RE: [WEB400] Avoid the address toolbar

["Hatzenbeler, Tim" <thatzenbeler@xxxxxxxxxxxxx>]

And the really smart people will use a tool like brad's geturi, and send a
page a url with all the parameters and download the data... 

tim

> -----Original Message-----
> From: MEovino@xxxxxxxxxxxxxxxxx [SMTP:MEovino@xxxxxxxxxxxxxxxxx]
> Sent: Thursday, July 17, 2003 4:34 PM
> To:   Web Enabling the AS400 / iSeries
> Subject:      RE: [WEB400] Avoid the address toolbar
> 
> 
> Peter,
> 
> In addition to this, you can foil "semi-smart" users by opening a new
> browser window with JavaScript that does not have an address bar.  Really
> smart users can right click on the page, pick Properties and view the URL
> and copy and paste it into a full browser window, but few know how to do
> this.
> 
> Mike E.
> 
> 
> 
> 
> Maybe only allow POST not GET?
> 
> -----Original Message-----
> From: Hatzenbeler, Tim [mailto:thatzenbeler@xxxxxxxxxxxxx]
> Sent: Thursday, July 17, 2003 2:57 PM
> To: 'Web Enabling the AS400 / iSeries'
> Subject: RE: [WEB400] Avoid the address toolbar
> 
> 
> What I have done... And it's been a while, is pass my variables via form
> variables from one page to another, to avoid them showing up in the url...
> And then when I open the new page, I read the referer (?) URL, if the URL
> did not match what I expected, i send the page to an error page, this
> avoided page hopping, and paramater overrides..  i think...  I don't
> remember how complete my testing was, but it was for an intranet app, so I
> was too worried...  It wasn't a payroll lookup or anything...
> 
> tim
> 
> > -----Original Message-----
> > From:         Peter Vidal [SMTP:Peter_Vidal@xxxxxxxx]
> > Sent:         Thursday, July 17, 2003 12:38 PM
> > To:           web400@xxxxxxxxxxxx
> > Subject:           [WEB400] Avoid the address toolbar
> >
> > Is there a way that programmatically we can deactivate the address
> toolbar
> > whenever a specific page is loaded?  I am trying to control "smart
> users"
> > that
> > are editing the paths coded in the address box and replacing parameters
> > with
> > their own.
> >
> > Any ideas?
> >
> > TIA,
> > Peter Vidal
> > Pall Aeropower Corp.
> > SR Programmer Analyst
> > WWW.Pall.com / 727-539-8448, x2414
> >
> > "A good player makes himself look good; a great player makes the team
> look
> > good."
> > Author unknown
> >
> >
> > _______________________________________________
> > This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> > To post a message email: WEB400@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/web400
> > or email: WEB400-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/web400.
> This e-mail message, including any attachments, is for the sole use of the
> intended recipient(s) and may contain confidential or privileged
> information.  Any unauthorized review, use, disclosure or distribution is
> prohibited.  If you are not the intended recipient, please contact the
> sender by reply e-mail and destroy the message.
> _______________________________________________
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.
> _______________________________________________
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.
> 
> 
> 
> 
> 
> _______________________________________________
> This is the Web Enabling the AS400 / iSeries (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.
This e-mail message, including any attachments, is for the sole use of the
intended recipient(s) and may contain confidential or privileged
information.  Any unauthorized review, use, disclosure or distribution is
prohibited.  If you are not the intended recipient, please contact the
sender by reply e-mail and destroy the message.