Home » Developer & Programmer » Forms » Hide username and password in URL
Hide username and password in URL [message #315328] Mon, 21 April 2008 02:24 Go to next message
mm2236
Messages: 6
Registered: April 2008
Location: USA
Junior Member
hi experts

i don't want username & password which is presented in addressbar .

for example in my addressbar : GET Method

http://mm2236:8889/forms/frmservlet?form=test.fmx&userid=SYSTEM&otherparams=useSDI=yes&lookAndFeel=oracle&colorScheme %20=blue

i want for example show it in POST Method .

security is very low !!!

Oracle developer 9i

THANKs ...

[MERGED by LF. Please, do not multipost. Continue discussion (if any) in the original topic]

[Updated on: Mon, 21 April 2008 10:09] by Moderator

Report message to a moderator

Re: Simple Question!!! [message #315393 is a reply to message #315328] Mon, 21 April 2008 06:56 Go to previous messageGo to next message
Littlefoot
Messages: 20901
Registered: June 2005
Location: Croatia, Europe
Senior Member
Account Moderator
Well, don't supply username and password; let user enter his/her credentials.

However, if all your users use the same username/password, you could specify this information in the FORMSWEB.CFG file; for example:
[my_application]
userid=scott/tiger@orcl


Or, you might research use of Single Sign On (SSO)
URL-SECURE [message #315416 is a reply to message #315328] Mon, 21 April 2008 07:50 Go to previous messageGo to next message
mm2236
Messages: 6
Registered: April 2008
Location: USA
Junior Member
Hello
i 'm using oracle 9i developer suite, I am working with forms when I run a form at runtime it displays this kind of information

http://usman.educators.edu.pk:8888/forms90/f90servlet?form=C:\oraprojects\DoubleEntryApp\Register.fmx&userid=SCOTT/TIGER@ali& buffer_records=NO&debug_messages=NO&array=YES&query_only=NO&quiet=NO&RENDER=YES


I want ask a question that how can i remove this information and just see the following url

http://usman.educators.edu.pk:8888/forms90/f90servlet?

because it would make my application secure

THANKS
Re: Hide username and password in URL [message #315476 is a reply to message #315328] Mon, 21 April 2008 12:06 Go to previous message
Kaeluan
Messages: 179
Registered: May 2005
Location: Montreal, Quebec
Senior Member
I recommand doing exactly what Little told you. Using Config file will solve your problem, you can set the value in this file instead of setting it in URL.

Here is what my URL look like

http://infoas.optimumgroup.com:7777/forms/frmservlet?config=ogidev_f

and here is some setting you can set in the config file

    [ogidev_f]
    envfile=OGIDEV_F.env
    separateFrame=True
    form=sag00m01.fmx
    userid=user/pass@db
    otherparams=p_code_lang_ora=F
    logo=no
    width=800
    height=600

hope it help
Previous Topic: How to save multiple entry having checked box and Check box problem (merged)
Next Topic: code for insert,execute,delete records
Goto Forum:
  


Current Time: Fri Dec 09 05:43:20 CST 2016

Total time taken to generate the page: 0.05486 seconds