The moose likes Struts and the fly likes Securing jsp page in struts 2 Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Frameworks » Struts
Bookmark "Securing jsp page in struts 2" Watch "Securing jsp page in struts 2" New topic

Securing jsp page in struts 2

Gopi Chand

Joined: Feb 04, 2007
Posts: 24
Hi All,

I am trying to learn struts 2 and i tried the following. there is a user registration page in which user enters all the result.
After that user clicks register button, user will be shown register_success.jsp if the registration succeeds otherwise register_failure.jsp if some prblem with registration..

But the problem is user can give the url like http://localhost:8080/testapp/register_success.jsp or register_failure.jsp and directly try to see the results page withtout registration page. i don't want this to happen..

Without struts i would have placed this under WEB-INF folder and use request dispatcher to redirect the request to the required page, but with struts 2 i couldn't do it..

how to go about this?

David Newton

Joined: Sep 29, 2008
Posts: 12617

There's no issue putting JSP files under WEB-INF; that's how most people do it.

I suspect you're doing something wrong.
I agree. Here's the link:
subject: Securing jsp page in struts 2
It's not a secret anymore!