I'm wondering about the login authentication, in both examples.
You do not show how to prevent unauthorized access to pages requiring login. I could in fact type in the url and bypass the login part in your examples.
I would appreciate a solution to that part. I don't want to check the session variable in every single action class. Or is there any other way?
View All Comments
| View Tutorial