Re: Re: Avoid the address toolbar -- WEB400

Subject: Re: [WEB400] Re: Avoid the address toolbar
From: "Nathan M. Andelin" <nandelin@xxxxxxxxxxxxxxxxxxx>
Date: Mon, 21 Jul 2003 10:45:44 -0600
List-archive: <http://archive.midrange.com/web400>
List-help: <mailto:web400-request@midrange.com?subject=help>
List-id: Web Enabling the AS400 / iSeries <web400.midrange.com>
List-post: <mailto:web400@midrange.com>
List-subscribe: <http://lists.midrange.com/mailman/listinfo/web400>,<mailto:web400-request@midrange.com?subject=subscribe>
List-unsubscribe: <http://lists.midrange.com/mailman/listinfo/web400>,<mailto:web400-request@midrange.com?subject=unsubscribe>

> From: "Hans Boldt" <boldt@xxxxxxxxxx>
> BTW, if you're concerned about hacking, do you encrypt your
> cookie values?

I use an algorithm to generate a meaningless and unique "Session ID", which
is the only value stored in the cookie.  Developers who take the
multi-parameter approach might run into pranksters passing various
combinations of parameters just to mess with the program logic, resulting in
more bases for the programmer to cover.

Nathan M. Andelin
www.relational-data.com

As an Amazon Associate we earn from qualifying purchases.

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.