|
 |
asp_web_howto thread: hide the url from my address bar
Message #1 by "taherm@f... on Wed, 20 Jun 2001 10:08:40
|
|
i want to hide any urls in address bar and this for security reasons. my
asp pages passes sensitive data in form of form variables in the address
bar.
this should be applicable for any user using the site. bascially he should
only see www.mydomain.com and nothing else in the address irespective of
whatever links he/she clicks on the webpage.
can i achieve this.
thanks very much
Message #2 by Farhan shaikh <shaikh_farhan@y...> on Wed, 20 Jun 2001 03:31:32 -0700 (PDT)
|
|
hi taherm@f...
u are using Form variable rite
but i appending in the address bar ,
a little change might effect ur application secure and
reliable .
By defualt html form use get variable ,
just put the following code
<form action="ur.asp" method="post">
if u passes variable throught query thing then u need
encyption to hide the use ful info
for more info send ur query
with best regard
Farhan Shaikh
--- "taherm@f..."
<taherm@f...> wrote:
> i want to hide any urls in address bar and this for
> security reasons. my
> asp pages passes sensitive data in form of form
> variables in the address
> bar.
> this should be applicable for any user using the
> site. bascially he should
> only see www.mydomain.com and nothing else in the
> address irespective of
> whatever links he/she clicks on the webpage.
> can i achieve this.
> thanks very much
>
>
Message #3 by "TomMallard" <mallard@s...> on Wed, 20 Jun 2001 04:45:15 -0700
|
|
It's easier to convert them to hidden fields and submit the page to the next
one than try to "hide any urls in the address bar". How would you do that
without removing the querystring so it doesn't get to the next page? If the
user can't see it, neither can HTTP.
tom
----- Original Message -----
From: <taherm@f...>
To: "ASP Web HowTo" <asp_web_howto@p...>
Sent: Wednesday, June 20, 2001 10:08 AM
Subject: [asp_web_howto] hide the url from my address bar
> i want to hide any urls in address bar and this for security reasons. my
> asp pages passes sensitive data in form of form variables in the address
> bar.
> this should be applicable for any user using the site. bascially he should
> only see www.mydomain.com and nothing else in the address irespective of
> whatever links he/she clicks on the webpage.
> can i achieve this.
> thanks very much
>
>
Message #4 by ssteward@a... on Wed, 20 Jun 2001 08:39:07 -0500
|
|
You can put it in a frameset and just have 1 frame, the url would
always
stay the same in the address bar...
-----Original Message-----
From: taherm@f...
[mailto:taherm@f...]
Sent: Wednesday, June 20, 2001 5:09 AM
To: ASP Web HowTo
Subject: [asp_web_howto] hide the url from my address bar
i want to hide any urls in address bar and this for security reasons.
my
asp pages passes sensitive data in form of form variables in the
address
bar.
this should be applicable for any user using the site. bascially he
should
only see www.mydomain.com and nothing else in the address irespective
of
whatever links he/she clicks on the webpage.
can i achieve this.
thanks very much
Message #5 by "Taher Moiyed" <taherm@f...> on Wed, 20 Jun 2001 16:36:30 +0100
|
|
thanks a million your logic did work
-----Original Message-----
From: ssteward@a... [mailto:ssteward@a...]
Sent: 20 June 2001 14:39
To: ASP Web HowTo
Subject: [asp_web_howto] RE: hide the url from my address bar
You can put it in a frameset and just have 1 frame, the url would always
stay the same in the address bar...
-----Original Message-----
From: taherm@f...
[mailto:taherm@f...]
Sent: Wednesday, June 20, 2001 5:09 AM
To: ASP Web HowTo
Subject: [asp_web_howto] hide the url from my address bar
i want to hide any urls in address bar and this for security reasons. my
asp pages passes sensitive data in form of form variables in the address
bar.
this should be applicable for any user using the site. bascially he should
only see www.mydomain.com and nothing else in the address irespective of
whatever links he/she clicks on the webpage.
can i achieve this.
thanks very much
Message #6 by "Hong Wang" <hongwang@u...> on Wed, 20 Jun 2001 09:09:25 -0700
|
|
The url can still be inspected by looking at web page's property on IE.
-----Original Message-----
From: Taher Moiyed [mailto:taherm@f...]
Sent: Wednesday, June 20, 2001 8:37 AM
To: ASP Web HowTo
Subject: [asp_web_howto] RE: hide the url from my address bar
thanks a million your logic did work
-----Original Message-----
From: ssteward@a... [mailto:ssteward@a...]
Sent: 20 June 2001 14:39
To: ASP Web HowTo
Subject: [asp_web_howto] RE: hide the url from my address bar
You can put it in a frameset and just have 1 frame, the url would always
stay the same in the address bar...
-----Original Message-----
From: taherm@f...
[mailto:taherm@f...]
