Miro
|
| Posted: 04/02/2003, 11:54 AM |
|
hey people,
is there any simple way to hide parameters in browser's address bar, or at least restrict users to simply change their id to get somebody else's data?
thanks in advance..
miro.
|
|
|
 |
PvD
|
| Posted: 04/02/2003, 12:37 PM |
|
Hi Miro,
I'm assuming that you mean a newly opened page that displays the followed link in the address bar.
The easiest way would probably be to load a frame inside that new page with the same size as the new window. You then load the data into the frame.
You can have the framespage show a default address in the address bar, while the body of the page is the actual page you wanted.
Hope this helps,
PvD
|
|
|
|
cornwell
|
| Posted: 04/02/2003, 2:04 PM |
|
In header of html page/template put
<script language="JavaScript">
var newWin;
function openNewWin() {
newWin = window.open('login.asp','newWin','toolbar=yes,menubar=yes,location=yes,resizable=yes,scrollbars=yes,status=yes');
}
</script>
That line starting newWin = is ONE line - it might get broken rendering here.
From this point the address bar is not so easily spoofed - this only stops casual users.
Then your link has the call, e.g.
<a href="" onclick="return openNewWin()">Click me<a>
or
<input type="button" Value = "Login" onclick="return openNewWin()">
HTH
cornwell
|
|
|
|
cornwell
|
| Posted: 04/02/2003, 2:29 PM |
|
ahh.. cut 'n' pasted and didn't read closely...
Of course, change the param to location = no to hide the address bar...
Guess you worked that out anyway...
MC
|
|
|
|
PvD
|
| Posted: 04/03/2003, 1:03 AM |
|
Hmmm... didn't at first think of the above solution.
But that solution hides the entire address bar, which may or may not be what you want.
grtz,
PvD
|
|
|
|
Miro
|
| Posted: 04/03/2003, 8:28 AM |
|
thanks guys, appreciate you help.. works fine now..
|
|
|
|
|
