IBM's engineer, Nadir Amra, who is responsible for Net.data, has always assured that there is no commitment to remove Net.data from OS/400 as they have done for other platforms.
You should take comfort that the IBM web based administration of digital certificates via *ADMIN server has always employed Net.data and still runs their original Net.data macros, some of which are quite intriguing to examine. I consider it like REXX, which I use all the time (because it can script both CLP and SQL in the same code) and possibly a bit like CLP. These things are used all over the place for years. They matter little to IBM as flagship products so they care less if they cease upgrading or even supporting them. I would expect they may reconsider such removal like they did when they displeases CGIDEV2 users when they tried to do something that was going to mess with the Easy400 website. They did drop support for the Net.data forum but I revived that all by myself and still pay the annual rego fee for the dtwdude.com domain, even though sod all people visit the site anymore
Peter.
-----Original Message-----
From: WEB400 [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Joe W Holt
Sent: Saturday, 25 October 2014 7:47 a.m.
To: Web Enabling the IBM i (AS/400 and iSeries)
Subject: Re: [WEB400] Net.Data and session management
Yes, the unique key mechanism as a decent security catch a decade ago.
Nowadays, not so much. The javascript disable event I may have to look at.
Won't keep the user from refreshing the page but the biggest issue definitely is the double click. Appreciate that little tip.
***
Regards,
Joe W Holt
Sr Programmer/Developer
Jack Onofrio Dog Shows, LLC
405.427.8181
From: Nathan Andelin <nandelin@xxxxxxxxx>
To: "Web Enabling the IBM i (AS/400 and iSeries)"
<web400@xxxxxxxxxxxx>
Date: 10/24/2014 01:43 PM
Subject: Re: [WEB400] Net.Data and session management
Sent by: "WEB400" <web400-bounces@xxxxxxxxxxxx>
I'm vaguely aware of the practice of generating a unique query string parameter in URLs as a security mechanism. It also as the effect of ensuring that users never see cached pages.
Regarding the problem of double-clicking on submit buttons and hyperlinks, some developers use JavaScript to disable the event after the first click, then re-enable it in the response.
Nathan.
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list To post a message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list To post a message email: WEB400@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.
#####################################################################################
This correspondence is for the named person's use only. It may
contain confidential or legally privileged information, or both.
No confidentiality or privilege is waived or lost by any
mistransmission. If you receive this correspondence in error,
please immediately delete it from your system and notify the sender.
You must not disclose, copy or rely on any part of this correspondence
if you are not the intended recipient. Any views expressed in this
message are those of the individual sender, except where the sender
expressly, and with authority, states them to be the views of
Veda. If you need assistance, please contact Veda :-
Australia
http://www.veda.com.au/contact-us or New Zealand +64 9 367 6200
midrange.com
