Sam Rose wrote:
> I'm sending hidden parameters to and from servlet's, but on the URL
> the parameters are being displayed.
>
> I'm sure that this must be some kind of security risk, if so how can I
> hide them, within the URL?
>
Use METHOD="POST" instead of the default METHOD="GET" in your <FORM>
declarations. This causes the form parameters to be sent as data, instead of
in the URL, and also lets you send a lot more stuff if necessary (there is an
upper limit on the length of URL that most web servers can handle).
In your servlet, the doPost() method will be invoked instead of doGet().
Craig McClanahan
>
> ___________________________________________________________________________
> To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
> of the message "signoff SERVLET-INTEREST".
>
> Archives: http://archives.java.sun.com/archives/servlet-interest.html
> Resources: http://java.sun.com/products/servlet/external-resources.html
> LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
