Solved

Hidding Query Strings

Posted on 1997-11-16
4
136 Views
Last Modified: 2013-12-25
Is it possible to hide a quey string ie. ?AccountId=12 when passing this to a CGI, so that a user cannot change the AccountId to another value.
0
Comment
Question by:dl090597
  • 2
4 Comments
 
LVL 7

Accepted Solution

by:
faster earned 50 total points
ID: 1831270
Query string can not be hidden, but you can make it more difficult for a user to change it.  One way is to use POST method, another is to set this in a hidden field.  Or you can consider to use cookie.
0
 
LVL 84

Expert Comment

by:ozo
ID: 1831271
Well, there's
<input type=hidden name=AccountId value=12>
but that doesn't really prevent the user from creating another
page with a different value.
0
 
LVL 84

Expert Comment

by:ozo
ID: 1831272
Although it's hard to hide the actual query strings, you may be able to hide its other valid values
If you use a one-way hash on the value, you could make it very hard for a user to guess what values it would make sense to change it to.
0
 
LVL 2

Expert Comment

by:rigansen
ID: 1831273
I came up with the same question, you can see alamo's answer at the "JavaScript Topic Area" titled "Hiding the Location string from the user".

So far now I think the best approach is a combination of faster's answer and ozo's comment... but if you get a better clue, please leave me a comment... ok??

    Rigansen.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction:   Welcome to my first article ever. To begin with, the reason I write this article.  I participated in a question on Experts Exchange about the start command in Windows and there were some discussion about the usage. The discussio…
If you get a (Blue Screen of Death), your system writes a small file called a minidump. Your first step is to make certain your computer is setup to record memory dumps. Right click My Computer, choose properties. Click on the advanced tab, an…
Learn the basics of modules and packages in Python. Every Python file is a module, ending in the suffix: .py: Modules are a collection of functions and variables.: Packages are a collection of modules.: Module functions and variables are accessed us…
The viewer will learn how to dynamically set the form action using jQuery.

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question