how to hide the parameters passed into servlet or make it read only
843841Feb 10 2004 — edited Mar 3 2004Hi,
I am calling a servlet to downlaod files, using
<a href="../servlet/DownloadFile?directory=<%=attachmentPath%>&fileName=<%=fileName%>">But this will display all the paramters passed , of course as I am using hyper link. However I can not use
<form> to call the servlet because otherwise I got nested form anyway.
So the users would be able to change the directory and file names to download files I do not like them to download. Somebody would suggest hardcode the directory and filename, but these two parameters are dynamic, so I have to pass them into the servlet everytime I call it.
Any advice to disable the users to change or even view the two parameters on the address bar?
Thanks
</a>