If it's just product images (which is what this sounded like to me), so what? If this is something specific to a particular customer, then yes, it could allow someone to download stuff you don't want them to. In that case, a servlet could be written that validates someone has access to a particular file and then writes the file out.
Matt
-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Aaron Bartell
Sent: Friday, January 25, 2008 12:22 AM
To: 'Web Enabling the AS400 / iSeries'
Subject: Re: [WEB400] EGL and IFS
That's a potential security risk if you ask me. For instance, if you have
any sort of naming convention to the files then a "hacker minded" person
could easily write a script to cycle through your image naming scheme and
retrieve all the images (read private info) to use for their own purposes.
I always stream stuff like that down to the client vs. giving them a static
URL link.
Unfortunately I only know how to do this in JSF and not EGL(yet).
Aaron Bartell
http://mowyourlawn.com
-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On
Behalf Of Haas, Matt (CL Tech Sv)
Sent: Thursday, January 24, 2008 10:57 AM
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] EGL and IFS
Nick,
Don't overcomplicate this. Put the images in a directory that's accessible
by the HTTP server and then just write out an image tag with the correct
file name in it.
Matt
-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On
Behalf Of Nick Arndt
Sent: Thursday, January 24, 2008 11:47 AM
To: web400@xxxxxxxxxxxx; Websphere Development Studio Client for iSeries
Subject: [WEB400] EGL and IFS
Hi everyone,
Does anyone know how to access an IFS object (.jpg) and pull it into an EGL
application?
I am creating a method for our customers to enter a driver number on a web
page then be taken to another page showing the driver picture along with
other information about the driver.
The jpg name is DRIVER#.jpg. Can this only be done with java? I herd that
it can also be done with the SQL DATALINK data type in a DB2 file but I ran
into problems with using the DATALINK type with EGL.
Any help would be appreciated
Thanks.
Nick
--
midrange.com
