Re: Filter on url example - Filter out hack attempts

Yoav, So from what I know so far my /usr/local/tomcat/webapps/myapplication/WEB-INF/web.xml should look like the following: web-app filter filter-nameUrlFilter/filter-name filter-classUrlFilter/filter-class *Don't know how this should layout.* /filter filter-mapping

Re: Filter on url example - Filter out hack attempts

First of this is not a Tomcat question. This type of information is always available at http://java.sun.com or http://forum.java.sun.com/ To answer your questionYes. in-fact you can place the class where ever you want as long as it is in your classpath. Of course you will also have to

RE: Filter on url example - Filter out hack attempts

Hi, First of this is not a Tomcat question. This type of information is always available at http://java.sun.com or http://forum.java.sun.com/ Right, but we do encourage general servlet and JSP related discussions here too. So from what I know so far my

Re: Filter on url example - Filter out hack attempts

- Original Message - From: Nathan Maves [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, May 11, 2004 8:56 AM Subject: Re: Filter on url example - Filter out hack attempts First of this is not a Tomcat question. This type of information is always available at http

Re: Filter on url example - Filter out hack attempts

. Please let me know if there is a list more appropriate for new users. Thanks, Larry Nobs - Original Message - From: Nathan Maves [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, May 11, 2004 8:56 AM Subject: Re: Filter on url example - Filter out hack

Re: Filter on url example - Filter out hack attempts

Yoav, Make sure you understand what a request URI is for the HTTP protocol. It will have neither the GET (method name) nor the protocol spec (HTTP/1.1 above). Read and understand the JavaDocs for the HttpServletRequest interface completely. I have been looking at the Access Logs daily.

RE: Filter on url example - Filter out hack attempts

Hi, I have been looking at the Access Logs daily. Anytime a legitimate user accesses my site everything is preceded with a GET or POST and a jsp or gif that I can recognize. Initially a session starts off with a plain GET / HTTP/1.1 or 1.0 so I should allow these, but all other legitimate

Re: Filter on url example - Filter out hack attempts

:30 AM Subject: Re: Filter on url example - Filter out hack attempts Hi Larry, as someone who has only been using tomcat (apart from the deploy tool) since August and who has had to greatly improve my Java skills since the same time... I suggest the best way to learn is to get your hands dirty

RE: Filter on url example - Filter out hack attempts

PM To: Tomcat Users List Subject: Re: Filter on url example - Filter out hack attempts I am a newbie to Java and Tomcat, and I did spend two days with two Tomcat books I bought and Google trying to find some instructions I could understand before posting a question to this list

Re: Filter on url example - Filter out hack attempts

Yoav, Ok, thank you. I appreciate all your help. Larry Nobs - Original Message - From: Shapira, Yoav [EMAIL PROTECTED] To: Tomcat Users List [EMAIL PROTECTED] Sent: Tuesday, May 11, 2004 9:37 AM Subject: RE: Filter on url example - Filter out hack attempts Hi, I have been

Re: Filter on url example - Filter out hack attempts

as there you may ask questions about java, jsp, servlets and other things that are not drectly related with tomcat. -Original Message- From: lrnobs [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 11, 2004 4:17 PM To: Tomcat Users List Subject: Re: Filter on url example - Filter out hack attempts

RE: Filter on url example - Filter out hack attempts

Hi, This is a trivial filter: public class URLFilter implements Filter { ... public void doFilter(...) { if(req instance of HttpServletRequest) { HttpServletRequest hreq = (HttpServletRequest) req; String uri = hreq.getRequestURI(); if(allow(uri)){