Home » Fusion Middleware & Colab Suite » WebCenter Suite & Portal » How to hide the URL parameter in mod_plsql
How to hide the URL parameter in mod_plsql [message #117621] Thu, 28 April 2005 09:50 Go to next message
siddiquifaique
Messages: 1
Registered: April 2005
Location: Mumbai
Junior Member
Hi,
I am using mod_plsql for web site development. I am facing one security problem. In mod_plsql we can pass the stored procedure with parameter directly in the URL.

Could you please tell me how to hide the parameter passed in the URL.

This is similar to the "POST" method in normal HTML page.

It would be great if you will reply me at earliest.

Thanks
Faique
Re: How to hide the URL parameter in mod_plsql [message #117758 is a reply to message #117621] Fri, 29 April 2005 08:22 Go to previous message
Frank Naude
Messages: 4579
Registered: April 1998
Senior Member
You can prevent direct parameter passing by rejecting GET requests and only accepting POST requests.

IF owa_util.get_cgi_env(REQUEST_METHOD') != 'POST' THEN
   htp.p('For security reasons only POST requests are accepted.');
   return;
END IF;


Best regards.

Frank
Previous Topic: Portal Err : WWV-41439 - You cannot login as no configuration information
Next Topic: Need help with oracle portal
Goto Forum:
  


Current Time: Thu Mar 28 15:31:13 CDT 2024