Skip to Main Content

Java EE (Java Enterprise Edition) General Discussion

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

how to hide the parameters passed into servlet or make it read only

843841Feb 10 2004 — edited Mar 3 2004
Hi,

I am calling a servlet to downlaod files, using
<a href="../servlet/DownloadFile?directory=<%=attachmentPath%>&fileName=<%=fileName%>">But this will display all the paramters passed , of course as I am using hyper link. However I can not use
<form> to call the servlet because otherwise I got nested form anyway.

So the users would be able to change the directory and file names to download files I do not like them to download. Somebody would suggest hardcode the directory and filename, but these two parameters are dynamic, so I have to pass them into the servlet everytime I call it.

Any advice to disable the users to change or even view the two parameters on the address bar?

Thanks


</a>
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Mar 31 2004
Added on Feb 10 2004
11 comments
1,083 views