Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Alternative to QueryString/Security - F1 please 1

Status
Not open for further replies.

Deadline

Programmer
Feb 28, 2001
367
US
Hi,
I have people from various places/countries to whom I will be sending mails. Their mail will contain the URL like....
Code:
[URL unfurl="true"]http://mywebserver/viewinfo.asp?place=US[/URL]
I know this isn't secure at all. Because if the mail goes to the person in US, he must be able to view the info of US only.
If some knowledgeable person changes the place value in the URL and visits info about that country, to which he is not authorized to, it becomes a problem. I can't use the
Code:
Request.Post()
in the target page because, I can't send the link thru email, if I do.

How to make this secure!??






Thanks!

RR
 
I see no other way then a table with
1. e-mail adress
2. country

Your link in the mail changes to something like this:

In your vuewinfo.asp you start with a lookup for the country.

[This information is already somewhere in your database, because you are able to produce mail with place=]







br
Gerard
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top