one workaround might be not to include the request you need to send to get the image ( <img src="...&response=jpg"> ) but calling a servlet without sensitive parameters, which first retrieves and then sends the image.
... <img src=".../yourservlet?imagedetails=d1&imagedetails2=d2"> ... your servlet adds password=yourpass&response=jpg and calls your image provider. you have to write this servlet and deal with the content type though. i hope somebody comes up with a smarter solution :( markus Laing Susan wrote: > We have subscribed to a service whereby we send a url to the website of the > company we have bought the service from > > > http://www.somecompany.com?login=fred&password=mypass&imagedetails=details1&; > imagedetails2=details2&response=url > > this then tells us the correct image to display on our web page by returning > the url of the specific image. If I were to type this in to > the browser address bar, the url to the image would be displayed in my > browser, not the image. > > I have it working by embedding the url into my web page with the final > parameter set to &response=jpg, and this displays the > image directly in my page. This is fine, but very insecure as my username > and password are shown in the html source. > > It will be different every time someone accesses the web page. I know how > to embed the url into my web page so as to > display the image, and I know how to redirect to an external url, but to > call an external url which returns the url to the image > as a response parameter, I am not sure about. > > Susan ___________________________________________________________________________ To unsubscribe, send email to [EMAIL PROTECTED] and include in the body of the message "signoff SERVLET-INTEREST". Archives: http://archives.java.sun.com/archives/servlet-interest.html Resources: http://java.sun.com/products/servlet/external-resources.html LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
