Home » Fusion Middleware & Colab Suite » WebCenter Suite & Portal » How to hide the URL parameter in mod_plsql
How to hide the URL parameter in mod_plsql [message #117621] Thu, 28 April 2005 09:50 Go to next message
Messages: 1
Registered: April 2005
Location: Mumbai
Junior Member
I am using mod_plsql for web site development. I am facing one security problem. In mod_plsql we can pass the stored procedure with parameter directly in the URL.

Could you please tell me how to hide the parameter passed in the URL.

This is similar to the "POST" method in normal HTML page.

It would be great if you will reply me at earliest.

Re: How to hide the URL parameter in mod_plsql [message #117758 is a reply to message #117621] Fri, 29 April 2005 08:22 Go to previous message
Frank Naude
Messages: 4571
Registered: April 1998
Senior Member
You can prevent direct parameter passing by rejecting GET requests and only accepting POST requests.

IF owa_util.get_cgi_env(REQUEST_METHOD') != 'POST' THEN
   htp.p('For security reasons only POST requests are accepted.');

Best regards.

Previous Topic: Portal Err : WWV-41439 - You cannot login as no configuration information
Next Topic: Need help with oracle portal
Goto Forum:

Current Time: Fri Aug 12 13:39:55 CDT 2022