Hiding Browser URL

Report · Nov 16, 2012

Hi

Summary: I have a working input form. User information is captured. This form is posted around. I do not wish for the url of this page to be known.

Question:

How will I achieve this and What should I code? Where should I code it?

Source code:

<?php require_once('Connections/dbAttendance.php'); ?>

<?php

if (!function_exists("GetSQLValueString")) {

function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")

{

if (PHP_VERSION < 6) {

$theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;

}

$theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

switch ($theType) {

case "text":

$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";

break;

case "long":

case "int":

$theValue = ($theValue != "") ? intval($theValue) : "NULL";

break;

case "double":

$theValue = ($theValue != "") ? doubleval($theValue) : "NULL";

break;

case "date":

$theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";

break;

case "defined":

$theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;

break;

}

return $theValue;

}

$editFormAction = $_SERVER['PHP_SELF'];

if (isset($_SERVER['QUERY_STRING'])) {

$editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);

}

if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "form")) {

$insertSQL = sprintf("INSERT INTO attendlist (Windowsid, title, firstname, surname, extension, mobile, jobrole, course, cpg, mgrname, room) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)",

GetSQLValueString($_POST['textfield'], "text"),

GetSQLValueString($_POST['select'], "text"),

GetSQLValueString($_POST['textfield2'], "text"),

GetSQLValueString($_POST['textfield3'], "text"),

GetSQLValueString($_POST['textfield4'], "text"),

GetSQLValueString($_POST['textfield5'], "text"),

GetSQLValueString($_POST['select5'], "text"),

GetSQLValueString($_POST['select2'], "text"),

GetSQLValueString($_POST['select4'], "text"),

GetSQLValueString($_POST['textfield7'], "text"),

GetSQLValueString($_POST['select3'], "text"));

mysql_select_db($database_dbAttendance, $dbAttendance);

$Result1 = mysql_query($insertSQL, $dbAttendance) or die(mysql_error());

$insertGoTo = "Thankyou.php";

if (isset($_SERVER['QUERY_STRING'])) {

$insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";

$insertGoTo .= $_SERVER['QUERY_STRING'];

}

header(sprintf("Location: %s", $insertGoTo));

}

mysql_select_db($database_dbAttendance, $dbAttendance);

$query_rsAttendance = "SELECT * FROM attendlist";

$rsAttendance = mysql_query($query_rsAttendance, $dbAttendance) or die(mysql_error());

$row_rsAttendance = mysql_fetch_assoc($rsAttendance);

$totalRows_rsAttendance = mysql_num_rows($rsAttendance);

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<head>

<title>Delegate Register</title>

</head>

<?php

$date = date(“format”, $timestamp);

