5 Replies Latest reply on Oct 22, 2007 11:50 AM by modoc

    Hide J2EE Seam Server

    amontobin

      Hi,

      I would like to hide my J2EE server for security reasons and transform the server into a php server. (It will serve php files, but the php files are seam files).

      How can i do that ?

      Thank you for your answer

      Sebastien

        • 1. Re: Hide J2EE Seam Server
          amontobin

          I forgot to say that i'm using :
          - JBoss 5 Beta 1
          - Seam 2 CR2

          • 2. Re: Hide J2EE Seam Server
            gagool

            That won't work, it is quite easy to identify the server as a seam/jsf/richfaces-server by looking at how it renders the html/js and request variables.

            If you just want to change the file extension, do it in web.xml Faces Servlet url-mapping.

            • 3. Re: Hide J2EE Seam Server
              modoc

              PHP and Java (Seam) are totally different languages. If you mean you just want the page extensions to be .php or .html that is easy, as gagool said.

              In your web.xml you use this:

              <servlet-mapping>
              <servlet-name>Faces Servlet</servlet-name>
              <url-pattern>*.html</url-pattern>
              </servlet-mapping>

              If you aren't using a lot of AJAX stuff (RichFaces, IceFaces, etc..) then I think you can hide it pretty easily. 10minutemail.com page source looks like any other page source for the most part.

              If you meant something else when you said: "transform the server into a php server. (It will serve php files, but the php files are seam files). " Please clarify and we will help if we can:)

              • 4. Re: Hide J2EE Seam Server
                amitev

                You cannot hide things like:

                <input type="hidden" name="javax.faces.ViewState" id="javax.faces.ViewState" />
                

                which the form renders

                • 5. Re: Hide J2EE Seam Server
                  modoc

                  true:) That's why I put "for the most part". But as far as a simple "make this site look like a normal html or php site" it's very doable. If people start pouring through your source code, and poking around at your server headers and error pages, they can always find more.