Solved

Hidding Query Strings

Posted on 1997-11-16
4
137 Views
Last Modified: 2013-12-25
Is it possible to hide a quey string ie. ?AccountId=12 when passing this to a CGI, so that a user cannot change the AccountId to another value.
0
Comment
Question by:dl090597
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 7

Accepted Solution

by:
faster earned 50 total points
ID: 1831270
Query string can not be hidden, but you can make it more difficult for a user to change it.  One way is to use POST method, another is to set this in a hidden field.  Or you can consider to use cookie.
0
 
LVL 84

Expert Comment

by:ozo
ID: 1831271
Well, there's
<input type=hidden name=AccountId value=12>
but that doesn't really prevent the user from creating another
page with a different value.
0
 
LVL 84

Expert Comment

by:ozo
ID: 1831272
Although it's hard to hide the actual query strings, you may be able to hide its other valid values
If you use a one-way hash on the value, you could make it very hard for a user to guess what values it would make sense to change it to.
0
 
LVL 2

Expert Comment

by:rigansen
ID: 1831273
I came up with the same question, you can see alamo's answer at the "JavaScript Topic Area" titled "Hiding the Location string from the user".

So far now I think the best approach is a combination of faster's answer and ozo's comment... but if you get a better clue, please leave me a comment... ok??

    Rigansen.
0

Featured Post

Guide to Performance: Optimization & Monitoring

Nowadays, monitoring is a mixture of tools, systems, and codes—making it a very complex process. And with this complexity, comes variables for failure. Get DZone’s new Guide to Performance to learn how to proactively find these variables and solve them before a disruption occurs.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If you get a (Blue Screen of Death), your system writes a small file called a minidump. Your first step is to make certain your computer is setup to record memory dumps. Right click My Computer, choose properties. Click on the advanced tab, an…
A quick Powershell script I wrote to find old program installations and check versions of a specific file across the network.
The viewer will learn how to create a basic form using some HTML5 and PHP for later processing. Set up your basic HTML file. Open your form tag and set the method and action attributes.: (CODE) Set up your first few inputs one for the name and …
Video by: Mark
This lesson goes over how to construct ordered and unordered lists and how to create hyperlinks.

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question