You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by "Luo, Zhongjun" <zh...@Vanderbilt.Edu> on 2003/08/15 17:41:10 UTC

limits the access of upper directory

Dear Sir/Madam:
 
I have used Tomcat to make a web site, please see:
http://bac-portal.mc.vanderbilt.edu/BAC/BACWEB.jsp
Would you please tell me how I can limit the access to whole name of this site only?
For example. now people can access (by deleting /BACWEB.jsp):
http://bac-portal.mc.vanderbilt.edu/BAC  where I have other sites developing.
 
Thank you a lot for give me the convenience to built this web site. Tomcat is great.
 
Zhongjun Luo, Ph.D. 
******************************** 
Research Assistant Professor
Genetic Medicine Department
Vanderbilt University Medical Center
Nashville, TN 37232
 
********************************
 

Re: limits the access of upper directory

Posted by Mark Roth <ma...@sun.com>.
Hi Luo,

You can create an index.jsp or index.html page in that directory and 
people will no longer be able to list the directory contents.

- MArk


Luo, Zhongjun wrote:
> Dear Sir/Madam:
>  
> I have used Tomcat to make a web site, please see:
> http://bac-portal.mc.vanderbilt.edu/BAC/BACWEB.jsp
> Would you please tell me how I can limit the access to whole name of this site only?
> For example. now people can access (by deleting /BACWEB.jsp):
> http://bac-portal.mc.vanderbilt.edu/BAC  where I have other sites developing.
>  
> Thank you a lot for give me the convenience to built this web site. Tomcat is great.
>  
> Zhongjun Luo, Ph.D. 
> ******************************** 
> Research Assistant Professor
> Genetic Medicine Department
> Vanderbilt University Medical Center
> Nashville, TN 37232
>  
> ********************************
>  



---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org


Re: limits the access of upper directory

Posted by Mark Roth <ma...@sun.com>.
Hi Luo,

You can create an index.jsp or index.html page in that directory and 
people will no longer be able to list the directory contents.

- MArk


Luo, Zhongjun wrote:
> Dear Sir/Madam:
>  
> I have used Tomcat to make a web site, please see:
> http://bac-portal.mc.vanderbilt.edu/BAC/BACWEB.jsp
> Would you please tell me how I can limit the access to whole name of this site only?
> For example. now people can access (by deleting /BACWEB.jsp):
> http://bac-portal.mc.vanderbilt.edu/BAC  where I have other sites developing.
>  
> Thank you a lot for give me the convenience to built this web site. Tomcat is great.
>  
> Zhongjun Luo, Ph.D. 
> ******************************** 
> Research Assistant Professor
> Genetic Medicine Department
> Vanderbilt University Medical Center
> Nashville, TN 37232
>  
> ********************************
>  



Re: limits the access of upper directory

Posted by reuben <re...@irontedium.com>.
I have discovered that the best way to keep people from looking into higher 
directories is to create an index page for those directories. In fact, on 
websites I develope, every directory has an index page.  The directories into 
which  I do not wish people to look  I create one similar to this:
-------------------------------------------------------------------------------------------------
 
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN
		"http://www.w3.org/TR/html4/loose.dtd"">
<html>

<head>

  <title>Index</title>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">

</head>

<body>

 Have you lost your way? 
This link <a href = "http://bac-portal.mc.vanderbilt.edu/">"bac-portal"</a> 
will help quide you.

</body>

</html>

----------------------------------------------------------------------------------------------------
You can change the anchor "http://bac-portal.mc.vanderbilt.edu"  to a URL you 
want.  Also "bac-portal" ,  can be changed to more accurately define where 
the visistor is going when they click on the link.

You could cut and paste the html between the above lines and it should work 
fine.

Reuben

http://www.irontediumhost.com/


On Friday 15 August 2003 11:41, Luo, Zhongjun wrote:
> Dear Sir/Madam:
>  
> I have used Tomcat to make a web site, please see:
> http://bac-portal.mc.vanderbilt.edu/BAC/BACWEB.jsp
> Would you please tell me how I can limit the access to whole name of this
> site only?
 For example. now people can access (by deleting /BACWEB.jsp):
> http://bac-portal.mc.vanderbilt.edu/BAC  where I have other sites
> developing.
 
> Thank you a lot for give me the convenience to built this web site. Tomcat
> is great.
 
> Zhongjun Luo, Ph.D. 
> ******************************** 
> Research Assistant Professor
> Genetic Medicine Department
> Vanderbilt University Medical Center
> Nashville, TN 37232
>  
> ********************************
>  


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org


Re: limits the access of upper directory

Posted by reuben <re...@irontedium.com>.
I have discovered that the best way to keep people from looking into higher 
directories is to create an index page for those directories. In fact, on 
websites I develope, every directory has an index page.  The directories into 
which  I do not wish people to look  I create one similar to this:
-------------------------------------------------------------------------------------------------
 
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN
		"http://www.w3.org/TR/html4/loose.dtd"">
<html>

<head>

  <title>Index</title>
  <meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">

</head>

<body>

 Have you lost your way? 
This link <a href = "http://bac-portal.mc.vanderbilt.edu/">"bac-portal"</a> 
will help quide you.

</body>

</html>

----------------------------------------------------------------------------------------------------
You can change the anchor "http://bac-portal.mc.vanderbilt.edu"  to a URL you 
want.  Also "bac-portal" ,  can be changed to more accurately define where 
the visistor is going when they click on the link.

You could cut and paste the html between the above lines and it should work 
fine.

Reuben

http://www.irontediumhost.com/


On Friday 15 August 2003 11:41, Luo, Zhongjun wrote:
> Dear Sir/Madam:
>  
> I have used Tomcat to make a web site, please see:
> http://bac-portal.mc.vanderbilt.edu/BAC/BACWEB.jsp
> Would you please tell me how I can limit the access to whole name of this
> site only?
 For example. now people can access (by deleting /BACWEB.jsp):
> http://bac-portal.mc.vanderbilt.edu/BAC  where I have other sites
> developing.
 
> Thank you a lot for give me the convenience to built this web site. Tomcat
> is great.
 
> Zhongjun Luo, Ph.D. 
> ******************************** 
> Research Assistant Professor
> Genetic Medicine Department
> Vanderbilt University Medical Center
> Nashville, TN 37232
>  
> ********************************
>