Redirecting with jsp

hi.
i need to check for the session on one of the page which located in the frame and if there is no session to redirect user to some page, which must be on the _top level of frameset, similar thing is in regular hyperlink people use:
target="_top" is it possible to do it with jsp response.sendRedirect? (response.sendRedirect("/index.jsp"); )
thanks in advance

frame is a HTML idea, so HTTP(and HTTP ridirection) has no idea about it. One solution is to use javascript.
You can also use jsp in the page that defines teh framesets. It can check for the session, and if necessary loads the new page rather than using the framset.
You may also consider not using frames as much as possible. Rather, you can use jsp templates which uses table to structure different parts of the page and use include(staic/dyn as needed) to construct the page.

Similar Messages

Filter does not work with *.jsp URL pattern???

Hi All,
I am, by no means, very good at JSF or Java. I have looked at various forum posts on here for ways to implement a security filter to intercept requests to pages that first require one to be logged in, and if not, redirect them to the login page. Yes, I know a lot of you have heard this many times before, and I'm sorry to bring it up again.
BUT, from the guidance of other posts, I have got a filter that works fine when the url pattern is set to "/faces/*" or "/<anything>/*", however it won't work for "*.jsp" or "*.<anything>"
My filter is as follows:
package test.security;
import javax.faces.context.FacesContext;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.http.HttpSession;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
public class SecurityFilter implements Filter{
    /** Creates a new instance of SecurityFilter */
    private final static String FILTER_APPLIED = "_security_filter_applied";
    public SecurityFilter() {
    public void init(FilterConfig filterConfig) {
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws java.io.IOException, ServletException{
        HttpServletRequest req = (HttpServletRequest)request;
        HttpServletResponse res = (HttpServletResponse)response;
        HttpSession session = req.getSession();
        String requestedPage = req.getPathTranslated();
        String user=null;
        if(request.getAttribute(FILTER_APPLIED) == null) {
            //check if the page requested is the login page or register page
            if((!requestedPage.endsWith("Page1.jsp")) /* This is the login page */
                //set the FILTER_APPLIED attribute to true
                request.setAttribute(FILTER_APPLIED, Boolean.TRUE);
                //Check that the session bean is not null and get the session bean property username.
                if(((test.SessionBean1)session.getAttribute("SessionBean1"))!=null) {
                    user = ((test.SessionBean1)session.getAttribute("SessionBean1")).getUsername();
                if((user==null)||(user.equals(""))) {
                   // try {
                 //       FacesContext.getCurrentInstance().getExternalContext().redirect("Page1.jsp");
                  // } catch (ServletException ex) {
                  //      log("Error Description", ex);
                    res.sendRedirect("../Page1.jsp");
                    return;
        //deliver request to next filter
        chain.doFilter(request, response);
    public void destroy(){
}My web.xml declaration for the filter is:
<filter>
<description>Filter to check whether user is logged in.</description>
<filter-name>SecurityFilter</filter-name>
<filter-class>test.security</filter-class>
</filter>
<filter-mapping>
<filter-name>SecurityFilter</filter-name>
<servlet-name>Faces Servlet</servlet-name>
</filter-mapping>
Note: I have also tried this with <url-pattern>*.jsp</url-pattern> for the filter mapping in place of the Faces Servlet
My web.xml declaration for the url pattern is:
<servlet-mapping>
<servlet-name>Faces Servlet</servlet-name>
<url-pattern>*.jsp</url-pattern>
</servlet-mapping>Which JSC/NetbeansVWP automatically creates a "JSCreator_index.jsp" which has:
<?xml version="1.0" encoding="UTF-8"?>
<jsp:root version="1.2" xmlns:jsp="http://java.sun.com/JSP/Page">
<jsp:forward page="Page1.jsp"/>
</jsp:root>When run, this causes an Error 500 in the browser and a NullPointerException in SecurityFilter.java on the line:
if((!requestedPage.endsWith("Page1.jsp")) /* This is the login page */I think I'm missing something that would be obvious to anyone who knows better than me. Any ideas?

