struts-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Joe Germuska" <>
Subject Re: Thread.sleep(...) in Struts Action
Date Fri, 09 Mar 2007 18:16:40 GMT
On 3/9/07, Adam Gordon <> wrote:
> Our login page performs a POST to authenticate and I'd like to put in a
> delay when a login failure occurs so that it hinders/frustrates any
> malicious users and any scripts they might be running.  I realize this
> isn't a foolproof solution but since the user isn't authenticated yet, I
> don't have a ton of options.  One other thing we'll probably be doing is
> session validation/invalidation.

I would think that the kind of throttling you're talking about is something
you're better off doing with Apache than trying to do in your application

Joe Germuska *

"The truth is that we learned from João forever to be out of tune."
-- Caetano Veloso

  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message