Wrox Home  
Search P2P Archive for: Go

  Return to Index  

asp_web_howto thread: hide the url from my address bar


Message #1 by "taherm@f... on Wed, 20 Jun 2001 10:08:40
i want to hide any urls in address bar and this for security reasons. my 

asp pages passes sensitive data in form of form variables in the address 

bar.

this should be applicable for any user using the site. bascially he should 

only see www.mydomain.com and nothing else in the address irespective of 

whatever links he/she clicks on the webpage.

can i achieve this.

thanks very much



Message #2 by Farhan shaikh <shaikh_farhan@y...> on Wed, 20 Jun 2001 03:31:32 -0700 (PDT)
hi taherm@f...



u are using Form variable rite 

but i appending in the address bar , 

a little change might effect ur application secure and

reliable .



By defualt html form use get variable ,

just put the following code 



<form action="ur.asp" method="post">



if u passes variable throught query thing then u need

encyption to hide the use ful info

for more info send ur query



with best regard

Farhan Shaikh



--- "taherm@f..."

<taherm@f...> wrote:

> i want to hide any urls in address bar and this for

> security reasons. my 

> asp pages passes sensitive data in form of form

> variables in the address 

> bar.

> this should be applicable for any user using the

> site. bascially he should 

> only see www.mydomain.com and nothing else in the

> address irespective of 

> whatever links he/she clicks on the webpage.

> can i achieve this.

> thanks very much

> 

>
Message #3 by "TomMallard" <mallard@s...> on Wed, 20 Jun 2001 04:45:15 -0700
It's easier to convert them to hidden fields and submit the page to the next

one than try to "hide any urls in the address bar". How would you do that

without removing the querystring so it doesn't get to the next page? If the

user can't see it, neither can HTTP.



tom

----- Original Message -----

From: <taherm@f...>

To: "ASP Web HowTo" <asp_web_howto@p...>

Sent: Wednesday, June 20, 2001 10:08 AM

Subject: [asp_web_howto] hide the url from my address bar





> i want to hide any urls in address bar and this for security reasons. my

> asp pages passes sensitive data in form of form variables in the address

> bar.

> this should be applicable for any user using the site. bascially he should

> only see www.mydomain.com and nothing else in the address irespective of

> whatever links he/she clicks on the webpage.

> can i achieve this.

> thanks very much

>

>
Message #4 by ssteward@a... on Wed, 20 Jun 2001 08:39:07 -0500
You can put it in a frameset and just have 1 frame, the url would 

always

stay the same in the address bar...



-----Original Message-----

From: taherm@f...

[mailto:taherm@f...]

Sent: Wednesday, June 20, 2001 5:09 AM

To: ASP Web HowTo

Subject: [asp_web_howto] hide the url from my address bar





i want to hide any urls in address bar and this for security reasons. 

my

asp pages passes sensitive data in form of form variables in the 

address

bar.

this should be applicable for any user using the site. bascially he 

should

only see www.mydomain.com and nothing else in the address irespective 

of

whatever links he/she clicks on the webpage.

can i achieve this.

thanks very much





Message #5 by "Taher Moiyed" <taherm@f...> on Wed, 20 Jun 2001 16:36:30 +0100
thanks a million your logic did work



-----Original Message-----

From: ssteward@a... [mailto:ssteward@a...]

Sent: 20 June 2001 14:39

To: ASP Web HowTo

Subject: [asp_web_howto] RE: hide the url from my address bar





You can put it in a frameset and just have 1 frame, the url would always

stay the same in the address bar...



-----Original Message-----

From: taherm@f...

[mailto:taherm@f...]

Sent: Wednesday, June 20, 2001 5:09 AM

To: ASP Web HowTo

Subject: [asp_web_howto] hide the url from my address bar





i want to hide any urls in address bar and this for security reasons. my

asp pages passes sensitive data in form of form variables in the address

bar.

this should be applicable for any user using the site. bascially he should

only see www.mydomain.com and nothing else in the address irespective of

whatever links he/she clicks on the webpage.

can i achieve this.

thanks very much



Message #6 by "Hong Wang" <hongwang@u...> on Wed, 20 Jun 2001 09:09:25 -0700
The url can still be inspected by looking at web page's property on IE.





-----Original Message-----

From: Taher Moiyed [mailto:taherm@f...]

Sent: Wednesday, June 20, 2001 8:37 AM

To: ASP Web HowTo

Subject: [asp_web_howto] RE: hide the url from my address bar





thanks a million your logic did work



-----Original Message-----

From: ssteward@a... [mailto:ssteward@a...]

Sent: 20 June 2001 14:39

To: ASP Web HowTo

Subject: [asp_web_howto] RE: hide the url from my address bar





You can put it in a frameset and just have 1 frame, the url would always

stay the same in the address bar...



-----Original Message-----

From: taherm@f...

[mailto:taherm@f...]

