<web-app xmlns="http://caucho.com/ns/resin"
         xmlns:resin="http://caucho.com/ns/resin/core">

  <servlet-mapping url-pattern="*.php"
                   servlet-class="com.caucho.quercus.servlet.QuercusServlet">
     <init compile="false"/>
  </servlet-mapping>

  <!--
     - Security configuration
    -->
  <login uri="form:">
     <init authenticator="${resin_admin}"
	   login-page="/login.php"
	   error-page="/error.php"/>
  </login>

  <security-constraint url-pattern="*.php">
    <resin:if test="${! resin_admin_external}">
      <ip-constraint>
        <allow>127.0.0.1</allow>
        <allow>192.168/16</allow>
      </ip-constraint>
    </resin:if>
      
    <resin:if test="${! resin_admin_insecure}">
      <user-data-constraint transport-guarantee="CONFIDENTIAL"/>
    </resin:if>
    
    <auth-constraint role-name="*"/>
  </security-constraint>
</web-app>
