Re: Anonymous posting

2003-07-08 Thread srevilak
> From: harsh <[EMAIL PROTECTED]>

> Can i restrict domains of the forms posting to my form handling
> scripts.i.e only all the html or jsps inside http://www.mysite.com/
> can post to my jsps,and noone writes his own HTML forms and post to
> my site ..

In other words, you'd like to prevent requests from
someotherdomain.net from being allowed to access .jsp forms on your
site.

If you're using tomcat in conjunction with apache, you should be able
to use apache's access directives.  Something like


  Order deny,allow
  Deny from otherdomain.net


Just be sure that your httpd.conf loads mod_access before mod_jk (eg -
the AddModule for mod_jk appears before the AddModule for mod_access).

-- 
[EMAIL PROTECTED]

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



RE: Anonymous posting

2003-07-08 Thread Abid Ali Teepo

You will have to write the filter yourself, it's very much like a servlet.

I guess you could set some sessionattribute with your form, and
check for the same when the form is posted. If it's not there the
sender has probably used his own form ...

here are two introductory tutorials: 
http://www.javaworld.com/javaworld/jw-06-2001/jw-0622-filters.html

http://javaboutique.internet.com/tutorials/Servlet_Filters/index.html

Regards
Abid

-Original Message-
From: harsh [mailto:[EMAIL PROTECTED]
Sent: 8. juli 2003 12:40
To: Tomcat Users List
Subject: Re: Anonymous posting



> Sounds like you are after some sort of filter.
> 
donno i m new to tomcat configurationsIf that's possible
may i get some more details or some urls to study from
or some google keywords.

many thanks..

harsh


> harsh wrote:
> 
> >Can i restrict domains of the forms posting to 
> >my form handling scripts.i.e only all the html
> >or jsps inside http://www.mysite.com/ can post
> >to my jsps,and noone writes his own HTML forms
> >and post to my site ..
> >
> >i hope i m clear in what i m asking.
> >
> >regards
> >
> >harsh
> >
> >--
> >harsh
> >http://www.cse.iitb.ac.in/~harsh
> >--
> >
> >
> >-
> >To unsubscribe, e-mail: [EMAIL PROTECTED]
> >For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> >
> >  
> >
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Anonymous posting

2003-07-08 Thread harsh

> Sounds like you are after some sort of filter.
> 
donno i m new to tomcat configurationsIf that's possible
may i get some more details or some urls to study from
or some google keywords.

many thanks..

harsh


> harsh wrote:
> 
> >Can i restrict domains of the forms posting to 
> >my form handling scripts.i.e only all the html
> >or jsps inside http://www.mysite.com/ can post
> >to my jsps,and noone writes his own HTML forms
> >and post to my site ..
> >
> >i hope i m clear in what i m asking.
> >
> >regards
> >
> >harsh
> >
> >--
> >harsh
> >http://www.cse.iitb.ac.in/~harsh
> >--
> >
> >
> >-
> >To unsubscribe, e-mail: [EMAIL PROTECTED]
> >For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> >
> >  
> >
> 
> 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: Anonymous posting

2003-07-08 Thread Kwok Peng Tuck
Sounds like you are after some sort of filter.

harsh wrote:

Can i restrict domains of the forms posting to 
my form handling scripts.i.e only all the html
or jsps inside http://www.mysite.com/ can post
to my jsps,and noone writes his own HTML forms
and post to my site ..

i hope i m clear in what i m asking.

regards

harsh

--
harsh
http://www.cse.iitb.ac.in/~harsh
--
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


 



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]