Peter, thanks for the information. Also, thanks for mentioning the forum
resource. I was unaware of the domain and will visit to see what it offers.
***
Regards,
Joe W Holt
Sr Programmer/Developer
Jack Onofrio Dog Shows, LLC
405.427.8181
From: Peter Connell <Peter.Connell@xxxxxxxxxx>
To: "Web Enabling the IBM i (AS/400 and iSeries)"
<web400@xxxxxxxxxxxx>
Date: 10/24/2014 07:24 PM
Subject: Re: [WEB400] Net.Data and session management
Sent by: "WEB400" <web400-bounces@xxxxxxxxxxxx>
IBM's engineer, Nadir Amra, who is responsible for Net.data, has always
assured that there is no commitment to remove Net.data from OS/400 as they
have done for other platforms.
You should take comfort that the IBM web based administration of digital
certificates via *ADMIN server has always employed Net.data and still runs
their original Net.data macros, some of which are quite intriguing to
examine. I consider it like REXX, which I use all the time (because it can
script both CLP and SQL in the same code) and possibly a bit like CLP.
These things are used all over the place for years. They matter little to
IBM as flagship products so they care less if they cease upgrading or even
supporting them. I would expect they may reconsider such removal like they
did when they displeases CGIDEV2 users when they tried to do something that
was going to mess with the Easy400 website. They did drop support for the
Net.data forum but I revived that all by myself and still pay the annual
rego fee for the dtwdude.com domain, even though sod all people visit the
site anymore
Peter.
-----Original Message-----
From: WEB400 [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Joe W Holt
Sent: Saturday, 25 October 2014 7:47 a.m.
To: Web Enabling the IBM i (AS/400 and iSeries)
Subject: Re: [WEB400] Net.Data and session management
Yes, the unique key mechanism as a decent security catch a decade ago.
Nowadays, not so much. The javascript disable event I may have to look at.
Won't keep the user from refreshing the page but the biggest issue
definitely is the double click. Appreciate that little tip.
***
Regards,
Joe W Holt
Sr Programmer/Developer
Jack Onofrio Dog Shows, LLC
405.427.8181
From: Nathan Andelin <nandelin@xxxxxxxxx>
To: "Web Enabling the IBM i (AS/400 and iSeries)"
<web400@xxxxxxxxxxxx>
Date: 10/24/2014 01:43 PM
Subject: Re: [WEB400] Net.Data and session management
Sent by: "WEB400" <web400-bounces@xxxxxxxxxxxx>
I'm vaguely aware of the practice of generating a unique query string
parameter in URLs as a security mechanism. It also as the effect of
ensuring that users never see cached pages.
Regarding the problem of double-clicking on submit buttons and hyperlinks,
some developers use JavaScript to disable the event after the first click,
then re-enable it in the response.
Nathan.
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list To post a message email: WEB400@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list To post a message email: WEB400@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/web400.
#####################################################################################
This correspondence is for the named person's use only. It may
contain confidential or legally privileged information, or both.
No confidentiality or privilege is waived or lost by any
mistransmission. If you receive this correspondence in error,
please immediately delete it from your system and notify the sender.
You must not disclose, copy or rely on any part of this correspondence
if you are not the intended recipient. Any views expressed in this
message are those of the individual sender, except where the sender
expressly, and with authority, states them to be the views of
Veda. If you need assistance, please contact Veda :-
Australia
http://www.veda.com.au/contact-us or New Zealand +64 9 367 6200
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit:
http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at
http://archive.midrange.com/web400.
midrange.com
