RE: How Do I Keep IE From Saving Values -- WEB400

Joe,

You don't need any third party tools to move away from QtmhCvtDb. There's a 
sample using QzhbCgiParse at http://www.bvstools.com that I've been using for 
quite some time.

Also, you may just need to set the caching headers on your page and I thought 
that IE didn't remember values for pages served over SSL by default. 
Ultimately, this may turn out to be something that you have no control over. 
You may also find some information on how to keep this from happening at 
http://msdn.microsoft.com.

If you want to try setting the caching headers, write out the following lines 
after you set the content type:

Cache-Control: no-cache
Pragma: no-cache 
Expires: 0        

Matt

-----Original Message-----
From: Joe Giusto [mailto:jgiusto@xxxxxxxxxxxxxx]
Sent: Wednesday, December 08, 2004 12:37 PM
To: Web Enabling the AS400 / iSeries
Subject: RE: [WEB400] How Do I Keep IE From Saving Values


Thank you.  I will have to work with this.  But there is still the
possibility of the same name being generated if the someone comes back to
the page at the same time on another day.  (figuring after this has been
running a few months that it is bound to happen).  I am also not using
xTools or CGIDEV2 so I am stuck using the QtmhCvtDb API to convert to
database fields, which requires a file name from which to retrieve the field
names.  So I am not sure how to resolve to the random field names.  Then
again, I could just scan the environment string for the randomly generated
field name and get the value that way.  hmmm....

I did find while searching a way to make the whole form not save the field
values in IE (and hopefully it works the same in other browsers as well) by
specifying AUTOCOMPLETE="OFF" in the form definition.

<FORM ACTION="PGMNAME.PGM" METHOD="POST" AUTOCOMPLETE="OFF">



 -----Original Message-----
From:   Bob Cozzi [mailto:cozzi@xxxxxxxxx] 
Sent:   Tuesday, December 07, 2004 7:47 PM
To:     'Web Enabling the AS400 / iSeries'
Subject:        RE: [WEB400] How Do I Keep IE From Saving Values

You dynamically generate a random name for the credit card field in the HTML
form. Something like:

<INPUT name="CCFIELD" TYPE="HIDDEN">
<INPUT name="/%CCFIELD%/" TYPE="TEXT" SIZE="16">

Then use a timestamp or something similar as follows:
     D random          S             20A   Varying
     D prefix          S              2A   Const('CCN')
     D tmstamp         S              6S 0
     D cardNbr         S             16A

     
     C                   time                    tmstamp
     C                   eval      random = prefix + %char(tmstamp)
     C                   callp     cgiSetVar('CCFIELD': Random)

Then in your CGI program that receives the form with the keyed-in credit
card number, you retrieve the form field name first, then the credit card
field value itself. Something similar to this:


     C                   callp     cgiInit()

     C                   eval      random = cgiGetVar('CCFIELD')
     C                   eval      cardNbr = cgiGetVar(Random)


This is using RPG xTools' CGILIB, but will work the same if you have
CGIDEV2, just change the procedure names.

-Bob Cozzi
www.rpgxtools.com

_______________________________________________
This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.