Link to home
Start Free TrialLog in
Avatar of purfus
purfus

asked on

Hide a URL

I need to give a user access to a website but attempt to hide the url of that site from them.  I have tried using frames but it does not work.  I believe it is because the site is redirecting to another site and killing the frames.  I am unsure of where or how because the address appears to be the same.  Perhaps they are also hiding a url.  I don't know.  Any ideas?
Avatar of Irwin Santos
Irwin Santos
Flag of United States of America image

how about create a window without the tool bar?
window.open(URL,name,options)
-------------------------
////the options include
toolbar =yes/no
location =yes/no
directories =yes/no
status =yes/no
menubar =yes/no
scrollbars =yes/no
resizable =yes/no
width =nubmer of pixels
height =number of pixels


Here is a sample:
window.open ("windowname.html", "windowname", "width=700,height=500,status=no,menubar=no,scrollbars=no,resizable=no,toolbar=no,location=no")
u can use either irwinpks method try iframe

<iframe src="page.htm" FRAMEBORDER="0" SCROLLING="NO" MARGINHEIGHT="0" MARGINWIDTH="0" HEIGHT="500" WIDTH="500"></iframe>
Avatar of UnexplainedWays
UnexplainedWays

Why not just use frames, with one one frame?


----yoursite.com----
| ----hiddensite----|
|                         |
|                         |
|--------------------|
|--------------------|


Any links within that frame must be done via javascript.  Othrewise they can "open in new window" and get the url easy.  And in that javascrip,t you have to tell it which frame you want to change, so that they are forced to have a frame.

"Accepted Answer from AdrianF   Date: 06/13/2000 07:02AM EDT    Grade: A       Accepted Answer  

There is NO way to hide the URL.  If the browser needs to request the page it needs to know the URL.  If the browser knows the URL then *I* know the URL.  There are workarounds and tricks but NONE of them work 100%.

The only way to give data to the server that the client can't see is to POST a form, transfer the data in cookies or the Session object.

It may not be the answer you want, but there is NO way to hide the URL, live with it. "

-from https://www.experts-exchange.com/questions/10429280/Hide-URL.html?query=hide+a+url&clearTAFilter=true     Active Server Pages (ASP): Hide URL

----------
"Accepted Answer from jaysolomon ...."
"Comment from jaysolomon   Date: 04/03/2003 09:43AM EST         Comment  

there is no way to hide the url in the title bar. that is like a built in feature if you will and there is nothing we can do about it.

The only thing you can do is have a pop up like i did and not show the address bar."\

- From https://www.experts-exchange.com/questions/20572933/Hide-the-url.html?query=hide+a+url&clearTAFilter=true     JavaScript: Hide the url

(The above link shows way to hide address bar)

--------

My comment: Even if you succeed in hiding the url, it's easy for the user to write a script to extract the url from the page displayed in a browser. E.g. this simple script, in a program called Quick Macros, will store the url into a variable called 'url' for an IE window that has handle 'w':
Htm el=htm("" "" "" w 0 0 0x20); str url=el.DocURL
While this https://www.experts-exchange.com/questions/20306262/Hide-the-URL.html  JavaScript: Hide the URL
Just says "You could use frames and redirect one of the frames"
This https://www.experts-exchange.com/questions/21411247/hiding-exact-url.html     Web Development: hiding exact url
Has 2 other answers: using IFRAME, and includes
Avatar of SStory
There is an interesting way of providing a URL.  www.desaware.com offers a product that says it allows you to specify a link and how long it is valid or how many times it can be accessed or by only one IP, etc.  

What I imagine they are doing is generating a fake URL and evaluating the incoming request for the page and taking the known invalid part, looking it up in a database and returning the appropriate information.  There is an article on doing things like this in a book by Stephen Walther ASP.NET Unleashed (2nd Ed.) I believe.

For example:

You offer your site to clients like:  www.mysite.com/JohnDoe

John Doe thinks it is cool that you have a page dedicated to him, but the page really doesn't exist and if you desired could be a page that always changed....I'm not sure if you could use this somehow to your advantage or not--it depends upon what you are trying to accomplish. (unless the link changed continuously (being a fake link), then if one person knows it could be reused.)

HTH

Shane
ASKER CERTIFIED SOLUTION
Avatar of smidgie82
smidgie82
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
What it comes down to is that the few ways there are to do it aren't worth the trouble of doing them.  "proxy" pages are about the only definitive way, but while simple in concept, actual implementation oftern turns quite complex.  That is, unless you control the host that the domain of the url you're trying to mask exists on...then apache can do some interesting things.
Truth, is, as mentioned,  you would be as well off if anyone knew the IP, but everyone was challenged by username password (on an SSL encrypted link) before allowed to get to the link, this should do what you probably want.
I think a delete - no refund, since the experts received zero feedback from the asker to determine if the comments answered the question to his satisfaction.  However, I think a split could be appropriate, as well, since IMO the correct answer is "it's not possible," and that answer was given several times.
Don't delete. Makes a good reference, with or without an accept.
@purfus...did you ABANDON us?
Avatar of purfus

ASKER

Thx all, sorry I had forgot I left this open and havn't had any experts browsing time in a while.  All of them are great answers.  I actually found an alternative solution to my problem.  My goal wasn't to hide the server but to hide the url my provider was sticking in.  Going to the default port for plesk on my server would do a redirect to some script on my provider's servers which would then do something to serv up the plesk admin panel.  Well this would give my clients the web page of my provider which obviously offers cheaper hosting and even pushes small shared hosting services.  Not that I'm ripping my clients or anything but I can't really compete with my distributer so I figured it would be best not to give them their address...  Long story short I found out how to bypass that redirect and leave everything on my domains.  As for the above, I just accepted the most intriguing answer, not that the rest weren't interesting.
Quote: smidgie82:>>All the answers above are right. >>However, I think a split could be appropriate

Split was recommended even by the expert you've awarded...
I have found a better way to do this, but since the question is closed....