book

Special Edition Using Java™ Server Pages and Servlets

Name: Special Edition Using Java™ Server Pages and Servlets
Author: Mark Wutka
ISBN: 9780789724410

by Mark Wutka

October 2000

Intermediate to advanced

768 pages

16h 30m

English

Que

Read now

Unlock full access

Copyright
Dedication
About the Author
Acknowledgments
Tell Us What You Think!
INTRODUCTION
Who Should Buy This BookHow This Book Is OrganizedPart I: Basic Servlets and Java Server PagesPart II: Core Components In-DepthPart III: Java Web Application ArchitecturePart IV: Taking JSP and Servlets Beyond HTMLPart V: Advanced TechniquesAppendixesConventions Used in This Book
I. Basic Java Server Pages
1. The Evolution of the Web Server
The Basic Web ServerCGI: The Common Gateway InterfaceNSAPI, ISAPI, and Other Loadable ModulesActive Server PagesServletsXML and XSL StylesheetsJava Server Pages
2. Getting Started with Java Server Pages
A "Hello World" Java Server PageUsing the <% %> Tags in a Java Server PageDisplaying a Value with <%= %>Inserting CommentsDeclaring Methods and Variables with <%! %>Handling Multiple Threads in a JSPTroubleshootingErrors When Accessing the PageCompiler ErrorsDoesn't Show HTML
3. Getting Started with Servlets
A "Hello World" ServletCompiling the ServletRuntime ClasspathThe HelloWorldServlet In-DepthThe Anatomy of a ServletThe service MethodThe init MethodThe destroy MethodThe getServletInfo and getServletConfig MethodsSending a Response to the BrowserThe HttpServlet ClassChoosing Between Java Server Pages and ServletsThe Advantages and Disadvantages of JSPThe Advantages and Disadvantages of ServletsTroubleshootingCan't Compile the ServletThe Servlet Won't Run
4. Creating HTML Forms
A Simple HTML FormUsing the request ObjectHandling Multiple Form ValuesRetrieving Form Variables in a ServletJavaScript and Java Server PagesPassing Data to JavaScriptDifferent Ways to Do FormsA Practical HTML and JSP CombinationSetting Configuration ParametersLocking Output FilesA JSP Input Form Calling a JSP Form HandlerUsing the Same JSP for the Input Form and Form HandlerAn Example Input Form and Form Handler JSPTroubleshootingForm and Form Variable NamesJavaScript ProblemsFile Locking Problems

