Copy and past link problem

[mallikarjun dontamsetti]

Hi,
I am developing a test application with servlets , JSP and hibernate. My problem is if user search data in my page and if he get some result he can copy and paste the URL to any one so that they can see that data. When do so in my application it is showing a blank page what to do.

Like if i found some topic related to servlets in Code ranch i'll forword that link to my friend. If he open that link it has to show the data(it is not happening in my case)

[Bear Bibeault]

You should be performing extensive checks in your model to make sure that the logged-in user has permission to see the data.

[mallikarjun dontamsetti]

User may not be logged in to view that data he can directly access the link(data coming from database). Like viewing questions posted by any user can be viewed by other user(without login in coderanch, in which the data is comming from DB i think).

[mallikarjun dontamsetti]

I have developed upto this check the link click on menu bar "Job Search" then you will find search and after do empty search will get some records from db. If user copy and paste link in other browser then it is showing an empty page why?

[Bear Bibeault]

Impossible to say with the scant information you've provided.

[mallikarjun dontamsetti]

Ok i'll provide som sample code which replicate my application

public class Connection_Database {
  

        public static Connection getConnection() throws Exception {
            Class.forName("oracle.jdbc.driver.OracleDriver");
            return DriverManager.getConnection("jdbc:oracle:thin:@giriv:1521:ora11g",
                                               "scott", "tiger");
        }

        /**
         * @param conn
         */
        public  static void connectionClose(Connection conn) {
            try {
                conn.close();
            } catch (Exception e) {
                e.printStackTrace();
            }
        }


}

    public void doGet(HttpServletRequest request,
                      HttpServletResponse response) throws ServletException,
                                                           IOException {
        response.setContentType(CONTENT_TYPE);
        HttpSession session=request.getSession(false);
        String Action=request.getParameter("Action");
        StudentDB studentDB=new StudentDB();
        String searchQuery;
        if(Action.equals("showAll")){
                                     
                       if(session.getAttribute("searchQuery")==null){
                            searchQuery=studentDB.searchQuery();
                            session.setAttribute("searchQuery",searchQuery);
                          
                       }               else{
                  searchQuery=session.getAttribute("searchQuery").toString();
               }
               List<Student> showList=studentDB.showAll(searchQuery);
               session.setAttribute("student",showList);
              response.sendRedirect("studentinformation.jsp");
              
               
            }
    }

public class StudentDB {
    Connection conn;
    Statement stmt;
    PreparedStatement pstmt;
    ResultSet rs;
    String query;
    
     public String searchQuery(){
        
      
        query="select " +
            "STD_SNO,STD_FIRSTNAME,STD_MIDDLENAME," +
            "STD_LASTNAME,STD_GENDER," +
            "to_char(STD_DOB,'dd/mm/yyyy')," +
            "STD_QUALIFICATION,STD_COURSE,STD_FEE," +
            "STD_ADD1,STD_ADD2,STD_ADD3," +
            "STD_CITY,STD_STATE,STD_ZIP " +
            "from STUDENT_MALLI ";
    return query;
    }
    public List<Student> showAll(String Q) throws IOException{
       
       List<Student> sList=new ArrayList<Student>();
       System.out.println(Q);
             try{
                    conn = Connection_Database.getConnection();
                    stmt = conn.createStatement();
                    rs = stmt.executeQuery(Q);
                 
                    while (rs.next()) {
                    Student sben=new Student();
                    
                    sben.setSTD_SNO(rs.getInt(1));
                    sben.setSTD_FIRSTNAME(rs.getString(2));
                    sben.setSTD_MIDDLENAME(rs.getString(3));
                    sben.setSTD_LASTNAME(rs.getString(4));
                    sben.setSTD_GENDER(rs.getString(5));
                    sben.setSTD_DOB(rs.getString(6));
                    sben.setSTD_QUALIFICATION(rs.getString(7));
                    sben.setSTD_COURSE(rs.getString(8));
                    sben.setSTD_FEE(rs.getLong(9));
                    sben.setSTD_ADD1(rs.getString(10));
                    sben.setSTD_ADD2(rs.getString(11));
                    sben.setSTD_ADD3(rs.getString(12));
                    sben.setSTD_CITY(rs.getString(13));
                    sben.setSTD_STATE(rs.getInt(14));
                    sben.setSTD_ZIP(rs.getInt(15));
                    sList.add(sben);

                  }
                  return sList;

       }catch(Exception ex){
           ex.printStackTrace();
           }finally{
               Connection_Database.connectionClose(conn);
           }
             
       return null;
    }
}

<%@ page contentType="text/html;charset=windows-1252"%>
<%@ page import="java.lang.*" %>
<%@ page isELIgnored="false" %>
<%@ taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c"%>

