w2e Posted December 20, 2004 Posted December 20, 2004 Can you hide HTTP parameters that you pass to a page ? (eg ../categories_edit.php?page=1&categories_id=10&language_id=2). I am modifying oscommerce for my needs slightly and am passing parameters based upon what someone chooses on the screen (eg clicking on the UK flag sets language_id=1, whilst clicking on the german sets language_id=2 etc). It would help with security not to show these (or maybe to encrypt them some way). Thanks Martin
boxtel Posted December 20, 2004 Posted December 20, 2004 Can you hide HTTP parameters that you pass to a page ?(eg ../categories_edit.php?page=1&categories_id=10&language_id=2). I am modifying oscommerce for my needs slightly and am passing parameters based upon what someone chooses on the screen (eg clicking on the UK flag sets language_id=1, whilst clicking on the german sets language_id=2 etc). It would help with security not to show these (or maybe to encrypt them some way). Thanks Martin <{POST_SNAPBACK}> don't think the languages_id constitutes a big security risk Treasurer MFC
w2e Posted December 20, 2004 Author Posted December 20, 2004 Thanks Amanda but languages_id was just an example - it could be any sort of parameter. I really meant for hiding everything - ideally the page being called too, in the way that the 'continue' submit button does (ie you don't see any passed parameters - but these are specified in the form declaration). Really I need to use multiple form submit buttons each having different parameters that I can specify separately and this should work for href links too. Any ideas ? Thanks
boxtel Posted December 20, 2004 Posted December 20, 2004 Thanks Amanda but languages_id was just an example - it could be any sort of parameter.I really meant for hiding everything - ideally the page being called too, in the way that the 'continue' submit button does (ie you don't see any passed parameters - but these are specified in the form declaration). Really I need to use multiple form submit buttons each having different parameters that I can specify separately and this should work for href links too. Any ideas ? Thanks <{POST_SNAPBACK}> you might consider always using POST instead of GET. Not sure if that works for the sid. Treasurer MFC
boxtel Posted December 20, 2004 Posted December 20, 2004 you might consider always using POST instead of GET. Not sure if that works for the sid. <{POST_SNAPBACK}> seen it ones where a site uses frames and the address bar remains on the site's address without any parameters shown. Then again I am not so knowledgable on frames. Treasurer MFC
Recommended Posts
Archived
This topic is now archived and is closed to further replies.