SSL and non-secure items

Hi experts, I have a web application configured to be secured by ssl, the problem is at some pages the browser displays a dialog box as a warning that says, this page contains both secure and non-secure items do you want to display non-secure items? and the user has two options yes and no. actua

RE: how to setting up SSL for a specific page

Caldarale, Charles R wrote: > > Read section 12 of the servlet spec. Use a in conjunction > with the that covers only the login page. > > - Chuck Thank you Charles, I've read the servlet spec, but my problem is I specified /login.jsp as url-pattern in deployment descriptor and before the

how to setting up SSL for a specific page

hello all when I set up the SSL in tomcat all my pages will be secure (https) but as I've seen in many web sites only login page is secure. how can I secure only pages that contains confidential information and not all the pages? I am using Apache Tomcat 5.5 thank you in advance -- View this m

RE: a question about user athentication

Thank you all for replying I wanted to prevent the users who were deleted already to logging in. I resolve my problem by extending a class from JDBCRealm and override the getConnection() method (I'm not sure about the method name) and put my "select" statement with my favorite where clause "whe

Re: a question about user athentication

Pid-2 wrote: > > Have a look at JDBCRealm (or DatasourceRealm) in the Tomcat Source. > You could alter the SQL statement for password or username so it fails > when '... status = 0'. > > Upload a jar with your new realm in it to server/lib and configure the > realm as a replacement for the o

a question about user athentication

Hi experts I am using Tomcat 5.5 and struts framework and security filter in order to authenticate users like the others I am using j_security_check action but my problem is that I have a field in my user table namely status which represent whether the user is available or deleted by administrat

RE: problem when changing code and deploying

> Why did you think they would? Only .jsp files can be updated > on the fly without restarting the application. oh no, I didnt mean "on the fly"? I restart the Tomcat but it still remain intact. this happens for static methods and static instance variables. -- View this message in context: h

problem when changing code and deploying

Hi all I have a big problem, when I change some classes specially classes with static methods and also Context Listener classes of my appllication and the deploy new changes in already installed application, neither of my changes will apply!!! even if I put some new log they wont appear in the T