[WEB400] HTML GOTO

["Shannon O'Donnell" <sodonnell@xxxxxxxxxxxxxxx>]

I'll check into securiing it another way, probably using HTTP as was
suggested in a couple of different posts. I forgot about Ctrl+D doing a
bookmark.

I feel like I'm trying to join oil and water with this setup (i.e....the
closed Jwalk activeX and every thing else...)

Hopefully we will be dumping JWalk in the near future so this problem (in
fact, most of the whole approach I'm currently using) will go away to be
replaced by a better alternative. So...this is only an interim problem in
search of a solution. Still...the thing has to work right and be secure for
the six months to a year it will take to move to another paradigm.

Thanks all for your great suggestions!  I always learn something new from
these lists!

Shannon O'Donnell


----- Original Message -----
From: "Anton Gombkötö" <gombkoetoe@xxxxxxxxxx>
To: "Web Enabling the AS400 / iSeries" <web400@xxxxxxxxxxxx>
Sent: Monday, June 23, 2003 11:54 AM
Subject: Re: [***Probable Spam***] [WEB400] HTML GOTO


><snip> I have to pass them to another HTML page that has an ActiveX
>object in it to start a JWalk (Seagull's screen scraper product)
>session.  What I'm trying to avoid is having the users type in the
>URL to the JWalk page directly and thereby bypassing our initial
>web-based security.

If they happen to use MS IE, Ctrl+D is enough to add the current page
to the favorites. And then good bye verification. If they happen to
have ICQ running, a hit on "Send URL" is enough to send it to the
world. A right click on the page and "properties" and doubleclicking
the URL, Copy, Paste, ready again. I'm sure there are more methods to
retrieve the page address. Ask your users in half a year... :-)

> There's probably a better way to do all of this,

Definitely.

What's so wrong with securing the HTML page with the ActiveX by good
old basic authentication in the HTTP server? It's not perfect, but
most likely better and easier and definitely safer than your current
approach.

PS: it's very interesting to see that when users aren't working, they
are selling/buying at ebay... ;-)))

--
Mit freundlichen Grüssen / best regards

Anton Gombkötö
Organisation und Projektleitung

Avenum Technologie GmbH
Wien - Salzburg - Stuttgart
http://www.avenum.com



_______________________________________________
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.