Solved

Hidding Query Strings

Posted on 1997-11-16
4
142 Views
Last Modified: 2013-12-25
Is it possible to hide a quey string ie. ?AccountId=12 when passing this to a CGI, so that a user cannot change the AccountId to another value.
0
Comment
Question by:dl090597
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 7

Accepted Solution

by:
faster earned 50 total points
ID: 1831270
Query string can not be hidden, but you can make it more difficult for a user to change it.  One way is to use POST method, another is to set this in a hidden field.  Or you can consider to use cookie.
0
 
LVL 84

Expert Comment

by:ozo
ID: 1831271
Well, there's
<input type=hidden name=AccountId value=12>
but that doesn't really prevent the user from creating another
page with a different value.
0
 
LVL 84

Expert Comment

by:ozo
ID: 1831272
Although it's hard to hide the actual query strings, you may be able to hide its other valid values
If you use a one-way hash on the value, you could make it very hard for a user to guess what values it would make sense to change it to.
0
 
LVL 2

Expert Comment

by:rigansen
ID: 1831273
I came up with the same question, you can see alamo's answer at the "JavaScript Topic Area" titled "Hiding the Location string from the user".

So far now I think the best approach is a combination of faster's answer and ozo's comment... but if you get a better clue, please leave me a comment... ok??

    Rigansen.
0

Featured Post

The Orion Papers

Are you interested in becoming an AWS Certified Solutions Architect?

Discover a new interactive way of training for the exam.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It is a general practice to get rid of old user profiles on a computer  in a LAN environment. As I have been working with a company in a LAN environment where users move from one place to some other place at times. This will make many user profil…
This article will show, step by step, how to integrate R code into a R Sweave document
Learn the basics of strings in Python: declaration, operations, indices, and slicing. Strings are declared with quotations; for example: s = "string": Strings are immutable.: Strings may be concatenated or multiplied using the addition and multiplic…
Learn the basics of lists in Python. Lists, as their name suggests, are a means for ordering and storing values. : Lists are declared using brackets; for example: t = [1, 2, 3]: Lists may contain a mix of data types; for example: t = ['string', 1, T…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question