Hello and welcome to our community! Is this your first visit?
Register
Enjoy an ad free experience by logging in. Not a member yet? Register.
Results 1 to 2 of 2
  1. #1
    Regular Coder
    Join Date
    Sep 2005
    Posts
    113
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Arrow secure anchor link in JSP

    I have a dynamic anchor link like http://mysite.com?flag=1&name='ganesh'
    name query string changes every time.

    This generated link i am sending by embedding it in to EMAIL Content.
    Once u click on the link it will open details for that name.

    Now the problem is that if i copy and paste the URL and change the name='someothername'. if it exists in my database it works. So How do i encode the query string .

    How to add one more String as id="219837927398217" a random number to the query string.

  • #2
    Senior Coder shyam's Avatar
    Join Date
    Jul 2005
    Posts
    1,563
    Thanks
    2
    Thanked 163 Times in 160 Posts
    you have to use tokens to make sure that for a particular user only one specific url will work. the usual way is to generate a random number and store it in the database for that user for whom you are generating the link. and make sure that you validate the token for that user on whatever script that is getting called
    You never have to change anything you got up in the middle of the night to write. -- Saul Bellow


  •  

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •