Removing Controller in URL

[Sachin]

Hi All,

Please let me know how secure it is to remove controller in URL...For example I would like to display as www.xxx.com/myownurl/ instead of www.xxx.com/control/


Regards,

Sachin

[dhiraj.g]

Hi,
For this thing change url  in component's  web.xml file.

<init-param>
            <param-name>redirectPath</param-name>
            <param-value>/control/main</param-value>
</init-param>


Thanks
Dhiraj Gupta

[Sachin]

Well thanks Mr.Gupta. My question is "how secure is it to Remove Controller in URL for entire application. I don't want to display a single URL which extends /controller/. I changed redirect path to my own customized url for all components but no luck...


Thanks in Advance


Regards,

Sachin


 

[BJ Freeman]

if you take the controller out of the URL, you break the model of Ofbiz.
You are not using the ofbiz structure. You would not be able to render
FTL's or any other docuement type without a lot of work.
to answer your question, the security would be the same as tom cat.


Sachin sent the following on 6/12/2012 1:57 AM:

> Well thanks Mr.Gupta. My question is "how secure is it to Remove Controller
> in URL for entire application. I don't want to display a single URL which
> extends /controller/. I changed redirect path to my own customized url for
> all components but no luck...
>
>
> Thanks in Advance
>
>
> Regards,
>
> Sachin
>
>
>
>
> --
> View this message in context: http://ofbiz.135035.n4.nabble.com/Removing-Controller-in-URL-tp4633426p4633459.html
> Sent from the OFBiz - User mailing list archive at Nabble.com.
>

[Deepak Agarwal-2]

Could url rewriting be a solution ? Like
http://turbine.apache.org/turbine/development/turbine-2.3/howto/url-rewriting-howto.html


On Tue, Jun 12, 2012 at 3:38 PM, BJ Freeman <[hidden email]> wrote:

> if you take the controller out of the URL, you break the model of Ofbiz.
> You are not using the ofbiz structure. You would not be able to render
> FTL's or any other docuement type without a lot of work.
> to answer your question, the security would be the same as tom cat.
>
>
> Sachin sent the following on 6/12/2012 1:57 AM:
>
>  Well thanks Mr.Gupta. My question is "how secure is it to Remove
>> Controller
>> in URL for entire application. I don't want to display a single URL which
>> extends /controller/. I changed redirect path to my own customized url for
>> all components but no luck...
>>
>>
>> Thanks in Advance
>>
>>
>> Regards,
>>
>> Sachin
>>
>>
>>
>>
>> --
>> View this message in context: http://ofbiz.135035.n4.nabble.**
>> com/Removing-Controller-in-**URL-tp4633426p4633459.html<http://ofbiz.135035.n4.nabble.com/Removing-Controller-in-URL-tp4633426p4633459.html>
>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>
>> --
>> Thanks,
>> Deepak Agarwal,
>>
>> Paxcel Technologies Pvt Ltd.
>> Hartron Complex, Sector 18, Gurgaon, India.
>> E-Mail: [hidden email]
>> Mobile: [phone]
>>
>>

[BJ Freeman]

think of http://foo.com/control/webpage.html
as
http://foo.com/control?uri=webpage

if you rewrite the Url, you will need to assign something to redirect to
control.
this being that control is the URL for accessing the controller.xml in
ofbiz.

Deepak Agarwal sent the following on 6/12/2012 11:17 AM:

