Re: CGI Query Parms

[Staffan Lofberg <staffan.lofberg@xxxxxxxxxx>]

Bob,

We have solved this by putting a hidden field in the HTML-pages with an
id. We check that the id is valid - if not we send out a message that
the id is invalid. The id is created when we recive the parent page. The
only page that we accept without a valid id is the parent page.

This solution builds on that we have a general CGI-program that recives
all request and distributes them to the proper application program.

Staffan Lofberg

> >All,
> >
> >On several websites, I have seen and experienced a situation where if
> you
> >enter the website at the proper entry point and then follow designated
> >links and click on submit buttons on forms you will go to lower
> >(subordinate) pages.  The URL shows a standard path plus a long query
> >string which presumably are the parms that brought up the page.
> >
> >Ok, so fine and good, my pages look the same.
> >
> >Now then when you bookmark these pages, the page fails with an error
> >message (which I can't seem to recall at the moment).
> >
> >My question is how do you create this situation?  We all have cgi
> scripts
> >which contain long parm lists that we really can't hide from our users.
> >How can we prevent them from bookmarking the pages and accessing the
> pages
> >directly with out first visiting a parent page?
> >
> >Is there a neat and simple way to deal with this?
> >
> >Bob C.
> >


------------------------------------------------------------------
Netorom AB              Phone +46 40 6712272
P.O. Box 9160           Fax   +46 40 940128
S-200 39  Malmö         http://risc.netorom.se
Sweden                  mailto:staffan.lofberg@netorom.se
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to "MIDRANGE-L@midrange.com".
| To unsubscribe from this list send email to MAJORDOMO@midrange.com
|    and specify 'unsubscribe MIDRANGE-L' in the body of your message.
| Questions should be directed to the list owner/operator: david@midrange.com
+---