.
    a. Login as <sid>adm
    b. svrmgrl
    c. connect internal
    d. alter database backup controlfile to trace;
    e. exit;
    f. Above command will generate a .trc file in /oracle/P01/saptrance/usertrace directory.
    g. Copy the text from CREATE CONTROLFILE until the ( and paste it in to any new .sql or controlfile.sql file.
    h. Copy the controlfile.sql to target system.
    i. Edit the file and replace the entire source SID to target SID.
    j. Edit the reuse database command with the set database command
    Copy the aft generated during the backup file from the source system to target system. (/oracle/<SID>/sapbackup)
    a. Change all the source <SID> to target <SID>.
    b. Only don't change the backup volume name it must be target system <SID>.
    c. Copy the above aft file name line from the source back<SID>.log to target<SID>.log file.
    5. Shutdown the target server instance.
    6. From this onwards all the command on the target system only.
    a. Login as <SID>adm
    b. run the SAPDBA
    c. select J (Restore/Recovery)
    d. select B (Full restore and recovery)
    e. select A (Select backup of type)
    f. Select the offline backup which you want to restore.
    g. It will take some time to restore.
    h. Once the database is restored login as <SID>adm and run the
    i. svrmgrl
    j. connect internal;
    k. startup nomount (if the database is already mounted shutdown it using the shutdown command)
    l. run the following command
    m. @controlfile.sql (file name of the control file contains the CREATE CONTROLFILE statement)
    n. After the run the above command it should give the "Statement Processed)
    o. alter database open resetlogs.
    I am really looking forward to see anybody take some time out to prepare this kind of step by step procedure.
    It would be of greate help for all of us for performing system copy with sapinst method.
    Looking forward for your support.
    Best Regards,
    AjitR

    Hi,
    As per the guide you need to do source system Technical Preparations, in that running the export preparation is also one. You need to run this first before you start the export, if and only if export will successful if preparation is successful.
    Yes you need to create the export directory to take the export copy of source system, it may be any where in your server. It should be having 6 to 8 GB free space.No need to create the export directory in target system, after export is completed in the source system you copy the export directory to the target system.
    <b>Target system</b>
    Yes you need to take the back up file system and delete all the contents of the directory.
    Yes it can be considered as fresh system installation but copy of source system.
    Yes the process follows after you giving the export directory path .
    Next screen you will get the database drop and recreate screen chouse the drop and recreate method
    Next J2EE user name and password
    Next DDIC password
    Next you have to give kernel and oracle client dvd path
    Next Parameter checking screen here if you are selected database drop and recreate you have to revise the oracle database system option
    If you are selecting review next screen is database advance option you have to select the advanced option
    Next you have to select following option to recreate
    1 Sapdata directory mapping
    2 Database instance file system
    3 Create database parameter
    4 Create tablespace
    Next screen sapdata directory creating
    Next screen you can just click next no need to change any setting
    Next table creation
    Next screen specify oracle instance directories
    Next again parameter checking and last this is last screen
    Next will be the execution screen
    Reward points if usefull

  • How can i upload a image file to server by using jsp or servlet.

    Hi,
    I m gurumoorthy. how can i upload a image file to server by using jsp or servlet without using third party API. pls anyone send me atleast outline of the source code.
    Pls send me anyone.
    Regards,
    Gurumoorthy.

    I'm not an applet programmer so I can't give you much advice there.
    If you want to stream the file from the server before it's entirely uploaded, then I don't believe you can treat it like a normal file. If you're just wanting to throw it up there and then listen to it, then you can treat it like a normal file.
    But again, I'm not entirely certain. You might be able to stream the start of the file from the server while you're still uploading the end of it, but it probably depends on what method you're using to do the transfer.

  • Error in parallel exp-imp using ftp method

    Hi,
    We are doing migration of ERP system running on redhat linux 6 and sybase 15.7 .
    Trying to do parallel export import using ftp method.
    Here when we start the export monitor, it gives the below error.
    Required system resources are missing or not available:
      Structure of subdirectories in local export directory '/export/TRS_Mock_Export/ABAP' and FTP export directory '/usr/sap/TRQ/DVEBMGS00/TRS_Mock_Export/ABAP' on '<ip>' server is different.
    But the structure is entirely same.
    Even we have moved the export directory which got created after sapinst was run (before starting migmon) to the target server.
    Below is a content of export monitor file .
    export_monitor_cmd.properties
    ftpCopy
    dbType=SYB
    exportDirs=/export/TRS_Mock_Export/ABAP
    installDir=/media/sapinst_logs/Mock_Exp_Imp/sapinst_instdir/BS2010/ERP605/LM/COPY/SYB/EXP/CENTRAL/AS-ABAP/EXP/log_17_Apr_2015_05_03_53
    ddlFile=/export/TRS_Mock_Export/ABAP/DB/DDLSYB_LRG.TPL
    r3loadExe=/usr/sap/TRS/DVEBMGS00/exe/R3load
    tskFiles=yes
    dataCodepage=4103
    jobNum=8
    monitorTimeout=30
    loadArgs=-stop_on_error
    ftpHost=ip
    ftpUser=user
    ftpPassword=pw
    ftpExportDirs=/usr/sap/TRQ/DVEBMGS00/TRS_Mock_Export/ABAP
    ftpExchangeDir=/media/sbx_exchange_dir
    ftpJobNum=3
    trace=all
    Please suggest.
    Regards,
    Amit Jana.

