Hmmm.. I would use a 'state machine' because: 

1. You just can't disable the URL bar in your browser without rendering it
useless (..).
2. Use javascript and your users will disable it.
3. Hack your browser to disallow entering URLs in the URL bar and then
hack everyone else's who need to use your application.

Definitively I would use a State Machine where I could control what URLs
(and their parameters) are supposed to be allowed anytime. I could control
their flow from inside the servlet without having to buy expensive
hardware or hacking everyone's pcs just to keep the users behaving
properly.

Atte.
Domingo A. Rodriguez S.

 --- Andy Schmidgall <[EMAIL PROTECTED]> escribi�: > That
would require a keyboard, would it not? :)
> 
> Could you not have a flag var in the session or something that is only
> set by a certain piece of code? If the user typed in the URL directly,
> the flag wouldn't be set, and you could filter requests based on that.
> 
> -Andy
> 
> -----Original Message-----
> From: Mark Lowe [mailto:[EMAIL PROTECTED] 
> Sent: Monday, December 29, 2003 1:41 PM
> To: Struts Users Mailing List
> Subject: Re: Is there a way to prevent urls from being entered from the
> browser?
> 
> 
> Is like the one in virgin stores where you can ctrl+esc and get the 
> menu/desktop up?
> 
> 
> On 29 Dec 2003, at 19:30, Chappell, Simon P wrote:
> 
> > Oh that's far too clever!
> >
> > We just used thin-client terminals locked in kiosk mode with I.E.
> > running in full screen, using touch screens and taking away the 
> > keyboard and mouse. Ha ha ... now try typing in a URL!!! :-)
> >
> > Simon
> >
> >> -----Original Message-----
> >> From: Brice Ruth [mailto:[EMAIL PROTECTED]
> >> Sent: Monday, December 29, 2003 1:09 PM
> >> To: Struts Users Mailing List
> >> Subject: Re: Is there a way to prevent urls from being entered from
> >> the
> >> browser?
> >>
> >>
> >> In theory, you could write a filter for the forwards that would check
> 
> >> to see if a REFERER is set for the request. If not, the request
> >> was likely
> >> entered directly in a browser.
> >>
> >> Jim Anderson wrote:
> >>
> >>> To clarify: I would like to be able to define ActionForwards for use
> 
> >>> within the app but which cannot be entered directly into the browser
> 
> >>> by the user. Is this possible?
> >>>
> >>> Thanks.
> >>>
> >>> jim
> >>>
> >>>
> >>> --------------------------------------------------------------------
> >>> -
> >>> To unsubscribe, e-mail: [EMAIL PROTECTED]
> >>> For additional commands, e-mail: [EMAIL PROTECTED]
> >>>
> >>
> >> --
> >> Brice D. Ruth
> >> Sr. IT Analyst
> >> Fiskars Brands, Inc.
> >>
> >>
> >> ---------------------------------------------------------------------
> >> To unsubscribe, e-mail: [EMAIL PROTECTED]
> >> For additional commands, e-mail: [EMAIL PROTECTED]
> >>
> >>
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>  

_________________________________________________________
Do You Yahoo!?
Informaci�n de Estados Unidos y Am�rica Latina, en Yahoo! Noticias.
Vis�tanos en http://noticias.espanol.yahoo.com

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to