> Could url rewriting be a solution ? Like
> http://turbine.apache.org/turbine/development/turbine-2.3/howto/url-rewriting-howto.html
>
>
> On Tue, Jun 12, 2012 at 3:38 PM, BJ Freeman<[hidden email]>  wrote:
>
>> if you take the controller out of the URL, you break the model of Ofbiz.
>> You are not using the ofbiz structure. You would not be able to render
>> FTL's or any other docuement type without a lot of work.
>> to answer your question, the security would be the same as tom cat.
>>
>>
>> Sachin sent the following on 6/12/2012 1:57 AM:
>>
>>   Well thanks Mr.Gupta. My question is "how secure is it to Remove
>>> Controller
>>> in URL for entire application. I don't want to display a single URL which
>>> extends /controller/. I changed redirect path to my own customized url for
>>> all components but no luck...
>>>
>>>
>>> Thanks in Advance
>>>
>>>
>>> Regards,
>>>
>>> Sachin
>>>
>>>
>>>
>>>
>>> --
>>> View this message in context: http://ofbiz.135035.n4.nabble.**
>>> com/Removing-Controller-in-**URL-tp4633426p4633459.html<http://ofbiz.135035.n4.nabble.com/Removing-Controller-in-URL-tp4633426p4633459.html>
>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>
>>> --
>>> Thanks,
>>> Deepak Agarwal,
>>>
>>> Paxcel Technologies Pvt Ltd.
>>> Hartron Complex, Sector 18, Gurgaon, India.
>>> E-Mail: [hidden email]
>>> Mobile: [phone]
>>>
>>>
>

[Deepak Agarwal-2]

Just for the sake of if somebody wants to remove 'control' from user at all
then one can configure a rule in tuckey:

     <rule>
        <from>/(.*)</from>
        <to>/control/$1</to>
    </rule>
    <outbound-rule>
        <from>^/control/(.*)$</from>
        <to>/$1</to>
    </outbound-rule>

Not tested though.

On Wed, Jun 13, 2012 at 1:22 AM, BJ Freeman <[hidden email]> wrote:

> think of http://foo.com/control/**webpage.html<http://foo.com/control/webpage.html>
> as
> http://foo.com/control?uri=**webpage <http://foo.com/control?uri=webpage>
>
> if you rewrite the Url, you will need to assign something to redirect to
> control.
> this being that control is the URL for accessing the controller.xml in
> ofbiz.
>
> Deepak Agarwal sent the following on 6/12/2012 11:17 AM:
>
>> Could url rewriting be a solution ? Like
>> http://turbine.apache.org/**turbine/development/turbine-2.**
>> 3/howto/url-rewriting-howto.**html<http://turbine.apache.org/turbine/development/turbine-2.3/howto/url-rewriting-howto.html>
>>
>>
>> On Tue, Jun 12, 2012 at 3:38 PM, BJ Freeman<[hidden email]>  wrote:
>>
>>  if you take the controller out of the URL, you break the model of Ofbiz.
>>> You are not using the ofbiz structure. You would not be able to render
>>> FTL's or any other docuement type without a lot of work.
>>> to answer your question, the security would be the same as tom cat.
>>>
>>>
>>> Sachin sent the following on 6/12/2012 1:57 AM:
>>>
>>>  Well thanks Mr.Gupta. My question is "how secure is it to Remove
>>>
>>>> Controller
>>>> in URL for entire application. I don't want to display a single URL
>>>> which
>>>> extends /controller/. I changed redirect path to my own customized url
>>>> for
>>>> all components but no luck...
>>>>
>>>>
>>>> Thanks in Advance
>>>>
>>>>
>>>> Regards,
>>>>
>>>> Sachin
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> View this message in context: http://ofbiz.135035.n4.nabble.****
>>>> com/Removing-Controller-in-****URL-tp4633426p4633459.html<htt**
>>>> p://ofbiz.135035.n4.nabble.**com/Removing-Controller-in-**
>>>> URL-tp4633426p4633459.html<http://ofbiz.135035.n4.nabble.com/Removing-Controller-in-URL-tp4633426p4633459.html>
>>>> >
>>>>
>>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>>
>>>> --
>>>> Thanks,
>>>> Deepak Agarwal,
>>>>
>>>> Paxcel Technologies Pvt Ltd.
>>>> Hartron Complex, Sector 18, Gurgaon, India.
>>>> E-Mail: [hidden email]
>>>> Mobile: [phone]
>>>>
>>>> --
>>>> Thanks,
>>>> Deepak Agarwal,
>>>>
>>>> Paxcel Technologies Pvt Ltd.
>>>> Hartron Complex, Sector 18, Gurgaon, India.
>>>> E-Mail: [hidden email]
>>>> Mobile: [phone]
>>>>
>>>>  <%2B91%209910322604>
>>>>
>>>

[BJ Freeman]

let us know how it worked.