?>

<body>

<h3>Register: <?php echo "Date - ".date("d/m/Y - H:ia")?></h3>

<form action="<?php echo $editFormAction; ?>" method="post" name="form">

<tr>

<span class="textfieldRequiredMsg">A value is required.</span></span></td>

</tr>

<tr>

<td><div align="right">Title *</div></td>

<option value="0">Select</option>

</select>

<span class="selectRequiredMsg">Please select an item.</span></span></td>

</tr>

<tr>

<td><div align="right">First name*</div></td>

<span class="textfieldRequiredMsg">A value is required.</span></span></td>

</tr>

<tr>

<td><div align="right">Surname *</div></td>

<span class="textfieldRequiredMsg">A value is required.</span></span></td>

</tr>

<tr>

<td><div align="right">Contact / Bleep *</div></td>

<span class="textfieldRequiredMsg">A value is required.</span></span></td>

</tr>

<tr>

<td><div align="right">Mobile no: (optional)</div></td>

</tr>

<tr>

</tr>

<tr>

<option value="0">Select </option>

<option value="1">Doctor</option>

<option value="2">Nurse IP</option>

<option value="3">Nurse OP</option>

<option value="4">Midwife</option>

<option value="5">Booking Clerk</option>

<option value="6">Medical Secretary</option>

<option value="7">OP Receptionist</option>

<option value="10">Tester</option>

</select>

<span class="selectRequiredMsg">Please select an item.</span></span></td>

</tr>

<tr>

<td><div align="right">Manager's Name *</div></td>

<span class="textfieldRequiredMsg">A value is required.</span></span></td>

</tr>

<tr>

</tr>

<tr>

</tr>

<tr>

<td><div align="right">Course *</div></td>

<option value="0">Select</option>

<option value="2">Doctors</option>

<option value="3">Nurse IP</option>

<option value="4">Nurse OP</option>

<option value="5">Midwife</option>

<option value="6">Booking Clerk</option>

<option value="7">Medical Secretary</option>

<option value="8">OP Receptionist</option>

</select>

<span class="selectRequiredMsg">Please select an item.</span></span></td>

</tr>

<tr>

<td><div align="right">Location *</div></td>

<option value="0">Select </option>

<option value="1">CHX 12 Floor Rm 1</option>

<option value="2">CHX 12 Floor Rm 2</option>

<option value="5">HH W12 Conference</option>

</select>

<span class="selectRequiredMsg">Please select an item.</span></span></td>

</tr>

<tr>

<option value="0">Select </option>

<option value="1">CPG 1 - Medicine</option>

<option value="2">CPG 2 - Surgery and Cancer</option>

<option value="3">CPG 3 - Specialist Services </option>

<option value="4">CPG 4 - Circulatory Services and Renal Medicine</option>

<option value="5">CPG 5 - Womens and Children</option>

<option value="6">CPG 6 - Clinical and Investigative Sciences</option>

<option value="7">CPG 7 - Private Patients</option>

<option value="8">Others</option>

</select>

<span class="selectRequiredMsg">Please select an item.</span></span></td>

</tr>

<tr>

</tr>

<tr>

<td><div align="center">*Mandatory fields </div></td>

</tr>

</table>

</form>

</div>

<a href="http://validator.w3.org/check?uri=referer"><img

src="http://www.w3.org/Icons/valid-xhtml10" alt="Valid XHTML 1.0 Transitional" height="31" width="88" /></a>

<p align="center"> Cerner@Imperial ICT Training Team </p>

</p>

</div>

</div>

var sprytextfield1 = new Spry.Widget.ValidationTextField("sprytextfield1", "none", {validateOn:["blur", "change"]});

var spryselect1 = new Spry.Widget.ValidationSelect("spryselect1", {validateOn:["change", "blur"]});

var sprytextfield2 = new Spry.Widget.ValidationTextField("sprytextfield2", "none", {validateOn:["blur", "change"]});

var sprytextfield3 = new Spry.Widget.ValidationTextField("sprytextfield3", "none", {validateOn:["blur", "change"]});

var sprytextfield5 = new Spry.Widget.ValidationTextField("sprytextfield5", "none", {validateOn:["blur", "change"]});

var spryselect2 = new Spry.Widget.ValidationSelect("spryselect2", {validateOn:["change", "blur"]});

var spryselect3 = new Spry.Widget.ValidationSelect("spryselect3", {validateOn:["change", "blur"]});

var spryselect4 = new Spry.Widget.ValidationSelect("spryselect4", {validateOn:["change", "blur"]});

var sprytextfield4 = new Spry.Widget.ValidationTextField("sprytextfield4", "none", {validateOn:["blur", "change"]});

var spryselect5 = new Spry.Widget.ValidationSelect("spryselect5", {validateOn:["blur", "change"]});

</script>

</body>

</html>

<?php

mysql_free_result($rsAttendance);

?>

Report · Nov 17, 2012

If you don't want the URL to be known, don't run a web page. You could load it inside an iFrame or dynamically inside a script, which you can disguise further using Base64 encoding or similar or you could generate abstract URLs using PHP, but ultimately, if somebody wnats, they can still find out. You'd do better working authentication procedures, so only people who have a valid key can fill out and send the form...