Sent: Wednesday, June 20, 2001 5:09 AM
To: ASP Web HowTo
Subject: [asp_web_howto] hide the url from my address bar
i want to hide any urls in address bar and this for security reasons. my
asp pages passes sensitive data in form of form variables in the address
bar.
this should be applicable for any user using the site. bascially he
should
only see www.mydomain.com and nothing else in the address irespective of
whatever links he/she clicks on the webpage.
can i achieve this.
thanks very much
Message #7 by "Daniel Walker" <danielw@w...> on Wed, 20 Jun 2001 17:32:53
|
|
It works, yes, but in any site that uses frames there is a way to load
the content of a given frame separately. For instance, here in Mozilla, I
can right click in the frame area and select "Show Only This Frame" -
which simply breaks the frameset, or "Open Frame In New Window" (which
does exactly what it says on the tin). Konqueror gives me the right-click
options to open in a new window or open with netscape - which has the
same effect but opens with a new instance of Netscape rather than a new
instance of Konqueror. Opera gives me "Frame -> Copy Address"... Netscape
no doubt has it's own variations, but I don't particularly feel the need
to find out what, just now :). Lookinng at a collegaue's copy of Internet
Explorer 6.0, I see that it has the option to view Properties of a
document within a frame, and one of those properties is the name of the
document, of course! In any case, the documents would be held in your
browser's cache as separate documents. If this really is for security
reasons, I think you have to start finding more secure ways of passing
the data around in the first place. Some of the suggestions you've had
already would be good starting points.
Daniel Walker
Wrox Press
> thanks a million your logic did work
>
> -----Original Message-----
> From: ssteward@a... [mailto:ssteward@a...]
> Sent: 20 June 2001 14:39
> To: ASP Web HowTo
> Subject: [asp_web_howto] RE: hide the url from my address bar
>
>
> You can put it in a frameset and just have 1 frame, the url would always
> stay the same in the address bar...
>
> -----Original Message-----
> From: taherm@f...
> [mailto:taherm@f...]
> Sent: Wednesday, June 20, 2001 5:09 AM
> To: ASP Web HowTo
> Subject: [asp_web_howto] hide the url from my address bar
>
>
> i want to hide any urls in address bar and this for security reasons. my
> asp pages passes sensitive data in form of form variables in the address
> bar.
> this should be applicable for any user using the site. bascially he should
> only see www.mydomain.com and nothing else in the address irespective of
> whatever links he/she clicks on the webpage.
> can i achieve this.
> thanks very much
>
Message #8 by ssteward@a... on Wed, 20 Jun 2001 11:35:30 -0500
|
|
Yeah, if you don't want anyone to see the querystring you're passing
around,
use forms instead, I just thought he wanted it to hide from the address
window... It's just a simple solution for cosmetic appeal. You can
put in
javascript code so that you can detect if you're in the frameset, and
if
not, reload the page in the frameset. Of course, you can disable
javascript
to get around this too, but like i said before, this method is purely
cosmetic, it is not secure at all... guess i should've clarified that
in my
original post... :)
shawn
-----Original Message-----
From: Daniel Walker [mailto:danielw@w...]
Sent: Wednesday, June 20, 2001 12:33 PM
To: ASP Web HowTo
Subject: [asp_web_howto] RE: hide the url from my address bar
It works, yes, but in any site that uses frames there is a way to load
the content of a given frame separately. For instance, here in Mozilla,
I
can right click in the frame area and select "Show Only This Frame" -
which simply breaks the frameset, or "Open Frame In New Window" (which
does exactly what it says on the tin). Konqueror gives me the
right-click
options to open in a new window or open with netscape - which has the
same effect but opens with a new instance of Netscape rather than a new
instance of Konqueror. Opera gives me "Frame -> Copy Address"...
Netscape
no doubt has it's own variations, but I don't particularly feel the
need
to find out what, just now :). Lookinng at a collegaue's copy of
Internet
Explorer 6.0, I see that it has the option to view Properties of a
document within a frame, and one of those properties is the name of the
document, of course! In any case, the documents would be held in your
browser's cache as separate documents. If this really is for security
reasons, I think you have to start finding more secure ways of passing
the data around in the first place. Some of the suggestions you've had
already would be good starting points.
Daniel Walker
Wrox Press
> thanks a million your logic did work
>
> -----Original Message-----
> From: ssteward@a...
[mailto:ssteward@a...]
> Sent: 20 June 2001 14:39
> To: ASP Web HowTo
> Subject: [asp_web_howto] RE: hide the url from my address bar
>
>
> You can put it in a frameset and just have 1 frame, the url would
always
> stay the same in the address bar...
>
> -----Original Message-----
> From: taherm@f...
> [mailto:taherm@f...]
> Sent: Wednesday, June 20, 2001 5:09 AM
> To: ASP Web HowTo
> Subject: [asp_web_howto] hide the url from my address bar
>
>
> i want to hide any urls in address bar and this for security reasons.
my
> asp pages passes sensitive data in form of form variables in the
address
> bar.
> this should be applicable for any user using the site. bascially he
should
> only see www.mydomain.com and nothing else in the address irespective
of
> whatever links he/she clicks on the webpage.
> can i achieve this.
> thanks very much
>
---
* Fast, Full-Featured Microsoft=AE Excel Web Reports & Charts!
A breakthrough in high performance Web application development,
SoftArtisans
ExcelWriter 1.1 supports native Excel charting, image insertion, and
advanced functions & formatting. One click generates
presentation-quality
Excel spreadsheets-and ExcelWriter performs over 100 times faster than
the
Excel Object. Several editions, including ExcelWriterFREE, are
available.
http://www.softartisans.com/softartisans/excelwriter.html>
ssteward@a...
$subst('Email.Unsub')
|
|
 |