Dear Ginger and Boris,
thanks for the information - the problem seems to ocur in EP7 as well, Boris told me it is fixed in SP15. We are on SP14 now, so there is hope !
actually the information in the oss note stated above is also true, as we have an Oracle DB. On a similar demo system (only difference is SQL DB) the hyphen search works !
best regards, thank you !
Johannes

Authentification and Security in WebApp with JSP

Hello to all.
I'm developing a Web Applications with JSP's. To use the application a user must first Login.
To restrict access via URL typing I have included in every JSP page a user_logged_in_check page that verifies that the user is logged in, and if not redirects to the Login page.
The problem is that I must not forget to include that page in all my JSPs, and if the name of the page changes, it must be changed everywhere (though a search/replace might do the job just fine).
I used this approach because is not server dependent (such as the Tomcat Realms example I have seen on this forum).
Is there a better strategy?
Is there a way to enforce security check and not rely on my attention ;)?
Is there a pattern that solves the problem?
Any help would be greatly appreciated.

The first and biggest disadvantage is the repetitive coding - what happens if you realise that you need to change something - you will need to modify each of your JSP files. The chances of someone forgetting to add it in are a security risk.
Secondly, using the web server's mechanism, in most cases, would mean that you are using a proven and much more stable security mechanism then you can whip up.
For example, in Weblogic, you can configure a JAAS provider -- that means you are not limited to using uname/password. Your customer may have an enterprise wide single sign on policy that is supported by the JAAS provider and you can use it straight away - by just making a declarative change in the web*.xml files.
If you must, use the Filter class (its a Servlet class, I checked after I had posted) as described in the Intercepting Filter pattern - at least thats a standard approach and will cut down on you having to rely on adding a snip of code to each of your JSPs.

Access control with JSP

We have been working with a design company to design our website HTML. However, a portion of these HTML files need to be password protected, all of these files are stored in one particular folder called "/tools". The problem here is that these files should only be accessible if the user has logged into the site, and the design firm has given all of these files an .html extension, which means that they will not be able to run embedded JSP code.
From what I understand, if I want to create access control in these .html files I will need to rename them all to .jsp and then update all the links to these files to use the .jsp extension. But the design firm is telling me that their other clients never needed to do this and were able to use JSP to control access to the folder itself. They said that it is possible using JSP to prevent access to a particular folder on the webserver, and that anybody without a valid login or session who tries to access the files in the folder can be redirected to the login page. All of this can be achieved without having to insert JSP code into the password-protected HTML files and renaming them with a .jsp extension. Is this true? We want to avoid doing this because there are a lot of HTML files and links that will need to be changed if we rename the files to .jsp.
I'm still a relative beginner with JSP and have never heard of any functionality which allows JSP to stop a browser from accessing a particular folder on the server. Am I missing something here? Is there really a better way of doing this without using JSP code?
I have thought about putting the folder in an offline location and then using a controller JSP/servlet to check the user's login status and then read & display the HTML file from the offline folder. But I am not sure if this is really an efficient way of doing this.
Any suggestions?
Thanks,
Phil

You can set up a servlet filter in the web.xml. That lets you intercept every single request to certain areas of the app, and modify/redirect it if necessary.
Example: This sets up a filter that runs on all requests to the "/tools" directory:
In web.xml:
   <filter>
     <filter-name>testFilter</filter-name>
     <filter-class>com.TestFilter</filter-class>
   </filter>
   <filter-mapping>
     <filter-name>testFilter</filter-name>
     <url-pattern>/tools/*</url-pattern>
   </filter-mapping>And an example java class of a filter. This one just logs the request URI.
package com;
import java.io.IOException;
import javax.servlet.Filter;
import javax.servlet.FilterChain;
import javax.servlet.FilterConfig;
import javax.servlet.ServletException;
import javax.servlet.ServletRequest;
import javax.servlet.ServletResponse;
import javax.servlet.http.HttpServletRequest;
public class TestFilter implements Filter{
     public void init(FilterConfig arg0) throws ServletException {}
     public void destroy() {}
     public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain) throws IOException, ServletException {
          if (request instanceof HttpServletRequest){
               HttpServletRequest req = (HttpServletRequest)request;
               System.out.println("Servicing request for " + req.getRequestURI());
               chain.doFilter(request, response);
}

Redirect using jsp

how can i redirect users to another URL with jsp code

response.sendRedirect("your URL");
. . . or . . .
response.getRequestDispatcher("url relative to your servlet context").forward(request, response);
. . . or . . .
<jsp:forward page="url relative to your servlet context"/>

