I have a page called 'logincheck.asp'

If a condition is met then a response.redirect is carried out as per code below:

<%
if rscheck.eof then

response.redirect "/mackenzie/asp/reg.asp?agencyid="&agencyid&"&agentid="&agentid&"& username="&username&"&password="&password&""

end if
%>

How do I hide the values shown in the querystring in the address bar? This is due to the fact the password is shown. All my forms use POST. I thought POST did NOT show the values and GET DID??

Picco

www.crmpicco.co.uk
www.milklemonadechocolate.uk.tt

__________________
_______________________
Ayrshire Minis - a Mini E-Community
http://www.ayrshireminis.com
http://www.crmpicco.co.uk

Hi Picco,

response.redirect is not a form post

HTH,

Chris

i understand that, but how do i hide the values shown in the querystring in the address bar

www.crmpicco.co.uk
www.milklemonadechocolate.uk.tt

As you are specifying the values as a querystring, the only way you can hide this really is to place the whole site in a frameset, but that also hides urls etc.

Can you use cookies instead?

Cheers,

Chris

You write the values to hidden fields and auto post this to the new page. You can also use Server.Transfer (or Server.Execute< one keeps the form values I think). None of these are secure methods though, it just makes it a bit harder to see for casual snoopers.

--

Joe (Microsoft MVP - XML)

Hi Check this link which encrpts the querystring...
http://www.dotnetjunkies.com/HowTo/9...75836DC72.dcik