RE: [WEB400] Avoid the address toolbar

[MEovino@xxxxxxxxxxxxxxxxx]

Peter,

In addition to this, you can foil "semi-smart" users by opening a new
browser window with JavaScript that does not have an address bar.  Really
smart users can right click on the page, pick Properties and view the URL
and copy and paste it into a full browser window, but few know how to do
this.

Mike E.




Maybe only allow POST not GET?

-----Original Message-----
From: Hatzenbeler, Tim [mailto:thatzenbeler@xxxxxxxxxxxxx]
Sent: Thursday, July 17, 2003 2:57 PM
To: 'Web Enabling the AS400 / iSeries'
Subject: RE: [WEB400] Avoid the address toolbar


What I have done... And it's been a while, is pass my variables via form
variables from one page to another, to avoid them showing up in the url...
And then when I open the new page, I read the referer (?) URL, if the URL
did not match what I expected, i send the page to an error page, this
avoided page hopping, and paramater overrides..  i think...  I don't
remember how complete my testing was, but it was for an intranet app, so I
was too worried...  It wasn't a payroll lookup or anything...

tim

> -----Original Message-----
> From:         Peter Vidal [SMTP:Peter_Vidal@xxxxxxxx]
> Sent:         Thursday, July 17, 2003 12:38 PM
> To:           web400@xxxxxxxxxxxx
> Subject:           [WEB400] Avoid the address toolbar
>
> Is there a way that programmatically we can deactivate the address
toolbar
> whenever a specific page is loaded?  I am trying to control "smart users"
> that
> are editing the paths coded in the address box and replacing parameters
> with
> their own.
>
> Any ideas?
>
> TIA,
> Peter Vidal
> Pall Aeropower Corp.
> SR Programmer Analyst
> WWW.Pall.com / 727-539-8448, x2414
>
> "A good player makes himself look good; a great player makes the team
look
> good."
> Author unknown
>
>
> _______________________________________________
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.
This e-mail message, including any attachments, is for the sole use of the
intended recipient(s) and may contain confidential or privileged
information.  Any unauthorized review, use, disclosure or distribution is
prohibited.  If you are not the intended recipient, please contact the
sender by reply e-mail and destroy the message.
_______________________________________________
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.
_______________________________________________
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.