HREF

[neville]

I have a couple of values passing thru links

I dont want the user to see the variable names and its values when the user does a mouseover or when he right clicks on the link... or atleast make it hard enough so that no one will bother ...any way this can be done ?

Using the window.status method I can only hide it from mouseovers but not from right clicks and viewing properties.

How do I prevent mischievious users from changing the values assigned to a variable thru the adress bar?

[krisha]

sorry, but this is lame 😉

can try making everything by POST and hideen inputs, but that's a bit crazy

just write good code!

[petrb]

--OR--

you could make one big frame in a frameset.

--ph

[vfwood]

try making a hash/checksum of value and pass as well. when taking value from page checkl hash is generated from that value, rejecting others.

e.g.

$key = md5($val . "cheekymonkey");
echo "<a href = 'in.php?val=$val&key=$key'>";
etc...

on receiving page use

if ($key != md5($val . "cheekymonkey")) {
echo "you are a naughty monkey";
}
else {
echo "well done";
}