Frame src parameters

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
 As you know, "Frame" tag has an "src" attribute which can hold a web
address, sometimes with parameters.

 For the same security reasoning for choosing POST over GET method, is
there a way to hide those parameters from the user? So he may not see
them on the statusbar or the address bar?

Thanks, dushkin.

Re: Frame src parameters

jaja wrote:
Quoted text here. Click to load it
As in any other case, only when you are posting the results of a form
submission to the frame.

Re: Frame src parameters

Hi jaja

Quoted text here. Click to load it

Harlan has already given a perfect answer to your actual question, but
your question betrays a misunderstanding which I will try to correct.

There are no significant differences of security between POST and
GET.  You can never hide the values of form fields (which you are
calling "parameters") from the user agent (browser software) or the
user.  Any user can just use the "Page Info" or similar feature to
view the values at any time.

Additionally, any method which protects the data from a third party
(eg: nosy proxy administrator) will either work the same for both POST
and GET, or not work for both.

The reason that you should use POST instead of GET is because making a
request more than once has side-effects (eg: writes to a database).
If making a request more than once has no side-effects (or the same
side-effects as making it once) then you should use GET.

The only other reason that you should choose POST over GET is if your
data set is large (more than a few of hundred bytes) or uses an
unusual character set.


Re: Frame src parameters

Quoted text here. Click to load it

Do you want hide a querry string?

src=" "

If that is what you would like, look into .htaccess and using a



RewriteEngine On
RewriteRule  ^p1$ fly.php?a=apple&b=banana&data=fruit

BootNic                                   Tuesday May 20, 2008 12:53 PM
"If you want to test your memory, try to recall what you were
worrying about one year ago today."

Site Timeline