Home > Others

(reproduced) session token mechanism

Source: Internet
Author: User
Developer on Alibaba Coud: Build your first app with APIs, SDKs, and tutorials on the Alibaba Cloud. Read more ＞

Http://blog.chinaunix.net/uid-26642709-id-3061264.html

When using the session token, you must use the STRUTS2 Table tag library, you cannot use HTML to prevent duplicate submissions via session token: When the client requests the page, the server generates a random number from the token tag and places the random number in the session. The random number is then sent to the client, and if the client submits it for the first time, then the browser sends the random number to the server and the server receives the random number and compares it to the random number saved in the session, when the value is the same, and the server considers it the first commit. And will update the server side of this random value, if this time again, the client to the server side of the random number is the previous one, and the server side of the random number has changed, the two different, the server think this thing repeated commit, And then turn to the results page that Invalid.token points to. token.jsp<%@ page language= "java" import= "java.util.*" pageencoding= "Iso-8859-1"%>
<% @taglib prefix = "s" uri= "/struts-tags"%>
<body>
<s:form action = "token.action" theme = "Simple" >
Username: <s:textfield name = "username" ></s:textfield><br>
Password:<s:password name = "Password" ></s:password><br>

<s:token></s:token>
<s:submit value = "Submit" ></s:submit>

</s:form> </body>
<action name = "token" class = "com.shengsiyuan.struts2.TokenAction" >
<result name = "Success" >/tokenSuccess.jsp</result>
<result name = "Invalid.token" >tokenFail.jsp</result> <!--times is a special case of input.
<interceptor-ref name = "token" ></interceptor-ref>
<interceptor-ref name= "Defaultstack" ></interceptor-ref>
</action>
Tokenaction.javapackage Com.shengsiyuan.struts2;import Com.opensymphony.xwork2.actionsupport;public Class Tokenaction extends Actionsupport
{
Private String username;
private String password;
Public String GetUserName () {
return username;
}
public void Setusername (String username) {
This.username = Username;
}
Public String GetPassword () {
return password;
}
public void SetPassword (String password) {
This.password = password;
}
@Override
Public String Execute () throws Exception {
return SUCCESS;
}
}tokensuccess.jsp<%@ page language= "java" import= "java.util.*" pageencoding= "Iso-8859-1"%>
<% @taglib prefix = "s" uri = "/struts-tags"%>
<body>
Username:<s:property value = "username"/><br>
Password:<s:property value = "Password"/>

</body>
<body>
Do not submit the form repeatedly
</body>

(reproduced) session token mechanism

This article is an English version of an article which is originally in the Chinese language on aliyun.com and is provided for information purposes only. This website makes no representation or warranty of any kind, either expressed or implied, as to the accuracy, completeness ownership or reliability of the article or any translations thereof. If you have any concerns or complaints relating to the article, please send an email, providing a detailed description of the concern or complaint, to info-contact@alibabacloud.com. A staff member will contact you within 5 working days. Once verified, infringing content will be removed immediately.

Related Keywords:
session token php session id token last 24 hours sliding drawer mechanism sliding drawer mechanism radio controlled clock mechanism error handling mechanism pop up drawer mechanism

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

What's Trending
Top 10 Tags
datastax versions naming convention zookeeper client class definition md5 microsoft sql server 2005 data structures exception handling error handling
Top 10 Keywords
microsoft download center down wordpress address url site address url wordpress address url windows installer 4 0 download 302 not found web address url definition site address url wordpress db2 integer mac os installation step by step pdf abbreviation for return

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

Get Started for Free

  • Sales Support

    1 on 1 presale consultation

    Chat Contact Sales

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

    Open a Ticket

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.

    Learn More