struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Joe Germuska" <...@germuska.com>
Subject Re: Thread.sleep(...) in Struts Action
Date Fri, 09 Mar 2007 18:16:40 GMT
On 3/9/07, Adam Gordon <adam.gordon@readytalk.com> wrote:
>
>
>
> Our login page performs a POST to authenticate and I'd like to put in a
> delay when a login failure occurs so that it hinders/frustrates any
> malicious users and any scripts they might be running.  I realize this
> isn't a foolproof solution but since the user isn't authenticated yet, I
> don't have a ton of options.  One other thing we'll probably be doing is
> session validation/invalidation.




I would think that the kind of throttling you're talking about is something
you're better off doing with Apache than trying to do in your application
code.


-- 
Joe Germuska
Joe@Germuska.com * http://blog.germuska.com

"The truth is that we learned from João forever to be out of tune."
-- Caetano Veloso

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message