root / jforum / WEB-INF / web.xml

Revision 2163, 2.8 kB (checked in by jani.laakso@…, 17 months ago)

Initial import for jforum 2.1.7.

NOTE!!!

When upgrading to next public version (2.1.8?)
1. take diffs from this repository folder against public jforum version 2.1.7
2. wipe out this repository
3. store 2.1.8 jforum back to this repository folder with proper directory structure
4. apply patches manually

NOTE !!!

Contains fixes made by IT Mill (Jani Laakso).

Change history:

31.08.2007 / Jani Laakso
Tried to fix bug http://www.jforum.net/jira/browse/JF-615
Caused Forums to deprecated into mode that displays only error page: "java.lang.reflect error.."
May occur many times per week, restarts helps.
Changed: net.jforum.view.forum.ForumAction?
Note: should be fixed within next release?

30.07.2007 / Jani Laakso
- Changed all method and static strings(!) from insertSave to xcom (this is
not mandatory but I did this before I saw security issue on captcha, see
below). This affects URL/GET/POST parameters systemwide, I hope nothing was
broken.
- Activated links for forum observe messages (smtp mailed to topic watchers)
- Fixed security issue in captcha: see
net.jforum.entities.UserSession?.java,method validateCaptchaResponse(Strin userResponse)

Previously this was possible to overcome captcha check:
1. Get JSESSIONID first
jani@jani:~$ telnet forum.itmill.com 80
GET /jforum.page HTTP/1.0
Host: forum.itmill.com

2. Update above JSESSIONID below
jani@jani:~$ telnet forum.itmill.com 80
POST /posts/list/307.page;JSESSIONID=4724AB1B1449120B6A13346418295409 HTTP/1.1
Host: forum.itmill.com
Content-type: application/x-www-form-urlencoded
Content-length: 306

action=xcom&module=posts&preview=0&forum_id=7&start=&subject=aaa&helpbox=Tip%3A+Styles+may+be+quickly+applied+to+selected+text&topic_type=2&poll_label=&poll_option=&poll_option_count=1&po$

28.06.2007 / Jani Laakso
- Added Google statistics <script>.*</script> to
webapps/forum/templates/default/header.htm

19.05.2007 / Jani Laakso
- updated codebase to custom version

  • net/jforum/util/Captcha.java
  • net/jforum/view/forum/PostAction.java
  • net/jforum/util/mail/Spammer.java
  • templates/default/post_form.htm

=> email notifications are now sent
=> easier captcha
=> captcha required for anon posts
=> not required for registered users

Line 
1<?xml version="1.0" encoding="UTF-8"?>
2<!DOCTYPE web-app
3    PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
4    "http://java.sun.com/dtd/web-app_2_3.dtd">
5
6<web-app>
7    <display-name>JForum - Powering Communities</display-name>
8    <description>Open Source Java Forum Software</description>
9
10        <!-- Clickstream -->
11        <filter>
12                <filter-name>clickstream-jforum</filter-name>
13                <filter-class>net.jforum.util.legacy.clickstream.ClickstreamFilter</filter-class>
14        </filter>
15
16        <filter-mapping>
17                <filter-name>clickstream-jforum</filter-name>
18                <url-pattern>*.page</url-pattern>
19        </filter-mapping>
20   
21    <listener>
22        <listener-class>net.jforum.ForumSessionListener</listener-class>
23    </listener>
24
25        <!-- JForum Controller -->
26    <servlet>
27                <servlet-name>jforum</servlet-name>
28                <servlet-class>net.jforum.JForum</servlet-class>
29               
30                <init-param>
31                        <param-name>development</param-name>
32                        <param-value>true</param-value>
33                </init-param>
34    </servlet>
35
36        <!-- Installer -->
37    <servlet>
38        <servlet-name>install</servlet-name>
39        <servlet-class>net.jforum.InstallServlet</servlet-class>
40       
41        <init-param>
42                        <param-name>development</param-name>
43                        <param-value>true</param-value>
44                </init-param>
45    </servlet>
46
47        <!-- AJAX -->
48        <servlet>
49                <servlet-name>dwr-invoker</servlet-name>
50                <servlet-class>uk.ltd.getahead.dwr.DWRServlet</servlet-class>
51
52                <init-param>
53                        <param-name>configJForum</param-name>
54                        <param-value>WEB-INF/dwr-jforum.xml</param-value>
55                </init-param>
56
57                <init-param>
58                        <param-name>debug</param-name>
59                        <param-value>false</param-value>
60                </init-param>
61        </servlet>
62   
63    <!-- Mapping -->
64    <servlet-mapping>
65        <servlet-name>install</servlet-name>
66        <url-pattern>/install/install.page</url-pattern>
67    </servlet-mapping>
68
69        <servlet-mapping>
70                <servlet-name>dwr-invoker</servlet-name>
71                <url-pattern>/dwr/*</url-pattern>
72        </servlet-mapping>
73   
74        <servlet-mapping>
75        <servlet-name>jforum</servlet-name>
76        <url-pattern>*.page</url-pattern>
77    </servlet-mapping>
78   
79    <!-- SESSION -->
80    <session-config>
81        <session-timeout>10</session-timeout>
82    </session-config>
83   
84        <welcome-file-list>
85                <welcome-file>index.htm</welcome-file>
86        </welcome-file-list>
87
88        <!-- SSO -->
89        <!-- Example of SSO configuration -->
90        <!--
91        <security-role>
92                <role-name>user</role-name>
93        </security-role>
94
95        <security-constraint>
96      <web-resource-collection>
97         <web-resource-name>Restricted Area</web-resource-name>
98         <url-pattern>/*</url-pattern>
99      </web-resource-collection>
100     
101      <auth-constraint>
102         <role-name>user</role-name>
103      </auth-constraint>
104   </security-constraint>
105
106   <login-config>
107      <auth-method>BASIC</auth-method>
108      <realm-name>REALM NAME HERE</realm-name>
109   </login-config>
110   -->
111</web-app>
Note: See TracBrowser for help on using the browser.