|
Home > Archive > IIS Server Security > February 2005 > IIS 5.1 from XP
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
| Maileen 2005-02-02, 5:55 pm |
| Hi,
I'm looking for a way how to hide all URL in my web browser.
i don't want to use the frame for that...
for example :
my welcome page is : www.test.com (thanks IIS settings regarding first
page), but after if i place the mouse cursor on "tasks" link, status bar
shown me :www.test.com/tasks.php.
if i click on this link, the same address (www.test.com/tasks.php) is
shown in my address bar.
How can i hide this non secured thing ?
thanks a lot,
Maileen
| |
| Tom Kaminski [MVP] 2005-02-02, 5:55 pm |
| "Maileen" <nospan@noemail.com> wrote in message
news:opsllap4si2tw7ck@nb2800...
> Hi,
>
> I'm looking for a way how to hide all URL in my web browser.
> i don't want to use the frame for that...
>
> for example :
>
> my welcome page is : www.test.com (thanks IIS settings regarding first
> page), but after if i place the mouse cursor on "tasks" link, status bar
> shown me :www.test.com/tasks.php.
>
> if i click on this link, the same address (www.test.com/tasks.php) is
> shown in my address bar.
>
> How can i hide this non secured thing ?
You can't.
| |
| Kristofer Gafvert 2005-02-03, 5:52 pm |
| Hi,
Frames is the only way to _hide_ the full URL. It is not in any way
insecure to show the full URL in the address bar. The client needs to know
the full URL, to be able to request different pages from the webserver.
Your implementation of security is wrong if you need to hide the URL for
the user (because there is always a way to get the full URL), and you
should implement some other security on your website.
--
Regards,
Kristofer Gafvert
www.gafvert.info - My Articles and help
www.ilopia.com
Maileen wrote:
> Hi,
>
> I'm looking for a way how to hide all URL in my web browser.
> i don't want to use the frame for that...
>
> for example :
>
> my welcome page is : www.test.com (thanks IIS settings regarding first
page), but after if i place the mouse cursor on "tasks" link, status bar
shown me :www.test.com/tasks.php.
>
> if i click on this link, the same address (www.test.com/tasks.php) is
shown in my address bar.
>
> How can i hide this non secured thing ?
>
> thanks a lot,
> Maileen
|
|
|
|
|