开发者

Ways for browser to include page ID in query?

开发者 https://www.devze.com 2023-01-08 02:46 出处:网络
I\'m no expert on web development, and need to find a way to let the browser call a PHP routine on the server with the current document ID as parameter, eg.

I'm no expert on web development, and need to find a way to let the browser call a PHP routine on the server with the current document ID as parameter, eg.

http://www.acme.com/index.php?id=1

I then need to call eg开发者_Python百科. /change.php with id=1 to do something about that document.

Unless I'm mistaken, there are three ways for the client to return this information:

  • if passed as argument in the URL (as above), it will be available as HTTP referrer
  • by including it as hidden field in
  • by sending it as cookie

I suppose using a hidden field is the most obvious choice. Are there other ways? Which solution would you recommend? Any security issues to be aware?

Thank you.


You can also POST the data so it won't be seen in the URL with ’form method = "post" ’

All of these methods are, to a point, insecure as they can be manipulated by a savvy user/hacker. You could https your site, limiting any man in then middle attacks. Be sure to check and validate incoming data


Ajax is another option as well, and it allows you to send that information without refreshing the page.


http://www.acme.com/index.php?id=1

The above url would be more "browser friendly" if you transform it into something similar to this:

http://www.acme.com/index/page/1

I am sure you can achieve this in Apache. Or Java Servlets.

0

精彩评论

暂无评论...
验证码 换一张
取 消