how to pass data between pages without being revealed?

[wvdba]

Hi.
I have data that i pass between pages in asp/vbs. i have been asked to not pass this data on the url which requires "request.querystring" on the receiving page. this method on passing data between pages, reveals the data being passed on the url. is there anyway to pass data without being revealed on the url?
thanks.

 

[foxbox]

with request.form you retrieve values from te previous form, and in some situations you can store info in hidden fields. This is not safe, because the user could store the page and change the values.

if you use session variables the user can't do that.

In some situations it it possible to create a querystring parameter with some sort of checksum. If the user alters it, it will fail.

I a reporting app i once made, the users were authorized for specific reports. My querystring was show.asp?id=1234

and in show.asp i did this:
SELECT report
FROM UserReport
WHERE id = 1234
AND user = session("sUserid")

 

[wvdba]

thanks foxbox.
i think i will use session variables so this information is not revealed on the href string.
thanks.