944,210 Members | Top Members by Rank

Ad:
Sep 4th, 2006
0

Small but Serius Probs with GET req. method !

Expand Post »
Here is a problem faced by me while handling the GET request method :

suppose the login form has user-id and password fields as text boxes. now after clicking on "sign-in" button the address bar of the following page(i.e the homepage of a particular member) shows:

<serverURL>.php?id=<someID>&pass=<somePass>

- where "id" and "pass" are the names of above mentioned textfields of login form. The technique works fine, except the password is clearly displayed in the address bar. Any person havig very little intelligence will at once decode it and know the password of the user beside him. Now my qtn is, how to tackle with this shortcoming ?

REMEMBER: I have to do it by GET method only, and not by POST !
Reputation Points: 10
Solved Threads: 0
Newbie Poster
mahul000 is offline Offline
8 posts
since Sep 2006
Sep 5th, 2006
0

Re: Small but Serius Probs with GET req. method !

Please use code tags. Please use English, rather than bizarre abbreviations.

What you're describing is normal behavior for the "GET" method. By definition, GET places values on the querystring. Sorry.

There is no way to secure a website using either GET or POST.
Team Colleague
Reputation Points: 227
Solved Threads: 37
Made Her Cry
tgreer is offline Offline
1,697 posts
since Dec 2004

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.
Message:
Previous Thread in HTML and CSS Forum Timeline: finding out variable type from html input type tag in javascsript
Next Thread in HTML and CSS Forum Timeline: Any idea what would cause this?





About Us | Contact Us | Advertise | Acceptable Use Policy
Forum Index | Build Custom RSS Feed


Follow us on Twitter


© 2011 DaniWeb® LLC