Deepak Agarwal sent the following on 6/12/2012 2:01 PM:

> Just for the sake of if somebody wants to remove 'control' from user at all
> then one can configure a rule in tuckey:
>
>       <rule>
>          <from>/(.*)</from>
>          <to>/control/$1</to>
>      </rule>
>      <outbound-rule>
>          <from>^/control/(.*)$</from>
>          <to>/$1</to>
>      </outbound-rule>
>
> Not tested though.
>
> On Wed, Jun 13, 2012 at 1:22 AM, BJ Freeman<[hidden email]>  wrote:
>
>> think of http://foo.com/control/**webpage.html<http://foo.com/control/webpage.html>
>> as
>> http://foo.com/control?uri=**webpage<http://foo.com/control?uri=webpage>
>>
>> if you rewrite the Url, you will need to assign something to redirect to
>> control.
>> this being that control is the URL for accessing the controller.xml in
>> ofbiz.
>>
>> Deepak Agarwal sent the following on 6/12/2012 11:17 AM:
>>
>>> Could url rewriting be a solution ? Like
>>> http://turbine.apache.org/**turbine/development/turbine-2.**
>>> 3/howto/url-rewriting-howto.**html<http://turbine.apache.org/turbine/development/turbine-2.3/howto/url-rewriting-howto.html>
>>>
>>>
>>> On Tue, Jun 12, 2012 at 3:38 PM, BJ Freeman<[hidden email]>   wrote:
>>>
>>>   if you take the controller out of the URL, you break the model of Ofbiz.
>>>> You are not using the ofbiz structure. You would not be able to render
>>>> FTL's or any other docuement type without a lot of work.
>>>> to answer your question, the security would be the same as tom cat.
>>>>
>>>>
>>>> Sachin sent the following on 6/12/2012 1:57 AM:
>>>>
>>>>   Well thanks Mr.Gupta. My question is "how secure is it to Remove
>>>>
>>>>> Controller
>>>>> in URL for entire application. I don't want to display a single URL
>>>>> which
>>>>> extends /controller/. I changed redirect path to my own customized url
>>>>> for
>>>>> all components but no luck...
>>>>>
>>>>>
>>>>> Thanks in Advance
>>>>>
>>>>>
>>>>> Regards,
>>>>>
>>>>> Sachin
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> View this message in context: http://ofbiz.135035.n4.nabble.****
>>>>> com/Removing-Controller-in-****URL-tp4633426p4633459.html<htt**
>>>>> p://ofbiz.135035.n4.nabble.**com/Removing-Controller-in-**
>>>>> URL-tp4633426p4633459.html<http://ofbiz.135035.n4.nabble.com/Removing-Controller-in-URL-tp4633426p4633459.html>
>>>>>>
>>>>>
>>>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>>>
>>>>> --
>>>>> Thanks,
>>>>> Deepak Agarwal,
>>>>>
>>>>> Paxcel Technologies Pvt Ltd.
>>>>> Hartron Complex, Sector 18, Gurgaon, India.
>>>>> E-Mail: [hidden email]
>>>>> Mobile: [phone]
>>>>>
>>>>> --
>>>>> Thanks,
>>>>> Deepak Agarwal,
>>>>>
>>>>> Paxcel Technologies Pvt Ltd.
>>>>> Hartron Complex, Sector 18, Gurgaon, India.
>>>>> E-Mail: [hidden email]
>>>>> Mobile: [phone]
>>>>>
>>>>>   <%2B91%209910322604>
>>>>>
>>>>
>

[Jacques Le Roux]

