user should not logged in using query string - struts2

Question

I used login application and it is validating form if userName and password is blank.
Now I am sending userName and password like this
http://localhost:8080/LoginApp/loginAction.action?userName=jagannath&password=123 then also logged in successfully instead of filling login.jsp form page. In this case user should not logged in. How can avoid it using Struts2.

Answer 1

There are 2 types of validations client side( Html/javascript_ and server side (Java Code).
As of now you are doing client side validation only. You need to server side validation as with url param javascript validation is not called - i.e. validation that you do on input. When param are passed you need to check in java code if they are valid or not. Sample code below
public class LoginAction extends ActionSupport {
private String userName;
private String password;
public String execute() {
return SUCCESS;
}
public String getUserName() {
return userName;
}
public void setUserName(String userName) {
this.userName = userName;
}
public String getPassword() {
return password;
}
public void setPassword(String password) {
this.password = password;
}
public void validate() {
if (getUserName().length() == 0) {
addFieldError("userName", "UserName.required");
} else if (!getUserName().equals("Arpit")) {
addFieldError("userName", "Invalid User");
}
if (getPassword().length() == 0) {
addFieldError("password", getText("password.required"));
}
}
}
More details here