Store the images in your database & then your jsp can retrieve & show them.

-----Original Message-----
From: Shapira, Yoav [mailto:[EMAIL PROTECTED]
Sent: Monday, June 09, 2003 9:44 AM
To: Tomcat Users List
Subject: RE: Urgent : Can we restrict access to a directory in tomcat



Howdy,
That one's tricky (and strange).  When you have a servlet or JSP, the
output the user sees is HTML.  In HTML, you have <img> tags.  The
browser will request those images normally in HTTP requests.  So from
the server's perspective, the request is the same whether the user types
in the image URL or you embed it in one of your pages.

Would something like using a mangled images directory name ($KF_%# or
something) be sufficient?  A name that's hard for users to guess and use
directly?

Yoav Shapira
Millennium ChemInformatics


>-----Original Message-----
>From: Syed Nayyer Kamran [mailto:[EMAIL PROTECTED]
>Sent: Monday, June 09, 2003 9:33 PM
>To: [EMAIL PROTECTED]
>Subject: Urgent : Can we restrict access to a directory in tomcat
>
>hi there,
>
>I want to restrict the user to access the images directly through the
web.
>They should be able to access these images through web pages developed
as
>jsp/servlet but should not be able to access these images displayed on
page
>by copying the image url to the address bar. Is tomcat directly support
>this functionality. or any other solution.
>
>Thanks in advance for any solution of the problem.
>
>
>Nayyer Kamran




This e-mail, including any attachments, is a confidential business
communication, and may contain information that is confidential, proprietary
and/or privileged.  This e-mail is intended only for the individual(s) to
whom it is addressed, and may not be saved, copied, printed, disclosed or
used by anyone else.  If you are not the(an) intended recipient, please
immediately delete this e-mail from your computer system and notify the
sender.  Thank you.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to