This works well, we abuse it here

Jacques

From: "BJ Freeman" <[hidden email]>

> let us know how it worked.
>
> Deepak Agarwal sent the following on 6/12/2012 2:01 PM:
>> Just for the sake of if somebody wants to remove 'control' from user at all
>> then one can configure a rule in tuckey:
>>
>>       <rule>
>>          <from>/(.*)</from>
>>          <to>/control/$1</to>
>>      </rule>
>>      <outbound-rule>
>>          <from>^/control/(.*)$</from>
>>          <to>/$1</to>
>>      </outbound-rule>
>>
>> Not tested though.
>>
>> On Wed, Jun 13, 2012 at 1:22 AM, BJ Freeman<[hidden email]>  wrote:
>>
>>> think of http://foo.com/control/**webpage.html<http://foo.com/control/webpage.html>
>>> as
>>> http://foo.com/control?uri=**webpage<http://foo.com/control?uri=webpage>
>>>
>>> if you rewrite the Url, you will need to assign something to redirect to
>>> control.
>>> this being that control is the URL for accessing the controller.xml in
>>> ofbiz.
>>>
>>> Deepak Agarwal sent the following on 6/12/2012 11:17 AM:
>>>
>>>> Could url rewriting be a solution ? Like
>>>> http://turbine.apache.org/**turbine/development/turbine-2.**
>>>> 3/howto/url-rewriting-howto.**html<http://turbine.apache.org/turbine/development/turbine-2.3/howto/url-rewriting-howto.html>
>>>>
>>>>
>>>> On Tue, Jun 12, 2012 at 3:38 PM, BJ Freeman<[hidden email]>   wrote:
>>>>
>>>>   if you take the controller out of the URL, you break the model of Ofbiz.
>>>>> You are not using the ofbiz structure. You would not be able to render
>>>>> FTL's or any other docuement type without a lot of work.
>>>>> to answer your question, the security would be the same as tom cat.
>>>>>
>>>>>
>>>>> Sachin sent the following on 6/12/2012 1:57 AM:
>>>>>
>>>>>   Well thanks Mr.Gupta. My question is "how secure is it to Remove
>>>>>
>>>>>> Controller
>>>>>> in URL for entire application. I don't want to display a single URL
>>>>>> which
>>>>>> extends /controller/. I changed redirect path to my own customized url
>>>>>> for
>>>>>> all components but no luck...
>>>>>>
>>>>>>
>>>>>> Thanks in Advance
>>>>>>
>>>>>>
>>>>>> Regards,
>>>>>>
>>>>>> Sachin
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> View this message in context: http://ofbiz.135035.n4.nabble.****
>>>>>> com/Removing-Controller-in-****URL-tp4633426p4633459.html<htt**
>>>>>> p://ofbiz.135035.n4.nabble.**com/Removing-Controller-in-**
>>>>>> URL-tp4633426p4633459.html<http://ofbiz.135035.n4.nabble.com/Removing-Controller-in-URL-tp4633426p4633459.html>
>>>>>>>
>>>>>>
>>>>>> Sent from the OFBiz - User mailing list archive at Nabble.com.
>>>>>>
>>>>>> --
>>>>>> Thanks,
>>>>>> Deepak Agarwal,
>>>>>>
>>>>>> Paxcel Technologies Pvt Ltd.
>>>>>> Hartron Complex, Sector 18, Gurgaon, India.
>>>>>> E-Mail: [hidden email]
>>>>>> Mobile: [phone]
>>>>>>
>>>>>> --
>>>>>> Thanks,
>>>>>> Deepak Agarwal,
>>>>>>
>>>>>> Paxcel Technologies Pvt Ltd.
>>>>>> Hartron Complex, Sector 18, Gurgaon, India.
>>>>>> E-Mail: [hidden email]
>>>>>> Mobile: [phone]
>>>>>>
>>>>>>   <%2B91%209910322604>
>>>>>>
>>>>>
>>