Aparajita,
Somebody seeing ?recnum=1108 or such is going to try to see what happens
with ?recnum=???.
Yes it can be trapped after, but it would be nice to make it obscured.

Mike Vogt
Millennium Data Services, Inc.

> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> Aparajita Fishman
> Sent: Friday, September 02, 2005 1:43 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [Active4d-dev] Data hiding techniques
> 
> >> You could encode the querystring when writing it into HTML 
> as a link 
> >> and then decode it when you receive the page using a reverse 
> >> algorithm. For example, write the link as page.a4d?
> >> kdfh=89df798sdf79s8f and then use MD5 to decode the value and 
> >> variable name.  That way, both the query string variable name and 
> >> value are both hidden, and can't be easily decrypted.
> >>
> > Would you mind sharing a little more info on this technique?  
> > Certainly not enough to compromise your system, but could 
> you say how 
> > you are encoding/decoding to MD5 and how you are making the encoded 
> > values web safe.
> 
> You can't decode MD5. It's a one-way hash. I would still like 
> to know _why_ you want to encrypt the link, that will help me 
> suggest a solution.
> 
> Regards,
> 
>     Aparajita
>     Victory-Heart Productions
>     www.aparajitaworld.com
> 
>     "If you dare to fail, you are bound to succeed."
>     - Sri Chinmoy   |   www.srichinmoylibrary.com
> 
> _______________________________________________
> Active4D-dev mailing list
> [email protected]
> http://mailman.aparajitaworld.com/mailman/listinfo/active4d-dev
> Archives: http://mailman.aparajitaworld.com/archive/active4d-dev/
> 

_______________________________________________
Active4D-dev mailing list
[email protected]
http://mailman.aparajitaworld.com/mailman/listinfo/active4d-dev
Archives: http://mailman.aparajitaworld.com/archive/active4d-dev/

Reply via email to