This week's giveaway is in the Android forum.
We're giving away four copies of Android Security Essentials Live Lessons and have Godfrey Nolan on-line!
See this thread for details.
The moose likes JSP and the fly likes Output - DIR Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login

Win a copy of Android Security Essentials Live Lessons this week in the Android forum!
JavaRanch » Java Forums » Java » JSP
Bookmark "Output - DIR" Watch "Output - DIR" New topic

Output - DIR

Brian Bowles

Joined: Jun 14, 2011
Posts: 5
I am trying to display my output by doing a DIR command. I am performing the following code; but my output doesn't perform a line break, it continues on the same line.
String cmd = request.getParameter("cmd");
String output = "";

if(cmd != null) {
String s = null;
try {
Process p = Runtime.getRuntime().exec("cmd /c" + cmd);
BufferedReader sI = new BufferedReader(new InputStreamReader(p.getInputStream()));
while((s = sI.readLine()) != null) {
output += s;
catch(IOException e) {

OUTPUT DIR command
Volume in drive C has no label. Volume Serial Number is 0CEB-2304 Directory of C:\Tomcat\Tomcat711/08/2011 07:15 PM
.11/08/2011 07:15 PM
....06/12/2011 12:52 PM
.........bin06/12/2011 12:52 PM
..............conf06/12/2011 12:52 PM
.....................lib05/09/2011 03:42 PM 57,851 LICENSE11/08/2011 06:17 PM
.............................logs05/09/2011 03:42 PM 1,230 NOTICE06/12/2011 12:52 PM
.......................................temp06/16/2011 12:58 PM 859 test111.txt05/09/2011 03:42 PM 21,630 tomcat.ico06/12/2011 12:52 PM 66,529 Uninstall.exe09/28/2011 08
...................................................webapps11/08/2011 07:15 PM work 5 File(s) 148,099 bytes

Volume in drive C has no label.
Volume Serial Number is 0CEB-2304

Directory of C:\Tomcat\Tomcat7

11/08/2011 07:15 PM <DIR> .
11/08/2011 07:15 PM <DIR> ..
06/12/2011 12:52 PM <DIR> bin
06/12/2011 12:52 PM <DIR> conf
06/12/2011 12:52 PM <DIR> lib
05/09/2011 03:42 PM 57,851 LICENSE
11/08/2011 06:17 PM <DIR> logs
05/09/2011 03:42 PM 1,230 NOTICE
06/12/2011 12:52 PM <DIR> temp
06/16/2011 12:58 PM 859 test111.txt
05/09/2011 03:42 PM 21,630 tomcat.ico
06/12/2011 12:52 PM 66,529 Uninstall.exe
09/28/2011 08:28 AM <DIR> webapps
11/08/2011 07:15 PM <DIR> work
5 File(s) 148,099 bytes
9 Dir(s) 48,079,425,536 bytes free
Bear Bibeault
Author and ninkuma

Joined: Jan 10, 2002
Posts: 60794

That's how HTML gets interpreted. Anything between angle brackets is a tag, and whitespace, including line terminators is meaningless.

You'll need to escape any angle bracket characters and use something like the <pre> tag to preserve formatting.

Oh, and Java code in a JSP has been a big no-no for almost 10 years now. You might want to do something like this in a servlet or custom tag rather than in a JSP.

[Asking smart questions] [Bear's FrontMan] [About Bear] [Books by Bear]
Pete Nelson
Ranch Hand

Joined: Aug 30, 2010
Posts: 147

That's because by default, JSP pages produce HTML. If you want plain text, set the contentType to text/plain:

Better yet, if you're not producing HTML, and since you're using scriptlet code anyway, why not write this as a servlet instead?

BTW - what happens if someone were to submit "del+ntuser.dat" as the "cmd" parameter?

In preparing for battle I have always found that plans are useless, but planning is indispensable. -- Dwight D. Eisenhower
I agree. Here's the link:
subject: Output - DIR
Similar Threads
How would i break this down into seperate metods?
UnsupportedClassVersionError, Can the good people help
Which version to begin?