Hide resin webapps Forbidden page

**Nepomuk** · Sep 4 '07, 09:54 AM

Originally posted by kukukgl

I using resin as a webserver to run my JSP code. I found that if we key in the URL as "www.domain .com/webapps" it will show the information like below:

Forbidden
You don't have permission to access /webapps/ on this server.

Apache/2.0.55 (Unix) Resin/3.0.19 mod_ssl/2.0.55 OpenSSL/0.9.7g Server at...........

Anyone have any clue to hide this page as it may giving a some clue for hacker to hack the system.

Hm, I can't think of a good solution in Java to this, maybe you should ask in the Apache Forum.

Without having checked it, I can think of two roots that may be helpfull solving this problem:

You could set Resin to show a 404 page, when this directory is accessed. (It must be possible somehow - but I don't know, how.)
You could have a direct redirection from that page to a 404 page (e.g. create an index.htm with some code similar to this:
[CODE=html]
<html>
<head>
<meta http-equiv="Refresh" content="1; URL=http://www.mydomain.xy/404.htm">
</head>
<body>
</body>
</html>
[/CODE]or redirect using .htaccess (google it, if you don't know it).

There might be a more elegant way or even a solution in Java, but I don't know of it.

Greetings,
Nepomuk

Hide resin webapps Forbidden page

Hide resin webapps Forbidden page

Comment