Hi

Struts uses a structure like:

/yourapplication
    JSP pages...
    other directories
    /WEB-INF
        /classes
        /lib

One of the reasons, if I understand correctly, is that the server will never
answer to requests for files under the WEB-INF directory.
For instance, if you put into the web.xml file, as initialization argument,
the password used to connect to your database, nobody can try to obtain that
file with a request like http://yourserver/yourapplication/WEB-INF/web.xml
This architecture doesn't depend on the OS: WEB-INF is private to the
application; files and directories upper are public.

With your structure, you have to manage the permissions for the files and
directories (OS specific), and someone can obtain your sources if he knows
that they are stored in the /Src directory (and you forgot to apply correct
permissions or your OS doesn't support it).

But all this must be justified in the specifications for servlets
containers...

Pierre Métras

----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, November 08, 2000 3:15 PM
Subject: The Struts question


> Hi There:
>  I get a question regarding for the struts structure.
>
>  We have existing web based software have our own structures.
>
>             Root
>
>                        Bin
>
>                         Classes (Class files)
>
>                         Docs
>
>                         Src
>
>                         Web (JSP pages)
>
>                         Runtime
>
>                         Conf (Configuration files)
>
>                         Lib (Library)
>
>                         Logs
>
>  But the struts will ask some structures like this.
>
>              Root
>
>                         WEB-INF
>
>                                     Classes
>
>                                     Jsp
>
>                                     Lib
>
>                                     Session
>
>                                     (JSP pages)
>
>                         META-INF
>
> The question comes down is, we want to use struts in our system, but we
don'
> t want to change our system structures. I recognize the struts pickup the
> web.xml like default configuration files from WEB-INF directory, and
> hardcode action.xml in action.java. If anybody has similar condition like
> this, please help.
>
> I really looking forward to use this MVC structure in our software.
>
> Thanks
>
>

Reply via email to