hi i have implemented a set of servlet pages....
i have implemented a loginpage.html which redirects to the servlet which processes the login
via checking the usr name and password against a database...
all works fine...
however on further reading i have discovered predefined security measures
i have come up with the following for the web.xml
[code]
<security-constraint>
<web-resource-collection>
<web-resource-name>Test</w
eb-resourc
e-name>
<url-pattern>/LoginForm.ht
ml</url-pa
ttern>
<http-method>GET</http-met
hod>
<http-method>POST</http-me
thod>
</web-resource-collection>
<auth-constraint>
<role-name>manager</role-n
ame></auth
-constrain
t>
<user-data-constraint>
<transport-guarantee>NONE<
/transport
-guarantee
></user-da
ta-constra
int></secu
rity-const
raint><log
in-config>
<auth-method>FORM</auth-me
thod>
<form-login-config>
<form-login-page>/LoginFor
m.html</fo
rm-login-p
age>
<form-error-page>/LoginErr
.html</for
m-error-pa
ge>
</form-login-config></logi
n-config>
<servlet>
<description>
</description>
<display-name>loginCheck</
display-na
me>
<servlet-name>loginCheck</
servlet-na
me>
<servlet-class>loginCheck<
/servlet-c
lass>
</servlet>
<servlet>
<description>
</description>
<display-name>login</displ
ay-name>
<servlet-name>login</servl
et-name>
<servlet-class>login</serv
let-class>
</servlet>
<servlet-mapping>
<servlet-name>ApageMaker</
servlet-na
me>
<url-pattern>/ApageMaker</
url-patter
n>
</servlet-mapping>
<servlet-mapping>
<servlet-name>login</servl
et-name>
<url-pattern>/login</url-p
attern>
</servlet-mapping><welcome
-file-list
>
<welcome-file>index.html</
welcome-fi
le>
<welcome-file>index.htm</w
elcome-fil
e>
<welcome-file>index.jsp</w
elcome-fil
e>
<welcome-file>default.html
</welcome-
file>
<welcome-file>default.htm<
/welcome-f
ile>
<welcome-file>default.jsp<
/welcome-f
ile>
<welcome-file>LoginForm.ht
ml</welcom
e-file>
</welcome-file-list>
</web-app>
[/code]
now the part i dont' get is that my login,html now has the following
[code]
<form action="j_security_check" method = "get">
<h1 align="center"></br> Coffee RTIS Login </h1>
<center>
<table border ="0">
<tr>
<td ><h3>user name</br></h3></td>
<td>
<input type="text" name = "j_username">
</td>
</tr>
<tr>
<td><h3>password</h3></td>
<td>
<input type="password" name = "j_password">
</td>
</tr>
</table>
<input type ="submit" value = "Login!">
[/code]
in the old version the action redirceted to s servlet ie
[code]
<form action="
www.servlet.com\servlet\login" ...
[/code]
which redirects to the login processing servlet....
in the new version, where or how do you store a list of logins ....
or how do you redirect to a login processing servlet...
thanks