Hi guys I am trying to prevent user to access directly using URL to my application , so in order to do that I have used security constraint in web.xml file and it works with me . my problem is in my application I am using href and redirect method in my servlets to redirect a user , here the server will not redirect a user to required pages but redirecting a user to error page "access deny" , it is like a user accessed directly from URL

please help me how to solve this problem.

I have seaeched about how to secure your pages from accessing directly using URL which is through putting all the pages under web-inf directory , I hope if you tell me how to do that , what changes i have to do in my web.xml

Putting pages under WEB-INF is a good one but my suggestion to you to use urlrewrite or authentication mechanisms.