Preventing access to Links on secure site

[buena]

I am working on a secure site done in JSP. The site requires users to login to access the content. I have a page that links to several pdf files like the ones below.

https://members.mysite.com/pubs/Pub1/2006/test.pdf

https://members.mysite.com/pubs/Pub2/2006/test.pdf

https://members.mysite.com/pubs/Pub3/2006/test.pdf

Is there a way to prevent access to these links - say if you just and cut and pasted them into a browser?

 

[sedj]

A clean way of doing it is to implement a Filter - then you can check whether the session id is logged in or not before serving the file.

Here is an example of writing a filter :

http://www.javaworld.com/javaworld/jw-06-2001/jw-0622-filters.html

--------------------------------------------------
Free Java/J2EE Database Connection Pooling Software

http://www.primrose.org.uk

 

[buena]

I am not that familiar with JSP - I was just kind of thrown into this site. Was looking for a simpler solution. Someone mention using an .htaccess file. Would that work?

 

[sedj]

If you are running Apache, then I suppose the .htaccess file would work - but its not a very nice solution, and you would have to make sure that Apache did not forward any requests for pdfs to Tomcat.

--------------------------------------------------
Free Java/J2EE Database Connection Pooling Software

http://www.primrose.org.uk