I'd do it with a RequestFilter.

Uli

Am 14.10.2009 14:08 schrieb Mats Henricson:
Hi!

I'm working on a Tapestry 5.1 site that frequently gets hammered
by DDOS attacks. We recently talked about it in our team, and one
idea I'm currently investigating is to have a flag in our system
that I can turn on dynamically that would require all users to be
logged in.

So, real users wouldn't see anything, but simple attacks by
anonymous users would be sent to a "Sorry, we're requiring all
users to be logged in, since we are under a DDOS attack" page.

The way I was thinking of doing this would be to have a SetupRender
function in the base class all pages inherits from, and in it do
a check if the user is logged in.

But I can only return true or false from that page, not redirect
to another page, from my limited knowledge.

So, what would you guys do? Is there a simpler solution? A filter?

Mats

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tapestry.apache.org
For additional commands, e-mail: users-h...@tapestry.apache.org

Reply via email to