5. Saving Data Between Requests
Storing Data in Hidden Form VariablesSecurity Concerns with Hidden VariablesStoring Data in a session ObjectUsing the session Object in a JSPUsing the session Object in a ServletHow Sessions WorkForcing a New SessionHandling Session TerminationThe HttpSessionBindingListener InterfaceHandling Sessions Without CookiesDisabling Cookies in Internet ExplorerDisabling Cookies in NetscapeStoring Application-Wide DataWhy Do You Need the application Object?TroubleshootingStoring and Retrieving DataCookie SettingsURL Rewriting
6. Debugging and Error Handling
Why Debugging Is ToughUsing Log Files to Debug an ApplicationUsing System.out and System.errUsing the Servlet Logging APILogging to a FileUsing Exceptions to Trace ExecutionUsing a DebuggerDebugging a Servlet with TomcatDebugging a Java Server Page with TomcatError HandlingSpecifying an Error Page for a JSPSpecifying Error Handlers for Web Server ErrorsTroubleshootingGeneral ProblemsLogging ProblemsDebugging Problems
7. Organizing Your Application
Including Other FilesIncluding Files in a JSP at RuntimePassing Parameters to an Included FileIncluding Files from a ServletForwarding to Another PageForwarding to Another Page from a JSPForwarding to Another Page from a ServletPassing Parameters to the Forwarded PagePassing Java Objects Between JSPs and ServletsMaking Your Application More ModularA Reusable HTML Table ModuleThe Model-View-Controller ParadigmHow Does Model-View-Controller Help?An Example ControllerAn Example ViewCalling Multiple Controllers and ViewsUsing an Applet in Your FormTroubleshootingCompile Time IncludesRun Time Includes
8. More About Saving Data
Designing the Shopping CartCreating the Data ObjectsCreating the ShoppingCart ClassDisplaying the Contents of the Shopping CartAdding and Removing ItemsPassing the Item Object from the BrowserKeeping Items in MemoryAllowing Multiple QuantitiesRemoving Shopping Cart ItemsCompleting the OrderStoring Data in a CookieUsing Cookies in Servlets and Java Server PagesTroubleshootingShopping Cart ProblemsCookies
9. Interacting with JavaBeans
The <jsp:useBean> TagAdding the Bean to the PageGetting Bean PropertiesSetting Bean PropertiesSetting Properties Directly from ParametersInitializing a New BeanThe Type of an Existing BeanA Bean-Based Web ApplicationTroubleshootingScope ProblemsBean Property ProblemsMaking Changes
10. Performance
Making Java Server Pages and Servlets Thread-SafeBuffering Pages to Improve PerformanceCaching Objects to Reduce Setup TimePrecompiling Java Server PagesSimple Java OptimizationsUse the StringBuffer classParsing NumbersCreating ObjectsTroubleshootingThreading ProblemsPrecompilation Problems
II. Core Components in-Depth
11. JSP and Servlet Lifecycles
Servlet LifecycleServlet LoadingServlet InitializationServlet ExecutionServlet CleanupJava Server Page LifecycleJSP CompilationJSP LoadingJSP InitializationJSP ExecutionJSP CleanupReloading Other ClassesTroubleshootingInit Method TroubleReloading Classes
12. How the Browser Interacts with the Server
The HTTP ProtocolViewing the Request Headers Made by a BrowserCommon Request HeadersThe Accept HeaderThe Accept-Language HeaderThe Accept-Charset HeaderThe User-Agent HeaderCommon Response HeadersThe Content-Type HeaderThe Content-Length HeaderThe Cache-Control HeaderThe HTTP POST CommandGET Versus POSTHTTPS: Secure HTTPTroubleshootingRequest HeadersRunning the Dumper Program
13. Core Servlet Components
The ServletRequest ClassAccessing Request ParametersAccessing Request AttributesAccessing Protocol-Related InformationRetrieving Request DataHandling Uploaded FilesGetting Locale InformationThe HttpServletRequest ClassGetting Header ValuesGetting the HTTP MethodAccessing the Query StringRetrieving CookiesGetting Session InformationThe ServletContext ClassGetting the Server VersionInitialization ParametersSaving Application-Wide ObjectsLogging MessagesCalling Other Servlets and JSPsAccessing Application ResourcesThe ServletResponse ClassSetting the Content Type and LengthOpening an Output StreamSetting Locale-Specific InformationResponse BufferingThe HttpServletResponse ClassSetting Header VariablesRedirecting the BrowserReturning StatusEncoding URLsSending CookiesThe ServletInputStream ClassThe ServletOutputStream ClassThe HttpSession ClassStoring and Retrieving ObjectsControlling Session TerminationGetting Session StatusThe Cookie ClassCreating a New CookieSetting the Domain and PathCookie AgingSecure CookiesCookie Protocol VersionsCookie CommentsTroubleshootingHeader ValuesLogging MessagesCookies
