RE: How Do I Keep IE From Saving Values

Thank you.  I will have to work with this.  But there is still the
possibility of the same name being generated if the someone comes back to
the page at the same time on another day.  (figuring after this has been
running a few months that it is bound to happen).  I am also not using
xTools or CGIDEV2 so I am stuck using the QtmhCvtDb API to convert to
database fields, which requires a file name from which to retrieve the field
names.  So I am not sure how to resolve to the random field names.  Then
again, I could just scan the environment string for the randomly generated
field name and get the value that way.  hmmm....

I did find while searching a way to make the whole form not save the field
values in IE (and hopefully it works the same in other browsers as well) by
specifying AUTOCOMPLETE="OFF" in the form definition.

<FORM ACTION="PGMNAME.PGM" METHOD="POST" AUTOCOMPLETE="OFF">



 -----Original Message-----
From:   Bob Cozzi [mailto:cozzi@xxxxxxxxx] 
Sent:   Tuesday, December 07, 2004 7:47 PM
To:     'Web Enabling the AS400 / iSeries'
Subject:        RE: [WEB400] How Do I Keep IE From Saving Values

You dynamically generate a random name for the credit card field in the HTML
form. Something like:

<INPUT name="CCFIELD" TYPE="HIDDEN">
<INPUT name="/%CCFIELD%/" TYPE="TEXT" SIZE="16">

Then use a timestamp or something similar as follows:
     D random          S             20A   Varying
     D prefix          S              2A   Const('CCN')
     D tmstamp         S              6S 0
     D cardNbr         S             16A

     
     C                   time                    tmstamp
     C                   eval      random = prefix + %char(tmstamp)
     C                   callp     cgiSetVar('CCFIELD': Random)

Then in your CGI program that receives the form with the keyed-in credit
card number, you retrieve the form field name first, then the credit card
field value itself. Something similar to this:


     C                   callp     cgiInit()

     C                   eval      random = cgiGetVar('CCFIELD')
     C                   eval      cardNbr = cgiGetVar(Random)


This is using RPG xTools' CGILIB, but will work the same if you have
CGIDEV2, just change the procedure names.

-Bob Cozzi
www.rpgxtools.com