cookie and login

[Jigar Naik]

I have created a small application where first apears a login page and than user should be able to access other pages.

how do i stop user from direct accessing other pages.

like this is the url of login page

http://localhost:8080/Coupon/jsp/c_login.jsp

and user should not be able to access the c_voucher link before going through login page.

http://localhost:8080/Coupon/jsp/c_voucher.jsp

how do i achieve that

[Rao Raghu]

By maintaining sessions.

You can retrieve his username and assign it to a hidden-type and validate the same before each page displays the contents. Better to use servlets.

[Jigar Naik]

can you please explain in more detail.

[Rao Raghu]

When the user logs-in retrieve his username like:

 String uname=request.getParameter(username)  

now set this as a hidden type:

  <input type="hidden" name="uname1" value="uname">  

In the next jsp validate it like:

  String username=request.getParameter(uname1)
          if (username==uname1)
             { //rest of the flow of the jsp only if this if is valid
               }
 
          else
            //you are not logged-in, please log-in now.
 
           
 
 

this is a rough presentation, i hope you might have got the concept now.

[Jigar Naik]

ye gotcha... Thanks a lot

[Ben Souther]

If you haven't already, read up on filters.

They're perfect for this because they can be applied to both static and dynamic content vi configurations settings in your web.xml file.