SQL query with JSP and WML-parameters

Hey,
Could you help me?
I'm trying to do the following. WML deck card 1 send parameter to same WML deck's card help. I try to read the parameter with JSP in card help by putting the parameter to SQL query, but it doesn't work. I can read the parameter with WML in card help. I can also print the value of the parameter with JSP if I generate WML with JSP.
/*parameter sending from card 1 to card help*/
out.println("<go href='#helpcard'>");
out.println("<setvar name='valittukurssi' value='$(valittukurssi)'/>");
/*parameter read with WML in card help */
<p>Valitse kurssi.
$valittukurssi</p>
/'parameter read with JSP by generating WML with JSP*/
out.println("<p>$valittukurssi</p>");
/* SQL query with JSP */
ResultSet uudettulokset = uusilause.executeQuery("select * from kurssi where lyhenne='$valittukurssi'");
Thanks,
Rampe

You're problem is easy to fix. You're confusing WML variables with JSP variables. See below:
>
/*parameter sending from card 1 to card help*/
out.println("<go href='#helpcard'>");
out.println("<setvar name='valittukurssi'
value='$(valittukurssi)'/>");
Above you set a var that will work on the phone, not in JSP.
/*parameter read with WML in card help */
<p>Valitse kurssi.
$valittukurssi</p>
Yes the above does display the parameter, because it is a client side WML var, but you cannot use this variable in the JSP code (that's why your SWL fails).
/'parameter read with JSP by generating WML with
JSP*/
out.println("<p>$valittukurssi</p>");Here's you're problem, the above line is EXACTLY the same as the one before it. When the container parses through this JSP code it translates the above line to:
<p>$valittukurssi</p> on the WML page and the CLIENT uses it's local variable to display it.
What you need and want is to have a variable that can be used in JSP code and output to your WML page. Here's how it's done:
out.println("<go href='#helpcard'>");
String some_name = "valittukurssi";
out.println("<setvar name='"+some_name+"'
value='$("+some_name+")'/>");
//note that you may have to escape the ( and ) with a \
//so we displayed the variable above into the WML page, now we can use it in the SQL query:
/* SQL query with JSP */
ResultSet uudettulokset =
uusilause.executeQuery("select * from kurssi where
lyhenne='"+some_name+"'");//the end of the command is: " ' " ) ;
Frank Krul
Got Node?

Create a new directory in server with JSP

Hi,
How can I create a directory in server with JSP.
File dir = new File("a");
dir.mkdir();
does not work. what do I do?
best regards,

Hi
Check the following things.
1. What is the path where you are creating the directory.
2. Do you permissions to create file in that directory.
3. do a delete on that filename if that exists just to be sure. isdeleted = filedir.delete(). Check the boolean flag isdeleted too.
Thanx and Regards
Aruneesh

Running other server-side applications with JSP

Hi,
I'd like to know, if is possible run with JSP (Servlet, or JavaBean) other application, which support COM. I used something like this in JavaScript:
application=new ActiveXObject("excel.application");
and I had all possibilities of its API. I'd like to use excel as data source for user-friendly data input.
Thanks for all suggestions

Hi,
I don't realy understand your question.
If your javascript work using activeX, this code is executed on the client side (like the excel application and the excel file).
You can, with a JSP, generate the html page that contain the script.
Where is the problem ?

Displaying an Image in an Excel Spreadsheet with JSP - URGENT

Hi Peoples
I can transfer the table I am using in to excel with JSP by doing:
<%@ page contentType ="application/vnd.ms-excel" %>
this works fine, though I have an image that sits within the table that I want to be displayed as well.
Can this be done?? If so how???
Thanks

Try to insert the image into sheet from it's URL not from it's local file path
Best regards

How to redirect a JSP page after the session is killed

Hello!
I am quite new to JSP. I have a question about how to redirect a jsp page after the session is killed. Could anyone help?
thanks a lot in advance!

You can't, directly. There's no connection betweenthe server and browser.
even after invalidating the session. we can do it
directly using the statement
response.sendRedirect("....");
or we can use the meta refresh tag.if session is invalidated and if we try to do response.sendRedirect(".. ") it throws IllegalStateException

A problem in RMI with JSP..pls help

RMI with Java is working fine,but...
1. I am facing a problem when i use RMI with JSP..its throwing an exception during "Naming.lookup"..here is my code snippet:
// i have stored the ServerInf and other classes in a package and i have imported it in the jsp code....object ref is getting created but lookup is throwing an exception...thoguh RMI registry is working(started)
<%
try {
ServerInf ref = (ServerInf)Naming.lookup("rmi://localhost:1098/Server_bind");
catch (Exception ex) {
ex.printStackTrace();
%>
Pls tel me the cause.
2. If i try to use RMI with Servlet and JSP, then wen the JSP runs then, it simply calls the servlet file and displayes a lonk to it instead of executing the servlet class. pls help me with this too...below is the invoking statement:
<form method=post action='http://localhost:8080/servlet/MyRMIservlet'>
hello <input type=submit value=submit>

And the exception and error message is.....

