Re: regarding web security..

2000-06-06 Thread Sandra Cann
Taking what was discussed and developing conceptually further and you begin to create a web content management system. There is a fully servlet based solution available at www.javacorporate.com with over 4 years development effort into it. You can see an live site example at http://www.javacorpo

Re: regarding web security..

2000-06-05 Thread Chin Cedric Sung Kit
Hi, You have any sample code for checking the session object, should anyone tries to access any servlet? Thank you. Ravi K U wrote: > there are several ways to do this. > 1) Craete a session object after succesful login and check for the validity of the > session object in every servlet. So i

Re: regarding web security..

2000-06-05 Thread Ravi K U
there are several ways to do this. 1) Craete a session object after succesful login and check for the validity of the session object in every servlet. So if anybody tries to access any servlet other than login servlet ,access will be denied as he won't be having a session object 2) Few Servers l

Re: regarding web security..

2000-06-05 Thread Rajneesh Garg
Hi Suresh, You can protect your resources of the application by a simple technique. Just have a login page, where you ask for the login info from the user. In the background, if the information provided is correct, start a new session variable. On the subsequent pages, which are to be protected,

Re: regarding web security..

2000-06-05 Thread Nic Ferrier
>I'm very new to server side java, so if this isn't possible please >let me know. Why can't a servlet be setup to handle all requests. >Then if the user is registered just return whatever page they >requested, otherwise return the login screen? I know very little >about jigsaw, but this would be a

Re: regarding web security..

2000-06-05 Thread Doug Weimer
I'm very new to server side java, so if this isn't possible please let me know. Why can't a servlet be setup to handle all requests. Then if the user is registered just return whatever page they requested, otherwise return the login screen? I know very little about jigsaw, but this would be analog

Re: regarding web security..

2000-06-05 Thread David M. Karr
> "Rajesh" == Rajesh Nair <[EMAIL PROTECTED]> writes: Rajesh> Isn't it possible to put the pages under a directory with a restricted Rajesh> Access Control?? Or Rajesh> am I missing something. My impression was that by setting the directory Rajesh> permissions Rajesh> using your web

Re: regarding web security..

2000-06-05 Thread sumita
,"user not logged in"); response.sendRedirect(loginURL); } - Original Message - From: gsuresh <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, June 05, 2000 4:21 PM Subject: regarding web security.. > Hi all, > Currently i am working in providing sec

Re: regarding web security..

2000-06-05 Thread Rajesh Nair
TTP request and >authenticating/authorizing. You'd have to go elsewhere for support on this >approach. > >Best, >Steven > >> -Original Message- >> From: >> Sent: Monday, June 05, 2000 6:21 PM >> Subject: regarding web security.. >> &g

Re: regarding web security..

2000-06-05 Thread David M. Karr
>>>>> "Steven" == Steven D Meacham <[EMAIL PROTECTED]> writes: >> -Original Message- >> From: David M. Karr [mailto:[EMAIL PROTECTED]] >> Sent: Monday, June 05, 2000 4:16 PM >> To: [EMAIL PROTECTED] >> C

Re: regarding web security..

2000-06-05 Thread David M. Karr
> "Steven" == Steven D Meacham <[EMAIL PROTECTED]> writes: Steven> There are a couple of solutions to this. The first one is for you to use Steven> the session object, setting a value in your login servlet that all the rest Steven> of the pages look for before displaying their content.

Re: regarding web security..

2000-06-05 Thread Steven D. Meacham
vid M. Karr [mailto:[EMAIL PROTECTED]] > Sent: Monday, June 05, 2000 4:16 PM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: Re: regarding web security.. > > > >>>>> "Steven" == Steven D Meacham <[EMAIL PROTECTED]> writes: > Steven>

Re: regarding web security..

2000-06-05 Thread
Hi U can use the following stategy. In the logon servlet, get some user information say user_name and password. Store these in session variables. Before loading any page, get the user name from the session object. If user name is null then it means that the user has not come from the login page.

Re: regarding web security..

2000-06-05 Thread Steven D. Meacham
sage- > From: > Sent: Monday, June 05, 2000 6:21 PM > Subject: regarding web security.. > > > Received: from pmismtp04.wcomnet.com ([166.38.62.39]) by > omta3.mcit.com > (InterMail v03.02.07.05 118-131) with ESMTP > id <[EMAIL PROTECTED]>;

regarding web security..

2000-06-05 Thread gsuresh
Hi all, Currently i am working in providing security for Intranet of the company. I am using Jigsaw for developement. Intranet has 100's of pages, I don't want anyone to view any of the pages withou logging into the servlet. Now if the user knows the url of any of the page directly he is ab