OraFAQ Forum: Forms » Hide username and password in URL

Home » Developer & Programmer » Forms » Hide username and password in URL

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Hide username and password in URL [message #315328]

Mon, 21 April 2008 02:24

mm2236
Messages: 6
Registered: April 2008
Location: USA

Junior Member

hi experts

i don't want username & password which is presented in addressbar .

for example in my addressbar : GET Method

http://mm2236:8889/forms/frmservlet?form=test.fmx&userid=SYSTEM&otherparams=useSDI=yes&lookAndFeel=oracle&colorScheme %20=blue

i want for example show it in POST Method .

security is very low !!!

Oracle developer 9i

THANKs ...

[MERGED by LF. Please, do not multipost. Continue discussion (if any) in the original topic]

[Updated on: Mon, 21 April 2008 10:09] by Moderator

Report message to a moderator

Re: Simple Question!!! [message #315393 is a reply to message #315328]

Mon, 21 April 2008 06:56

Littlefoot
Messages: 21818
Registered: June 2005
Location: Croatia, Europe

Senior Member
Account Moderator

Well, don't supply username and password; let user enter his/her credentials.

However, if all your users use the same username/password, you could specify this information in the FORMSWEB.CFG file; for example:

[my_application]
userid=scott/tiger@orcl

Or, you might research use of Single Sign On (SSO)

Report message to a moderator

URL-SECURE [message #315416 is a reply to message #315328]

Mon, 21 April 2008 07:50

mm2236
Messages: 6
Registered: April 2008
Location: USA

Junior Member

Hello
i 'm using oracle 9i developer suite, I am working with forms when I run a form at runtime it displays this kind of information

http://usman.educators.edu.pk:8888/forms90/f90servlet?form=C:\oraprojects\DoubleEntryApp\Register.fmx&userid=SCOTT/TIGER@ali& buffer_records=NO&debug_messages=NO&array=YES&query_only=NO&quiet=NO&RENDER=YES

I want ask a question that how can i remove this information and just see the following url

http://usman.educators.edu.pk:8888/forms90/f90servlet?

because it would make my application secure

THANKS

Report message to a moderator

Re: Hide username and password in URL [message #315476 is a reply to message #315328]

Mon, 21 April 2008 12:06

Kaeluan
Messages: 179
Registered: May 2005
Location: Montreal, Quebec

Senior Member

I recommand doing exactly what Little told you. Using Config file will solve your problem, you can set the value in this file instead of setting it in URL.

Here is what my URL look like

http://infoas.optimumgroup.com:7777/forms/frmservlet?config=ogidev_f

and here is some setting you can set in the config file

    [ogidev_f]
    envfile=OGIDEV_F.env
    separateFrame=True
    form=sag00m01.fmx
    userid=user/pass@db
    otherparams=p_code_lang_ora=F
    logo=no
    width=800
    height=600

hope it help

Report message to a moderator

Previous Topic:	How to save multiple entry having checked box and Check box problem (merged)
Next Topic:	code for insert,execute,delete records

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Fri Sep 27 12:24:54 CDT 2024