14. Core Java Server Page Components
The Built-In JSP ObjectsThe request ObjectThe response ObjectThe out ObjectThe session ObjectThe application ObjectThe pageContext ObjectThe config ObjectThe page ObjectThe exception ObjectThe JspWriter ClassSending Output DataBuffer ControlUsing a PrintWriterThe PageContext ClassAccessing the Built-In ObjectsAccessing Attributes from the PageContext ClassForwarding and IncludingThe JspEngineInfo ClassTroubleshootingBuffering ProblemsInclude and Forward Problems
15. JSP Directives
The page DirectiveThe language OptionThe import OptionThe session OptionThe buffer and autoFlush OptionsThe isThreadSafe OptionThe errorPage OptionThe isErrorPage OptionThe contentType OptionThe info OptionThe extends OptionThe include DirectiveThe taglib DirectiveTroubleshootingpage Directive ErrorsProblems with the Error PageSuperclass Problems
III. Java Web Application Architecture
16. Introduction to Application Architecture
The Three Layers of an ApplicationApplication TiersApplications Come Unglued Over TimePhysical Versus Logical TiersHow Can You Have Half a Tier?What I Mean by "Tier"Single-Tiered ApplicationsTwo-Tiered ApplicationsThree-Tiered ApplicationsThe Trade-OffsApplication ComplexityMaintainabilitySchedule PressureDevelopment Team SkillMiscellaneous FactorsHybrid Architectures
17. Browser-Server Interaction
Designing Your Web ScreensRedrawing the Entire PageOrganizing the Presentation into FramesSending Data to a Hidden FrameSending Data to the BrowserHandling Multiple CallsTroubleshootingHidden FramesJavaScript DataMultiple Calls
18. A Single-Tiered Web Application
Storing and Retrieving DataLocking a FileStoring Data in a Text FileStoring Data with Object SerializationStoring Data in a Random Access FileTroubleshootingFile LockingSerialization
19. Building a Two-Tiered Web Application
Creating a Connection PoolMapping Objects to Database TablesA Poor-Man's Object-to-Relational MappingAn Example Data ObjectA Two-Tiered Problem Reporting SystemThe Login ScreenThe Main MenuQuerying for Existing Problem ReportsCreating and Updating Problem ReportsDatabase LockingBuilding a Better Connection PoolTroubleshootingUsing JDBCConnection Pools
20. Designing a Three-Tiered Application
Stubs and SkeletonsSingle-Client Versus Multi-Client ObjectsScalabilityMaintainabilityStriking a BalanceOptimizing Data AccessDatabase LockingThree-Tiered Application with Enterprise JavaBeans
21. Using RMI in a Web Application
Using a Single RMI Object for All RequestsUsing One Object Per Browser SessionAn Example RMI ApplicationThe Database InterfaceThe Remote InterfacesImplementing the ServiceRequests InterfaceImplementing the RemoteServiceRequest InterfaceCreating the Web InterfaceEditing Service RequestsTroubleshootingRunning rmicRunning RMI Programs
22. Using CORBA in a Web Application
Using One CORBA Object for All SessionsUsing Separate CORBA Objects for Each SessionUsing CORBA StructsDealing with Null StringsAlternatives to NullAn Example CORBA ApplicationTroubleshootingCompiling IDL to JavaRunning CORBA Programs
23. Using Enterprise JavaBeans in a Web Application
What Is Enterprise JavaBeans?Entity and Session BeansContainersPersistenceTransactionsConnection PoolingObject PoolingHow EJB, Servlets, and Java Server Pages Fit TogetherCreating an Entity BeanCreating the Entity Bean ImplementationCreating the Home InterfaceCreating the Remote InterfaceCreating a Session BeanCreating a Stateless Session BeanAccessing EJBs from Java Server PagesPackaging a Complete EJB and JSP ApplicationTroubleshootingEJB ProblemsJSP and EJB Problems
IV. Taking JSP and Servlets Beyond HTML
24. Creating an XML Application