<html>
 
  <head>
   
    <link rel="stylesheet" type="text/css" href="css/student.css"/>
    <meta http-equiv="Content-Type" content="text/html; charset=windows-1252"/>
    <META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE,NO-STORE,post-check=0, pre-check=0,must-revalidate">
    <META HTTP-EQUIV="PRAGMA" CONTENT="NO-CACHE">
    <META http-equiv="Expires" content="Sat, 6 May 1995 12:00:00 GMT">
     
    

<meta content="-1" http-equiv="EXpires">
    <title>studentinformation</title>
</head>
<body >
<%
        String success="",error="";
        if(session.getAttribute("success")!=null)
        {
        success =  session.getAttribute("success").toString();
        session.setAttribute("success",null);
        
        }else if(session.getAttribute("fail")!=null)
        {
        error =  session.getAttribute("fail").toString();
        session.setAttribute("fail",null);
        }
  
  %>
  
  <h3 align="center" color="red">Student Details</h3>
         <table width="100%">
         <tr>
         <td width="90%"></td>
         <td align="right">
            <a href="studentcontroller?Action=Search" title="Click here to go back to "> Back </a>
            </td>
            <td align="right"><a href="logout" >Logut</a></td>
         </tr>
         </table>
        <div id="div_message"><span style="color:green;"><%=success%></span><span style="color:red;"><%=error%></span></div>
        
    <table border="1" align="center" width="95%" bgcolor="#dad9d6">
    <tr>
      <th>Name </th><th>Gender</th><th>Date Of Birth</th><th>Course</th>
      <th>Fee</th><th>Address</th><th width="20%" colspan="3">Actions</th>
    </tr>
       <c:forEach items="${sessionScope.student}" var="std">
        <tr>
        
        <td>
        <c:out value="${std.STD_FIRSTNAME}"/> <c:out value="${std.STD_MIDDLENAME}"/> <c:out value="${std.STD_LASTNAME}"/> 
        </td>
        <td>
            <c:choose>
                <c:when test='${std.STD_GENDER=="M"}'>
                    Male
                </c:when>
                <c:otherwise>
                    Female
                </c:otherwise>
            </c:choose>
        </td>
        <td>
            <c:out value="${std.STD_DOB}"/>
        </td>
     
        <td>
            <c:out value="${std.STD_COURSE}"/>
        </td>
        
        <td width="70" align="right">
            <c:out value="${std.STD_FEE}"/>
        </td>
       
        <td>
            <c:out value="${std.STD_ADD1}"/> <c:out value="${std.STD_ADD2}"/>, <c:out value="${std.STD_ADD3}"/> <c:out value="${std.STD_CITY}"/>, 
            <c:choose>
                <c:when test="${std.STD_STATE==1}">
                    ANDHRAPRADESH, 
                </c:when>
                <c:when test="${std.STD_STATE==2}">
                    KARNATAKA, 
                </c:when>
                <c:when test="${std.STD_STATE==3}">
                    TAMILNADU, 
                </c:when>
                <c:when test="${std.STD_STATE==4}">
                    KERALA, 
                </c:when>
                <c:when test="${std.STD_STATE==5}">
                    GOA, 
                </c:when>
                <c:when test="${std.STD_STATE==6}">
                    MAHARASTRA,
                </c:when>
            </c:choose>
            <c:out value="${std.STD_ZIP}"/>.
        </td>
       
       
       <td align="left">
            <a href='studentcontroller?STD_SNO=<c:out value="${std.STD_SNO}"/>&Action=edit'>Edit</a>
        </td>
        <td align="left">
            <a href='studentcontroller?STD_SNO=<c:out value="${std.STD_SNO}"/>&Action=view'>View</a>
        </td>
        <td align="left">
            <a href='studentcontroller?STD_SNO=<c:out value="${std.STD_SNO}"/>&Action=delete' onclick='return confirm("Do you want delete the record?");' >Delete</a>
        </td>
       
        </tr>
         </c:forEach>
  </table>
  <div style="margin:30 0 0 30"> 
        <a href="studentcontroller?Action=New" >Add Student</a>
    </div>
  </body>
</html>

bean class i don't uploaded when i execute this i am getting data. After getting data when i copy and paste the link in different i am getting blank page. How to overcome this.(i know data is in session)

[mallikarjun dontamsetti]

Hy i got solution i did a basic mistake that

response.sendRedirect("studentinformation.jsp");  

Instead of this i use

request.RequestDispatcher("studentinformation.jsp").forword(request,response);

and

 HttpSession session=request.getSession(false);

i separated this as
 HttpSession session=null;
and 
session=request.getSession(); // inside showAll block
 

This solved my problem