How can I create a Login-page with jsp???

Hello,
I have to create a page with JSP code on the Netweaver Developer Studio.
But I do not know how I do it.
Can anyone tell me what to write in the portalapp.xml?
An example would be very helpful.
Thank you
Greetings

As you can see in the example:
The portalapp.xml file (deployment descriptor) provides configuration information for your application, and defines the components and services in your application. For each component and service, you specify the implementing Java class and configuration information.
For more information on the format of the portalapp.xml, see Deployment Descriptor (portalapp.xml).
<application>
    <application-config>
        <property name="SharingReference" value="com.sap.portal.navigation.service, com.sap.portal.navigation.api_mimeservice, com.sap.portal.navigation.helperservice"/>
        <property name="Vendor" value="MY_COMPANY"/>
        <property name="SecurityArea" value="PERMISSION"/>
    </application-config>
    <components>
        <component name="SimpleNavigationExample">
            <component-config>
                <property name="ClassName" value="MY_CLASS"/>
                <property name="SecurityZone" value="no_safety"/>
            </component-config>
            <component-profile/>
        </component>
    </components>
    <services/>
</application>
You can only update in this example, your class name and other details:
<property name="Vendor" value="sap.com"/>
<property name="SecurityArea" value="MyCompany"/>
<property name="ClassName" value="LOGINCLASS"/>
<property name="SecurityZone" value="no_safety"/>
Modify this portalapp.xml file as follows:
       1.      NAVIGATION SERVICE, so you must add references to the following portal applications that define these services:
        com.sap.portal.navigation.service
        com.sap.portal.navigation.api_mimeservice
        com.sap.portal.navigation.helperservice
       2.      In the <application-config> section, create the following properties that help to define the security zone for all components and services in this application:
○     Vendor: String identifying the company or organization that provided the application, for example, sap.com.
○     SecurityArea: String identifying the security area for the application, for example, NetWeaver.portal.
       3.      In the <component-config> section for the mySiteMap component, create the property SecurityZone to define the specific security zone for the component.
For Permission, check this document:
http://help.sap.com/saphelp_nw04s/helpdata/en/44/489e2df5ee4e35e10000000a1553f6/frameset.htm

Help me!! How to use JavaScript with JSP ??

I am using JDeveloper and I created a screen in JSP which uses a bean for database connectivity and retriving info onto the page.
The page has a ListBox where list items are populated from the database.My requirement is
whenever the list is changed the page shuold be refreshed with the selected item info.
I tried to use 'JavaScript' for triggering the event with 'onChange' event of the ListBox.But the event is not getting invoked. I think JavaScript is not working with JSP.
Please help me with how to Use javaScript with JSP or any other alternative where I can meet my requirement.
I have one more question...I have gone through the JSP samples in OTN and I am trying do download the sample 'Travel servlet' which show list of countries...etc
I have also gone through the 'readme' but I don't know how to extract .jar file.
I would be great if you could help me in this.
Thanks!!
Geeta
null

We have a similar need. We have used Cold Fusion to display data from Our Oracle Database. We have a simple SElect Box in HTML populated with the oracle data. When someone selects say the State of Pennsylvania. then we have an On change event that runs a Javascript to go get all the cities in Pennsylvania.
Proble we are having is that inorder for the Javascript to work , we currently have to send all the valid data.
Do you know of any way to dynamically query the the Oracle database in Javascript

Excel with JSP

Hi everyone
I relly do need some help...
I have an Oracle Database and I need to:
1. View my results (of any request) in an excel spreadsheet using JSP (I think this part is the easiest...)
2. And that is my real problem: Use an excel spreadsheet to insert values in the database with JSP...
I hope I made it clear because even for me it's really tricky...
Thanks a lot...
Yassi

There is a example in Marty Hal;l's book"Core Servlets and JSP pages".
It is static, but the same idea would work coming from a database.
<HTML>
<HEAD>
<TITLE>Comparing Apples and Oranges</TITLE>
</HEAD>
<BODY>
<CENTER>
<H2>Comparing Apples and Oranges</H2>
<%
String format = request.getParameter("format");
if ((format != null) && (format.equals("excel"))) {
response.setContentType("application/vnd.ms-excel");
%>
<TABLE BORDER=1>
<TR><TH></TH><TH>Apples<TH>Oranges
<TR><TH>First Quarter<TD>2307<TD>4706
<TR><TH>Second Quarter<TD>2982<TD>5104
<TR><TH>Third Quarter<TD>3011<TD>5220
<TR><TH>Fourth Quarter<TD>3055<TD>5287
</TABLE>
</CENTER>
</BODY>
</HTML>

