How to hide query string in url?

Question

This code is used to send user id to a login page, and will validate the user and redirect to this link. However, sometimes I can see login page and id for a second before user detail page display. This is fine, but I want to hide id in URL.

var url="http://companyABC.com/login.aspx?id='123'";
var sb = new StringBuilder();
sb.Append("<script type = 'text/javascript'>");
sb.Append("window.open('");
sb.Append(url);
sb.Append("');");
sb.Append("</script>");

this.ClientScript.RegisterStartupScript(this.GetType(), "script", sb.ToString());

Anyone hell-bent on getting that information won't actually need to see it as their code will grab the url anyway. If your security relies on a user not seeing this url, then you need to rethink your entire design. — Moo-Juice
– Moo-Juice, Commented Jan 16, 2014 at 18:54
Well, just don't put parameters in the query string... it isn't THAT drastic of a change — Nick
– Nick, Commented Jan 16, 2014 at 18:54
Okay, can you confirm, that your actual problem is, that the redirect takes too long after you opened a popup window? Your posted code is a bit confusing. — Dio F
– Dio F, Commented Jan 16, 2014 at 18:55

Community · Accepted Answer · 2017-05-23 12:31:02Z

4

window.open uses a GET request. If you want to hide the query string in the URL, you need to use POST to deliver the ID in the body of the request instead of the query string. There's already an SO post on how to do that.

You should also consider brushing up on your understanding of web technologies. http://www.w3schools.com/tags/ref_httpmethods.asp

edited May 23, 2017 at 12:31

CommunityBot

11 silver badge

answered Jan 16, 2014 at 19:04

akousmata

1,04315 silver badges35 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to hide query string in url?

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related