Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Hiding page parameters


w2e

Recommended Posts

Posted

Can you hide HTTP parameters that you pass to a page ?

(eg ../categories_edit.php?page=1&categories_id=10&language_id=2).

 

I am modifying oscommerce for my needs slightly and am passing parameters based upon what someone chooses on the screen (eg clicking on the UK flag sets language_id=1, whilst clicking on the german sets language_id=2 etc).

It would help with security not to show these (or maybe to encrypt them some way).

 

Thanks

Martin

Posted
Can you hide HTTP parameters that you pass to a page ?

(eg ../categories_edit.php?page=1&categories_id=10&language_id=2).

 

I am modifying oscommerce for my needs slightly and am passing parameters based upon what someone chooses on the screen (eg clicking on the UK flag sets language_id=1, whilst clicking on the german sets language_id=2 etc).

It would help with security not to show these (or maybe to encrypt them some way).

 

Thanks

Martin

 

 

don't think the languages_id constitutes a big security risk

Treasurer MFC

Posted

Thanks Amanda but languages_id was just an example - it could be any sort of parameter.

I really meant for hiding everything - ideally the page being called too, in the way that the 'continue' submit button does (ie you don't see any passed parameters - but these are specified in the form declaration).

 

Really I need to use multiple form submit buttons each having different parameters that I can specify separately and this should work for href links too.

 

Any ideas ?

Thanks

Posted
Thanks Amanda but languages_id was just an example - it could be any sort of parameter.

I really meant for hiding everything - ideally the page being called too, in the way that the 'continue' submit button does (ie you don't see any passed parameters - but these are specified in the form declaration). 

 

Really I need to use multiple form submit buttons each having different parameters that I can specify separately and this should work for href links too.

 

Any ideas ?

Thanks

 

you might consider always using POST instead of GET. Not sure if that works for the sid.

Treasurer MFC

Posted
you might consider always using POST instead of GET. Not sure if that works for the sid.

 

 

seen it ones where a site uses frames and the address bar remains on the site's address without any parameters shown. Then again I am not so knowledgable on frames.

Treasurer MFC

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...