Does anybody have practical experience, code examples or articles on how to
best avoid putting parameters within the URI of a servlet?

HTTP forms are one solution but ideally it would be nice to hide this type
of implementation avoiding malicious URL/URI calls. Session Management
techniques could be used in conjunction with any suggestions.

Don't want!     <servletName>?mode=I'mhackable&mode=soamI

Want!         <servletName>

     Stuart Hemmings
     Imagine Broadband Limited


e    [EMAIL PROTECTED]
w   www.imaginebroadband.com
This e-mail and any attachments are confidential and may also be privileged.
If you are not the intended recipient (or have received this e-mail in
error) please  notify the sender immediately and destroy this e-mail. Any
unauthorised copying, disclosure or distribution of the material in this
e-mail is strictly forbidden.

___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".

Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html

Reply via email to