Mylenium

Report · Nov 17, 2012

Hi

It is not helpful. I have an idea too. How about this idea of hiding the URL? But let's run with this and see what the technical solutions are for this then maybe the rest. I am not sure about the rest of your suggestions. I require only 1 solution, maybe walk and talk thru it. Dont be sarcastic about not running the page!

Report · Nov 17, 2012

Which URL is it you want to not reveal?

Report · Nov 17, 2012

Hi Murray,

It is the URL of the form as we sent it accross as a mail link. So it is where the form is.

Thanks

p/s I have posted several posts on here still no replies, the turnaround of post on here is selective and not forthcoming. Do you think it is the right place to send it here. [Personal attack deleted by moderator]

Report · Nov 17, 2012

Sorry - I still don't understand what it is you want to hide. Can you just give me that information?

Report · Nov 17, 2012

We find some users will try and reply to the link hence we have hidden it by overlaying it with text. However, we are trying to take it one step further by hiding the URL once the link is clicked.

Report · Nov 17, 2012

Which link?

Report · Nov 17, 2012

This is a server-side question. As advised to you earlier once, you should post this in the appropriate forum for better (quicker) responses. I'm moving it there this time as well.

First look - You are using server behaviors. Bad idea. How about writing custom-code - considering the work that you seem to be doing is quite comprehensive?

Custom-code - Have you heard about AJAX? Posting a form while 're-directing' the user the the submission page is your problem - you've mentioned in your original question.

If you use AJAX form validation/ submission, your user will not be taken to the submission page. They go to Page A, fill the form info, hit submit, AJAX validation happens and form is submitted in the backend. User is still in Page A - the only change happening on front-end being that the user sees a 'Message sent' or 'Form submitted' message.

Eureka?

Report · Nov 17, 2012

HI Sudarshan,

Thanks for the reply. I did post over there. I think it is over there, not sure how it got to here. I have been waiting over 8 hrs still no reply to the rest of my post

I am trying to write custom code, what code to write and how to custom is on my mind. Glad you can see that I am putting together some comprehensive systems. So I will require mentoring (support and help).

I have heard of AJAX? Heard but not learned it yet. So there are no thoughts processes churning my coxes at the moment. If only it was a Eureka moment. I understand the user experiences you mentioned. I want to be able to code and make this happen. So how shall I do it? I have a fully functional form. I used server behaviours, maybe bad idea. If you only had that one idea, it worked so far, why not.

Questions

Can DW support this idea ? Is there more to using server behaviour to try and code up this type of behaviour required. Is this behaviour in DW server behaviour?

Is this where DW server behaviour ends?

Report · Nov 17, 2012

>I have been waiting over 8 hrs still no reply to the rest of my post

Again, this is a user-to-user forum. We don't work for Adobe. Many of us may be in a different timezone that you and are sleeping while you are posting. Also note that activity on all of these forums is significantly reduced during the weekend. We all have lives and families. Complaining numerous times about lack of responsiveness on these forums seems like a slap in the face to those who have put a great deal of effort into assisting you.

Now, back to your current question:

>Can DW support this idea ?

It can only support it in that it is a simple editor that will allow you to enter custom code you write.

>Is there more to using server behaviour to try and code up this

>type of behaviour required. Is this behaviour in DW server behaviour?

>

>Is this where DW server behaviour ends?

They ended long before this. They don't support AJAX calls, and based on your requirements, you should not be using them at all. I would avoid DW SB's because:

1) They are intended for only the simplest web application functions

2) They are not robust

3) They do not meet todays coding standards

4) They are overly verbose - most human written code is more concise and easier to read

5) Once you modify them, DW dialogs can no longer maintain them.

I suspect that they will be completely removed in upcoming versions.

Report · Nov 17, 2012

Sounds reasonable. Understood. I noticed that when I added code, and especially referencing server side behavious, the DW SS B panel is not responsive, and if it is responsive it has disable the previous insert or SS behaviour. Which could make editing a double edge sword? It does now fulfill additional server side behaviour codes.

So server behaviours will eventually be removed?

This brings a dilemma, what should be and how should it be, to code the things I want to happen from here.