A "Hello World" XML PageSending XML from a Java Server PageSending XML from a ServletA Few Simple Rules for XMLWhy Use XML with JSP and Servlets?Automatically Generated XMLParsing XML with SAX and DOMParsing XML Using SAXParsing XML Using DOMParsing XML Using JOXTroubleshootingGenerating XML from a JSPUsing the Sun XML LibrariesUsing JOX
25. Adding XSL Stylesheets to Enhance an XML Application
What Is XSL?A Simple XSL StylesheetNavigating an XML Document with XPathApplying XSL Templates on the BrowserApplying XSL Templates from a ServletJSP or Stylesheets?TroubleshootingTranslator Problems
26. Creating a Wireless Web Application
A Wireless "Hello World" PageViewing the Wireless Hello PageA Brief Introduction to WMLNavigating Between CardsCreating Input FormsProcessing Form InputDetecting Wireless Clients in a JSP or ServletA Wireless Score Entry and Reporting SystemDeploying the Scores ApplicationTroubleshootingRunning with the SimulatorRunning with a Real Phone
27. Creating On-the-Fly Graphics
Images Aren't Just Static FilesSending Images from a ServletUploading Images to a Servlet from JavaUploading Images to a Servlet from a BrowserPerforming Online Image ProcessingAdding Captions to ImagesEmbossing ImagesEdge DetectionLighting EffectsTroubleshootingRefresh ProblemsPerformance Problems
V. Advanced Techniques
28. Packaging a JSP Application
A Simple WAR File ExampleInstalling a WAR File Under TomcatInstalling a WAR File Under JRunWAR Configuration OptionsGeneral Application Optionsdisplay-namedescriptiondistributablecontext-parammime-mappingwelcome-file-listerror-pagesession-configServlet Optionsservletservlet-mappingOthersTroubleshootingInstallation Problems
29. Extending JSP with New Tags
A "Hello World" TagPackaging and Installing a TagConditional Includes Using Custom TagsAccessing Tag AttributesProcessing Body Content with a Custom TagAdding Scripting VariablesTroubleshootingInstall ProblemsAttribute ValuesBody TagsScripting Variables
30. Internationalization
Detecting the Browser's Preferred LocaleUsing Locale-Based Text FormattersCreating a Locale ObjectFormatting DatesFormatting CurrencyGetting a Locale for a Browser's Preferred LanguageUsing Resource Bundles in Web PagesTroubleshootingTesting Multi-Lingual Web SitesLocating Resource Bundles
31. Security
Role-Based SecurityBasic AuthenticationThe <security-constraint> TagThe <login-config> TagCreating a Custom Login FormChecking Security Roles ProgrammaticallyUsing Client Certificates for AuthenticationTroubleshootingAuthentication ProblemsCertificate Problems
32. XML Syntax for JSP
The XML JSP SyntaxThe HelloWorld JSP in XMLTranslating XML JSP SyntaxTroubleshootingRunning XML-JSP Files DirectlyRunning the XMLToJSP Program
A. JSP Syntax and API Reference
JSP SyntaxCode ScriptletsExpressionsDeclarationsCommentsDirectivesThe page DirectiveThe include DirectiveThe taglib DirectiveBuilt-In ObjectsActions<jsp:forward><jsp:getProperty><jsp:include><jsp:param><jsp:plugin><jsp:setProperty><jsp:useBean>XML SyntaxRoot DocumentCode ScriptletsExpressionsDeclarationsDirectivesTag LibrariesJava Server Pages APIjavax.servlet.jspInterfacesClassesExceptionsjavax.servlet.jsp.tagextInterfacesClasses
B. Servlet API Reference
The javax.servlet APIInterfacesRequestDispatcherforwardincludeServletdestroygetServletConfiggetServletInfoinitserviceServletConfiggetInitParametergetInitParameterNamesgetServletContextgetServletNameServletContextgetAttributegetAttributeNamesgetContextgetInitParametergetInitParameterNamesgetMajorVersiongetMimeTypegetMinorVersiongetNamedDispatchergetRealPathgetRequestDispatchergetResourcegetResourceAsStreamgetServerInfogetServletgetServletNamesgetServletslogremoveAttributesetAttributeServletRequestgetAttributegetAttributeNamesgetCharacterEncodinggetContentLengthgetContentTypegetInputStreamgetLocalegetLocalesgetParametergetParameterNamesgetParameterValuesgetProtocolgetReadergetRealPathgetRemoteAddrgetRemoteHostgetRequestDispatchergetSchemegetServerNamegetServerPortisSecureremoveAttributesetAttributeServletResponseflushBuffergetBufferSizegetCharacterEncodinggetLocalegetOutputStreamgetWriterisCommittedresetsetBufferSizesetContentLengthsetContentTypesetLocaleSingleThreadModelClassesGenericServletdestroygetInitParametergetInitParameterNamesgetServletConfiggetServletContextgetServletInfogetServletNameinitlogserviceServletInputStreamreadLineServletOutputStreamprintprintlnExceptionsServletExceptionServletException