Use of Threads with JSP's

Can you use threads in a web application that uses JSP's plus Servlets and Beans ?
We have a JRUN 3.1 application using JSPs, Servlets and Beans. Shortly after we went live it became apparent that any 2 users using the same object experienced problems as one object was overwriting another. In a panic the problem was solved by whacking SYNCHRONISED on all objects.
Now we want to write another application, are there strategies for using Threads with JSPs?
Would this be part of the webserver configuration or would the application be coded in a certain way ?
Please can you give me a simplistic answer or point me to some documentation that gives a simple overview.
Thanks Steve

Hi,
You can use thread with jsp, i am sending u a example
package thread;
import java.io.Serializable;
public class TaskBean implements Runnable, Serializable {
private int counter;
private int sum;
private boolean started;
private boolean running;
private int sleep;
public TaskBean() {
counter = 0;
sum = 0;
started = false;
running = false;
sleep = 100;
protected void work() {
try {
Thread.sleep(sleep);
counter++;
sum += counter;
} catch (InterruptedException e) {
setRunning(false);
public synchronized int getPercent() {
return counter;
public synchronized boolean isStarted() {
return started;
public synchronized boolean isCompleted() {
return counter == 100;
public synchronized boolean isRunning() {
return running;
public synchronized void setRunning(boolean running) {
this.running = running;
if (running)
started = true;
public synchronized Object getResult() {
if (isCompleted())
return new Integer(sum);
else
return null;
public void run() {
try {
setRunning(true);
while (isRunning() && !isCompleted())
work();
} finally {
setRunning(false);
And JSP page start.jsp
<% session.removeAttribute("task"); %>
<jsp:useBean id="task" scope="session"
class="thread.TaskBean"/>
<% task.setRunning(true); %>
<% new Thread(task).start(); %>
<jsp:forward page="status.jsp"/>
///////////////// status .jsp
<jsp:useBean id="task" scope="session"
class="thread.TaskBean"/>
<HTML>
<HEAD>
<TITLE>JSP Progress Bar</TITLE>
<% if (task.isRunning()) { %>
<SCRIPT LANGUAGE="JavaScript">
setTimeout("location='status.jsp'", 1000);
</SCRIPT>
<% } %>
</HEAD>
<BODY>
<H1 ALIGN="CENTER">JSP Progress Bar</H1>
<H2 ALIGN="CENTER">
Result: <%= task.getResult() %><BR>
<% int percent = task.getPercent(); %>
<%= percent %>%
</H2>
<TABLE WIDTH="60%" ALIGN="CENTER"
BORDER=1 CELLPADDING=0 CELLSPACING=2>
<TR>
<% for (int i = 10; i <= percent; i += 10) { %>
<TD WIDTH="10%" BGCOLOR="#000080"> </TD>
<% } %>
<% for (int i = 100; i > percent; i -= 10) { %>
<TD WIDTH="10%"> </TD>
<% } %>
</TR>
</TABLE>
<TABLE WIDTH="100%" BORDER=0 CELLPADDING=0 CELLSPACING=0>
<TR>
<TD ALIGN="CENTER">
<% if (task.isRunning()) { %>
Running
<% } else { %>
<% if (task.isCompleted()) { %>
Completed
<% } else if (!task.isStarted()) { %>
Not Started
<% } else { %>
Stopped
<% } %>
<% } %>
</TD>
</TR>
<TR>
<TD ALIGN="CENTER">
<BR>
<% if (task.isRunning()) { %>
<FORM METHOD="GET" ACTION="stop.jsp">
<INPUT TYPE="SUBMIT" VALUE="Stop">
</FORM>
<% } else { %>
<FORM METHOD="GET" ACTION="start.jsp">
<INPUT TYPE="SUBMIT" VALUE="Start">
</FORM>
<% } %>
</TD>
</TR>
</TABLE>
</BODY>
</HTML>
////////////////////////////// stop.jsp
<jsp:useBean id="task" scope="session"
class="thread.TaskBean"/>
<% task.setRunning(false); %>
<jsp:forward page="status.jsp"/>
deploy it into ur server and run start.jsp
and see whatb happens

Redirecting with jsp

Similar Messages

Maybe you are looking for