    Thanks for the steps Siddhesh.
    ftp is working.
    in the properties file for ftp user earlier gave a different user.
    Now gave sidadm and this error is resolved.
    Now facing a different issue.
    In the properties file we gave 'server' in the beginning . This is only starting R3load processes but ftp transfer does not start.
    Then gave 'ftp' below 'server' but got the below error.
    Check below the file contents and error :
    export_monitor_cmd.properties
    server
    ftp
    dbType=SYB
    exportDirs=/export/TRS_Mock_Export/ABAP
    installDir=/media/sapinst_logs/Mock_Exp_Imp/sapinst_instdir/BS2010/ERP605/LM/COPY/SYB/EXP/CENTRAL/AS-ABAP/EXP/log_17_Apr_2015_05_03_53
    ddlFile=/export/TRS_Mock_Export/ABAP/DB/DDLSYB_LRG.TPL
    r3loadExe=/usr/sap/TRS/DVEBMGS00/exe/R3load
    tskFiles=yes
    dataCodepage=4103
    jobNum=8
    monitorTimeout=30
    loadArgs=-stop_on_error
    ftpHost=ip
    ftpUser=user
    ftpPassword=pw
    ftpExportDirs=/usr/sap/TRQ/DVEBMGS00/TRS_Mock_Export/ABAP
    ftpExchangeDir=/media/sbx_exchange_dir
    ftpJobNum=3
    trace=all
    =======================================
    TRACE: 2015-04-20 06:14:57 sun.net.ftp.impl.FtpClient readServerResponse
    Server [/192.168.51.12:21] --> 230 Login successful.
    ERROR: 2015-04-20 06:14:57 com.sap.inst.migmon.exp.ExportStandardTask run
    Fatal exception during execution of the Export Monitor.
    java.io.IOException: illegal filename for a PUT
            at sun.net.www.protocol.ftp.FtpURLConnection.getOutputStream(FtpURLConnection.java:528)
            at com.sap.inst.lib.ftp.FtpService.put(FtpService.java:160)
            at com.sap.inst.migmon.exp.ExportExchangeTask.removeExportStatistics(ExportExchangeTask.java:277)
            at com.sap.inst.migmon.exp.ExportStandardTask.doRun(ExportStandardTask.java:92)
            at com.sap.inst.migmon.MigrationTask.run(MigrationTask.java:431)
            at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
            at java.util.concurrent.FutureTask$Sync.innerRunAndReset(FutureTask.java:351)
            at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:178)
            at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:178)
            at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293)
            at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
            at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
            at java.lang.Thread.run(Thread.java:791)
    INFO: 2015-04-20 06:14:57
    Export Monitor is stopped.

  • How to add byte[] array based Image to the SQL Server without using parameter

    how to add byte[] array based Image to the SQL Server without using parameter.I have a column in table with the type image in sql and i want to add image array to the sql image column like below:
    I want to add image (RESIM) to the procedur like shown above but sql accepts byte[] RESIMI like System.Drowing. I whant that  sql accepts byte [] array like sql  image type
    not using cmd.ParametersAdd() method
    here is Isle() method content

    SQL Server binary constants use a hexadecimal format:
    https://msdn.microsoft.com/en-us/library/ms179899.aspx
    You'll have to build that string from a byte array yourself:
    byte[] bytes = ...
    StringBuilder builder = new StringBuilder("0x", 2 + bytes.Length * 2);
    foreach (var b in bytes)
    builder.Append(b.ToString("X2"));
    string binhex = builder.ToString();
    That said, what you're trying to do - not using parameters - is the wrong thing to do. Not only it is insecure due to the risk of SQL injection but in the case of binary data is also inefficient since these hex strings are larger than the original byte[]
    data.

  • Open URL, use POST method in new window

    From a Java program, how do we open a https connection, basically a secured site, in a new window and pass some parameters to the link, using POST method?

