How to prevent others from seeing the files in the directory ???

rf1979

I recently completed a project, the web server is Tomcat, and most of it has been completed. But there is a problem that everyone needs to solve!

  For example: You can access the homepage through the address http: // localhost / bbs, but if someone knows one of the directories on my website (such as the Test directory), they can see me directly at http: // localhost / bbs / Test All Jsp files in the Test directory, how to prevent this from happening ?????????

rf1979

Does anyone know, if you know there is a solution to this kind of book, you can also tell, thank you!!!

chen96542

The files used inside the server can be placed in the web-inf directory, shielded from the outside world

mjs5938

method 1:
Modify TomcatHome\conf\web.xml
...
<servlet>
        <servlet-name>default</servlet-name>
        <servlet-class>
          org.apache.catalina.servlets.DefaultServlet
        </servlet-class>
        <init-param>
            <param-name>debug</param-name>
            <param-value>0</param-value>
        </init-param>
        <init-param>
            <param-name>listings</param-name>
            <param-value>true</param-value> -> true here is changed to false
        </init-param>
        <load-on-startup>1</load-on-startup>
    </servlet>
...

Save -> Restart OK!
Method 2:
Put an index.jsp or index.html content under your default test directory can be empty This is relatively simple

六翼炽天使

Positive solution upstairs!

rf1979

Thank youmjs5938

alucardcao

The easiest way:
    You also know that others cannot directly access the files under your WEB-INF. You can put the things you don’t want others to access directly under WEB-INF, but you have to modify all the submission directories and see your project. It's over, it's probably not suitable, you can try it later.
The second method:
    You can do some processing in the filter, such as: not logged in and then return.

If you are a Struts architecture, you can override the RequestProcess class and do some processing.

The dumbest way:
    You can make judgments on every page.