2. PHPRunner General questions
  3. How to hide the Url
This topic is locked

How to hide the Url

 		1/4/2010 9:00:35 AM
PHPRunner General questions
D
 dcrera author

Hi
For security reasons I want to hide the Url.
If that can't be done, how can I 'encrypt' the data on the url and 'decrypt' same in the target page ?
Thanks
Sergey Kornilov admin 1/4/2010

I have to ask - what exactly you trying to hide?
D
 		dcrera author 1/5/2010

Hi,
We pass the user id and record key in the url. Some users are copying the url and getting into pages illegally. The user authentication is done on the main page. Now that they can figure out the structure of the url, they are replacing their user id with their supervisor's user id and gaining access to functions they would normally not have.
Sergey Kornilov admin 1/5/2010

It looks like you doing something wrong. No matter what kind of security you use in PHPRunner, permissions are checked on the server side so URL tampering won't get you anywhere.
romaldus 1/6/2010



Hi,
We pass the user id and record key in the url. Some users are copying the url and getting into pages illegally. The user authentication is done on the main page. Now that they can figure out the structure of the url, they are replacing their user id with their supervisor's user id and gaining access to functions they would normally not have.


This is very strange dude.... <img src='https://asprunner.com/forums/file.php?topicimage=1&fieldname=reply&id=46685&image=1&table=forumreplies' class='bbc_emoticon' alt=':)' /> <img src='https://asprunner.com/forums/file.php?topicimage=1&fieldname=reply&id=46685&image=2&table=forumreplies' class='bbc_emoticon' alt=':lol:' />