RE: Securing a URL, Can it be done?

From: <Val_Gamerman/Victoria_Financial.VICTORIA_FINANCIAL_at_lnn.com>
Date: Thu, 24 Aug 2000 17:23:06 -0400
Message-Id: <10599.115513@fatcity.com>

You are correct. If you use METHOD="POST" as the attribute on the form that gives access to this URL you will not see not just the username/password but none of the parameters within the form in the URL.

However this does not mean that you have "secured URL". The data will still go unencrypted over the network.

Val Gamerman.

To:       Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com>
cc:        (bcc: Val Gamerman/Victoria Financial)
From:     Glenn Travis <Glenn.Travis_at_wcom.com> @ NOTES NET
Date:     08/24/2000 05:41:05 PM GMT

Subject: RE: Securing a URL, Can it be done?

I seem to remember that POST and GET do different things. One displays the embedded URL and the other doesn't. But both behave the same as far as passing info...
HTML gurus?
> -----Original Message-----
> From: root_at_fatcity.com [mailto:root_at_fatcity.com]On Behalf Of Peter
> Hazelton
> Sent: Thursday, August 24, 2000 11:52 AM
> To: Multiple recipients of list ORACLE-L
> Subject: Securing a URL, Can it be done?
>
>
> Hello Everyone
>
> I have a report server set up on my machine where I am hosting
> some Oracle
> Reports. Say the connect string is the following:
>
> http://mymachine:port_num/dev60cgi/rwcgi60.exe?report=test.rdf+use
> rid=user/password@
> hoststring+destype=cache+desfomat=HTML+server=SERVER_NAME
>
> This part works very well as I am able to run my report over my
> intranet no
> problem. The problem I am having is that I do not want my database
> username/password to show up in the URL as this poses an obvious security
> issue.
>
> My plan is to make a home page where people select their report
> to run, they
> click on the link and the report runs. But how do I make the link so that
> people do not see the connection information? I would appreciate any help
> you can give me.
>
> Peter
>
>
> ________________________________________________________________________
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
> --
> Author: Peter Hazelton
> INET: peterhazelton_at_hotmail.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>

--
Author: Glenn Travis
  INET: Glenn.Travis_at_wcom.com
Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may

Received on Thu Aug 24 2000 - 16:23:06 CDT