Changing the URL Parameters
Written by Eric Smith, Northstar Computer Systems LLC
One of the disadvantages of using command line parameters to link to an ASP file is that the user can simply change those parameters. Depending on the application and what you're using those numbers for, this could be a security risk. If you don't want the user changing them, you need to keep them out of the web page. Even if you put the data as hidden input fields, the user could potentially still change the file and resubmit it from his/her server. If you need to keep confidential data like this, leave it on the server and send a reference to the set of important data instead. That way the user won't know what he/she is changing.
Keywords: [
Uncategorized ASP Tips
]
Publication Date: 5/1/2000
|