Sent: Wednesday, June 20, 2001 5:09 AM

To: ASP Web HowTo

Subject: [asp_web_howto] hide the url from my address bar





i want to hide any urls in address bar and this for security reasons. my

asp pages passes sensitive data in form of form variables in the address

bar.

this should be applicable for any user using the site. bascially he

should

only see www.mydomain.com and nothing else in the address irespective of

whatever links he/she clicks on the webpage.

can i achieve this.

thanks very much

Message #7 by "Daniel Walker" <danielw@w...> on Wed, 20 Jun 2001 17:32:53
It works, yes, but in any site that uses frames there is a way to load

the content of a given frame separately. For instance, here in Mozilla, I 

can right click in the frame area and select "Show Only This Frame" - 

which simply breaks the frameset, or "Open Frame In New Window" (which 

does exactly what it says on the tin). Konqueror gives me the right-click 

options to open in a new window or open with netscape - which has the 

same effect but opens with a new instance of Netscape rather than a new 

instance of Konqueror. Opera gives me "Frame -> Copy Address"... Netscape

no doubt has it's own variations, but I don't particularly feel the need

to find out what, just now :). Lookinng at a collegaue's copy of Internet

Explorer 6.0, I see that it has the option to view Properties of a

document within a frame, and one of those properties is the name of the

document, of course! In any case, the documents would be held in your

browser's cache as separate documents. If this really is for security

reasons, I think you have to start finding more secure ways of passing

the data around in the first place. Some of the suggestions you've had

already would be good starting points.



Daniel Walker

Wrox Press



> thanks a million your logic did work

> 

> -----Original Message-----

> From: ssteward@a... [mailto:ssteward@a...]

> Sent: 20 June 2001 14:39

> To: ASP Web HowTo

> Subject: [asp_web_howto] RE: hide the url from my address bar

> 

> 

> You can put it in a frameset and just have 1 frame, the url would always

> stay the same in the address bar...

> 

> -----Original Message-----

> From: taherm@f...

> [mailto:taherm@f...]

> Sent: Wednesday, June 20, 2001 5:09 AM

> To: ASP Web HowTo

> Subject: [asp_web_howto] hide the url from my address bar

> 

> 

> i want to hide any urls in address bar and this for security reasons. my

> asp pages passes sensitive data in form of form variables in the address

> bar.

> this should be applicable for any user using the site. bascially he should

> only see www.mydomain.com and nothing else in the address irespective of

> whatever links he/she clicks on the webpage.

> can i achieve this.

> thanks very much

> 
Message #8 by ssteward@a... on Wed, 20 Jun 2001 11:35:30 -0500
Yeah, if you don't want anyone to see the querystring you're passing 

around,

use forms instead, I just thought he wanted it to hide from the address

window...  It's just a simple solution for cosmetic appeal.  You can 

put in

javascript code so that you can detect if you're in the frameset, and 

if

not, reload the page in the frameset.  Of course, you can disable 

javascript

to get around this too, but like i said before, this method is purely

cosmetic, it is not secure at all...  guess i should've clarified that 

in my

original post...  :)



shawn



-----Original Message-----

From: Daniel Walker [mailto:danielw@w...]

Sent: Wednesday, June 20, 2001 12:33 PM

To: ASP Web HowTo

Subject: [asp_web_howto] RE: hide the url from my address bar





It works, yes, but in any site that uses frames there is a way to load

the content of a given frame separately. For instance, here in Mozilla, 

I

can right click in the frame area and select "Show Only This Frame" -

which simply breaks the frameset, or "Open Frame In New Window" (which

does exactly what it says on the tin). Konqueror gives me the 

right-click

options to open in a new window or open with netscape - which has the

same effect but opens with a new instance of Netscape rather than a new 



instance of Konqueror. Opera gives me "Frame -> Copy Address"... 

Netscape

no doubt has it's own variations, but I don't particularly feel the 

need

to find out what, just now :). Lookinng at a collegaue's copy of 

Internet

Explorer 6.0, I see that it has the option to view Properties of a

document within a frame, and one of those properties is the name of the

document, of course! In any case, the documents would be held in your

browser's cache as separate documents. If this really is for security

reasons, I think you have to start finding more secure ways of passing

the data around in the first place. Some of the suggestions you've had

already would be good starting points.



Daniel Walker

Wrox Press



> thanks a million your logic did work

>

> -----Original Message-----

> From: ssteward@a... 

[mailto:ssteward@a...]

> Sent: 20 June 2001 14:39

> To: ASP Web HowTo

> Subject: [asp_web_howto] RE: hide the url from my address bar

>

>

> You can put it in a frameset and just have 1 frame, the url would 

always

> stay the same in the address bar...

>

> -----Original Message-----

> From: taherm@f...

> [mailto:taherm@f...]

> Sent: Wednesday, June 20, 2001 5:09 AM

> To: ASP Web HowTo

> Subject: [asp_web_howto] hide the url from my address bar

>

>

> i want to hide any urls in address bar and this for security reasons. 

my

> asp pages passes sensitive data in form of form variables in the 

address

> bar.

> this should be applicable for any user using the site. bascially he 

should

> only see www.mydomain.com and nothing else in the address irespective 

of

> whatever links he/she clicks on the webpage.

> can i achieve this.

> thanks very much

>

---

* Fast, Full-Featured Microsoft=AE Excel Web Reports & Charts!

A breakthrough in high performance Web application development, 

SoftArtisans

ExcelWriter 1.1 supports native Excel charting, image insertion, and

advanced functions & formatting. One click generates 

presentation-quality

Excel spreadsheets-and ExcelWriter performs over 100 times faster than 

the

Excel Object. Several editions, including ExcelWriterFREE, are 

available.

http://www.softartisans.com/softartisans/excelwriter.html>





ssteward@a...


$subst('Email.Unsub')


  Return to Index