    Hi
    Is JavaProgram a Applet or Servlet?
    Opening a new window directly from server,probably not possible? From your question
    what I understand is, A html page is displayed
    and when u click on a link opens a new window.
    The parameters to the link should be posted using POST method, again
    it is not possible this can be done only by appending
    "?name1=value1&name2=value2..."to the link
    Vinay
    [email protected]

  • Server path in onMessage method

    Hi,
    getServletContext().getRealPath("./") in Servlet will give the server path of the current web application.
    Similarly how to get the server path in onMessage method of Message Driven Bean ?
    I have a xml from database. Need to access a xsl in WL server and create a html and then write this html to a flat file. I need to do all this in onMessage method. So, now to access the xsl file i need the server path.
    Your help is greatly appreciated.
    Thanks in Advance,
    Anitha

    Hey Anitha,
    Here is a sample that maybe useful.
    URL url = (new TestClass()).getClass().getResource(name);
    String absPath = url.getFile()Where new TestClass() is the classname where this code goes and fits. The name is a relative path to retrive the xsl file or any other stuff u like.

  • How to use a method in sequence diagram from a class diagram

    Hello, can someone tell me how to use the method from class diagram in sequence diagram? so far i only can add a classifier to the object lifeline but i still cannot add the method from the class...
    thx

    Now that Web Services is around, I'd look at possibly implement a Web Service call in your applet, which can then be given back any object(s) on return. Set up your server side to handle Web Service calls. In this way, you can break the applet out into an application should you want to (with very little work) and it will still function the same

  • Problems using GET method in JSP

    Hi,
    I had some problems using GET method in JSP.
    I'm using Apache web server 1.3 and Tomcat 3.3.1 in windows 2000.
    And I'm using language English and Korean.
    When I send messages using POST method, all is good
    But when I send message using GET method, English is good, but Korean is not good.
    I tried to encode using
    URLEncode.encode(str, "UTF-8")
    and decoding it using
    URLDecode.decode(request.getParameter(tag), "UTF-8")
    but it didn't work.
    How can I receive request including Korean using GET method in JSP?
    If anyone have solutions, please let me know.
    thanks.

    Hi,
    I had some problems using GET method in JSP.
    I'm using Apache web server 1.3 and Tomcat 3.3.1 in
    windows 2000.
    And I'm using language English and Korean.
    When I send messages using POST method, all is good
    But when I send message using GET method, English is
    good, but Korean is not good.
    I tried to encode using
    URLEncode.encode(str, "UTF-8")
    and decoding it using
    URLDecode.decode(request.getParameter(tag), "UTF-8")
    but it didn't work.
    How can I receive request including Korean using GET
    method in JSP?
    If anyone have solutions, please let me know.
    thanks.This problem appears, when one use UTF-16 encoding in JSP - am I right?
    If so there are two solutions:
    1) Temporary: Use "UTF-8" - or any other 8 bit encoding scheme and
    encode Korean symbols with "&1234;" kind of escapes - though it
    may not work
    2) Absolute: get my piece of code, which I have managed to write
    just a month ago resolving absolutely similar problem with UTF-16
    in code using Chinese/Russian/English encodings
    But I wouldn't say that it's costs 10 DDs :) - it's much more
    expensive... So try 1st variant if it wouldn't help - let me know.
    I'll figure :)
    Paul

Maybe you are looking for

  • Pie Chart alignment

    I have a pie chart that has a huge legend that is overlapping the chart itself. Is there anyway i can get the pie chart to align to the right of the box so the overlap will stop?

  • Archivelogs not transforing to standby

    Hi, In dataguard parameter are configured in primary database to transfer archivelogs like log_archive_dest_2='service=to_orcl and standby_file_management=auto, and created directory structure also. standby database side: standby_archive_dest='/u01/a

  • Will Logic Pro 9 run on a 2007 4GB ram, 320GB hard drive, Intel 2 duo 2ghz mac mini?

    "Will Logic Pro 9 run on a 2007 4GB ram, 320GB hard drive, Intel 2 duo 2ghz mac mini?" I am looking for the cheapest way possible to run Logic Pro 9 and will purchase a second hand mac mini if it will run the software. Thank you!

  • Cannot assign ringtone

    Help. I purchased some ringtones and when I go to assign to a contact I do not see them. I only see the ringtones that came with the phone. In settings I can see the new ringtones, but not when I try to assign to a contact. Any suggestions?

  • HD partition questions...

    Hi all, i have questions about the partitioning of the HD. Why one shoud partition the HD? it's really important? and (if yes) how and what is the best option to do that? thanks!