As the user is able to manually type in an address which allows login security to be bypassed i have move the folder back into the WEB-INF directory and done the following:
- Changed help-servlet.xml:
From: <prop key="/help.form">helpForm</prop>
To <prop key="/*">helpForm</prop>
- Changed web.xml back to how i orginally had it
- Changed HelpController.java to be as per the attached code:
(Thanks for your assistance, points awarded to 'objects')