Click here to Skip to main content
15,923,087 members
Home / Discussions / Web Development
   

Web Development

 
AnswerRe: bypass variables between pages Pin
Manas Bhardwaj7-Aug-08 23:24
professionalManas Bhardwaj7-Aug-08 23:24 
GeneralRe: bypass variables between pages Pin
michael_jhons7-Aug-08 23:37
michael_jhons7-Aug-08 23:37 
AnswerRe: bypass variables between pages Pin
Johnny ²8-Aug-08 1:33
Johnny ²8-Aug-08 1:33 
GeneralRe: bypass variables between pages Pin
michael_jhons8-Aug-08 2:08
michael_jhons8-Aug-08 2:08 
GeneralRe: bypass variables between pages Pin
Perspx8-Aug-08 3:05
Perspx8-Aug-08 3:05 
GeneralRe: bypass variables between pages Pin
michael_jhons8-Aug-08 3:10
michael_jhons8-Aug-08 3:10 
GeneralRe: bypass variables between pages Pin
Perspx8-Aug-08 3:12
Perspx8-Aug-08 3:12 
AnswerRe: bypass variables between pages Pin
Shog98-Aug-08 5:09
sitebuilderShog98-Aug-08 5:09 
A few things:
  1. You don't control the client. Obvious, right? But i'll repeat it, because too many web devs forget this and we all suffer for it: you don't control the client. So no, you can't hide the address bar, and even if you could there's no guarantee the user couldn't un-hide it, or that the "hide" function would work on all browsers, etc. But more importantly,
  2. A determined user can change anything that gets sent from the client to the server. The address bar is a bit easier to change than, say, POST data... but a savvy user can throw a custom POST together in seconds. Same with cookies. How do you prevent this? You can't - see #1.
  3. Javascript isn't secure. Again, it's maybe a bit less obvious than the URL in the address bar, but just as most browsers let you "View Source" to see how the page itself is built, most also allow debuggers to be attached or custom Javascript (bookmarklets, etc) to be inserted into the page such that variables can be read, edited, etc. I've used this many times on commercial sites to work around breakage, and less kind users may well use it for more nefarious means. Same goes, more or less, for Java applets, Flash, Silverlight, etc... See #1.
Summary: Don't pass anything to the client you don't want the user to see or change. Ever.



Citizen 20.1.01
'The question is,' said Humpty Dumpty, 'which is to be master - that's all.'

GeneralRe: bypass variables between pages Pin
michael_jhons8-Aug-08 6:35
michael_jhons8-Aug-08 6:35 
GeneralRe: bypass variables between pages Pin
Shog98-Aug-08 6:39
sitebuilderShog98-Aug-08 6:39 
QuestionDeploying a web service Pin
mreynol57-Aug-08 11:14
mreynol57-Aug-08 11:14 
QuestionHow can I open a JSF page as a non modal dialog Pin
san_sim7-Aug-08 10:10
san_sim7-Aug-08 10:10 
QuestionAdding video to Web page Pin
salil_k_singh7-Aug-08 8:57
salil_k_singh7-Aug-08 8:57 
AnswerRe: Adding video to Web page Pin
Perspx7-Aug-08 9:31
Perspx7-Aug-08 9:31 
AnswerRe: Adding video to Web page Pin
Manas Bhardwaj8-Aug-08 5:35
professionalManas Bhardwaj8-Aug-08 5:35 
QuestionAccess values of programatically added controls in a asp.net web page Pin
Kiefie7-Aug-08 4:23
Kiefie7-Aug-08 4:23 
AnswerRe: Access values of programatically added controls in a asp.net web page Pin
Shog97-Aug-08 5:26
sitebuilderShog97-Aug-08 5:26 
AnswerRe: Access values of programatically added controls in a asp.net web page Pin
michael_jhons7-Aug-08 23:31
michael_jhons7-Aug-08 23:31 
GeneralRe: Access values of programatically added controls in a asp.net web page Pin
Kiefie7-Aug-08 23:55
Kiefie7-Aug-08 23:55 
QuestionSimulate Alt+Down Arrow using javascript Pin
Anudeep Jaiswal6-Aug-08 21:59
Anudeep Jaiswal6-Aug-08 21:59 
AnswerRe: Simulate Alt+Down Arrow using javascript Pin
Perspx6-Aug-08 23:08
Perspx6-Aug-08 23:08 
QuestionWebservice on Multiple servers Pin
balu123456-Aug-08 6:25
balu123456-Aug-08 6:25 
QuestionIE6.0: Operation Aborted Error Messge Pin
flyingfalcon6-Aug-08 0:54
flyingfalcon6-Aug-08 0:54 
AnswerRe: IE6.0: Operation Aborted Error Messge Pin
Shog96-Aug-08 4:56
sitebuilderShog96-Aug-08 4:56 
GeneralRe: IE6.0: Operation Aborted Error Messge Pin
neilmajithia12-Aug-08 1:42
neilmajithia12-Aug-08 1:42 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.