"The trick is to have the servlet actually generate the HTML page"
That's a monumentally inefficient way of serving up static HTML pages. What you
want to do is use ACL restrictions via the web listener, and protect the static
HTML directory from a user database perspective. Most, if not all, listeners have
some sort of user database and access control list restriction method, and
several of the more robust ones have LDAP-based security.
SERVE 'EM - Dan Coggeshall wrote:
> Here is another possibility. Create a static HTML page as the login screen.
> When the user submits the login screen, do any verification and routing with
> the servlet. The trick is to have the servlet actually generate the HTML
> page. This way the bookmarking is impossible because there is no page to
> directly go to.
>
> DanC
>
> Jeetandra Mahtani wrote:
>
> > When the user logs in, create a session for the user
> > and say put in a value of 1 in some variable. If the
> > user reopens the browser and tries to go to the
> > bookmark, check if the session exists, if not
> > redirect the user to a relogon page.
> > Hope this helps.
> > -- J
> >
> > ---Alex Khordos <[EMAIL PROTECTED]> wrote:
> > >
> > > Hello everyone
> > >
> > > Maybe someone will be able to help me. I have a
> > servlet which asks for a
> > > user name and password and then redirects the
> > person to the proper page.
> > > My question is how do I solve the bookmarking
> > problem. If a person
> > > bookmarks test.htm, then he is never asked for a
> > password. It only asks
> > > for a password if a person goes through login.htm.
> > So how do I solve this
> > > problem. Any ideas?
> > >
> > >
> > ___________________________________________________________________________
> > > To unsubscribe, send email to [EMAIL PROTECTED]
> > and include in the body
> > > of the message "signoff SERVLET-INTEREST".
> > >
> > > Archives:
> > http://archives.java.sun.com/archives/servlet-interest.html
> > > Resources:
> > http://java.sun.com/products/servlet/external-resources.html
> > > LISTSERV Help:
> > http://www.lsoft.com/manuals/user/user.html
> > >
> >
> > _________________________________________________________
> > DO YOU YAHOO!?
> > Get your free @yahoo.com address at http://mail.yahoo.com
> >
> > ___________________________________________________________________________
> > To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
> > of the message "signoff SERVLET-INTEREST".
> >
> > Archives: http://archives.java.sun.com/archives/servlet-interest.html
> > Resources: http://java.sun.com/products/servlet/external-resources.html
> > LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
>
> ___________________________________________________________________________
> To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
> of the message "signoff SERVLET-INTEREST".
>
> Archives: http://archives.java.sun.com/archives/servlet-interest.html
> Resources: http://java.sun.com/products/servlet/external-resources.html
> LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html