ConstructorgetRootCauseUnavailableExceptionUnavailableException ConstructorgetUnavailableSecondsisPermanentThe javax.servlet.http APIInterfacesHttpServletRequestgetAuthTypegetContextPathgetCookiesgetDateHeadergetHeadergetHeaderNamesgetHeadersgetIntHeadergetMethodgetPathInfogetPathTranslatedgetQueryStringgetRemoteUsergetRequestedSessionIdgetRequestURIgetServletPathgetSessiongetUserPrincipalisRequestedSessionFromCookieisRequestedSessionFromURLisRequestedSessionIdValidisUserInRoleHttpServletResponseaddCookieaddDateHeaderaddHeaderaddIntHeadercontainsHeaderencodeRedirectURLencodeURLsendErrorsendRedirectsetDateHeadersetHeadersetIntHeadersetStatusHttpSessiongetAttributegetAttributeNamesgetCreationTimegetIdgetLastAccessedTimegetMaxInactiveIntervalinvalidateisNewremoveAttributesetAttributesetMaxInactiveIntervalHttpSessionBindingListenervalueBoundvalueUnboundClassesCookieCookie ConstructorclonegetCommentgetDomaingetMaxAgegetNamegetPathgetSecuregetValuegetVersionsetCommentsetDomainsetMaxAgesetPathsetSecuresetValuesetVersionHttpServletdoDeletedoGetdoOptionsdoPostdoPutdoTracegetLastModifiedserviceHttpSessionBindingEventHttpSessionBindingEvent ConstructorgetNamegetSessionHttpUtilsgetRequestURLparsePostDataparseQueryString
C. Apache and Tomcat
Where to Get TomcatInstalling TomcatInstalling Tomcat on WindowsUnpacking Tomcat with WinZipUnpacking Tomcat from the Command LineTesting the InstallationInstalling Tomcat on Linux or UNIXRunning Tomcat StandaloneRunning Tomcat Under Netscape Server for WindowsRunning Tomcat Under IISRunning Tomcat Under ApacheRunning Tomcat with Apache for WindowsRunning Tomcat with Apache for LinuxTomcat ConfigurationWorking DirectoryLoggingSetting the ClasspathAuthenticationSpecial Tomcat FeaturesWAR File InstallationJSP Compiler
D. JRun
Where to Find JRunInstalling JRun for WindowsInstalling JRun for LinuxStarting JRunJRun AdministrationConnecting JRun to Other Web ServersConnecting JRun to IIS or PWSConnecting JRun to Netscape Web ServerConnecting JRun to ApacheUsing JRun as a Standalone Web ServerWorking DirectoryInstalling Web ApplicationsSetting the ClasspathLog FilesJRun Special Features
E. ServletExec
Where to Get ServletExecInstalling the ServletExec ISAPI Plug-InInstalling the ServletExec NSAPI Plug-InInstalling the ServletExec Standalone Server for WindowsInstalling the ServletExec Standalone Server for Linux/UNIXServletExec AdministrationWorking DirectoryInstalling Web ApplicationsLog MessagesSetting the ClasspathServletExec Special Features
F. Resin
Where to Get ResinInstalling Resin on WindowsUnpacking Resin with WinZipUnpacking Resin from the Command LineTesting the InstallationInstalling Resin on Linux/UNIXRunning Resin StandaloneRunning Resin Under Another Web ServerRunning httpd or srun as Windows NT ServicesResin AdministrationWorking DirectoryInstalling Web ApplicationsLoggingSetting the ClasspathAdding Authentication UsersResin Special FeaturesJavaScript Java Server PagesXSL

Content preview from Special Edition Using Java™ Server Pages and Servlets

Chapter 31. Security

In this chapter

In Chapter 5, "Saving Data Between Requests," you saw how to create a login form and keep track of a user with the session object. The servlet container gives you an alternative to creating your own login form. By adding additional information to the deployment descriptor for your Web application, you can force the user to log in to the application without writing specific code for login authentication.

Role-Based Security

The authentication mechanism in the servlet specification uses a technique called role-based security. The idea is that rather than restricting ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 0789724413Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Special Edition Using Java™ Server Pages and Servlets

by Mark Wutka

Chapter 31. Security

Role-Based Security

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.