OraFAQ Forum: WebCenter Suite & Portal » How to hide the URL parameter in mod

Home » Fusion Middleware & Colab Suite » WebCenter Suite & Portal » How to hide the URL parameter in mod_plsql

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

How to hide the URL parameter in mod_plsql [message #117621]

Thu, 28 April 2005 09:50

siddiquifaique
Messages: 1
Registered: April 2005
Location: Mumbai

Junior Member

Hi,
I am using mod_plsql for web site development. I am facing one security problem. In mod_plsql we can pass the stored procedure with parameter directly in the URL.

Could you please tell me how to hide the parameter passed in the URL.

This is similar to the "POST" method in normal HTML page.

It would be great if you will reply me at earliest.

Thanks
Faique

Report message to a moderator

Re: How to hide the URL parameter in mod_plsql [message #117758 is a reply to message #117621]

Fri, 29 April 2005 08:22

Frank Naude
Messages: 4379
Registered: April 1998

Senior Member

You can prevent direct parameter passing by rejecting GET requests and only accepting POST requests.

IF owa_util.get_cgi_env(REQUEST_METHOD') != 'POST' THEN
   htp.p('For security reasons only POST requests are accepted.');
   return;
END IF;

Best regards.

Frank

Report message to a moderator

Previous Topic:	Portal Err : WWV-41439 - You cannot login as no configuration information
Next Topic:	Need help with oracle portal

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Fri May 24 17:09:23 CDT 2013

Total time taken to generate the page: 0.14220 seconds