hide vars on the url

[Hugo de la Mora]

Hello, my problem is that i have for example this URL http://1.1.1.1/something.jsp?var1=something&var2=somethingimportant, i want to hide var1 and var2 to get only http://1.1.1.1/something.jsp, what should i do?

[Bear Bibeault]

Either use a POST (as opposed to a GET) to submit the URL. If the values are truly sensitive you might want to consider encrypting them.

[Hugo de la Mora]

hi, the values are not passwords or things like that, for that things im using sessions, but i cannot use POST because im using enctype="multipart/form-data" on the form and i get an error using post, also in anothers ones im using javascript like

document.postForm.action='post.jsp?forumID=<%=forumID%>&prev=yes&att=<%=hasAttachment%>';

so do you have any suggestion to hide those values? thanks in advance.

[Bear Bibeault]

The submission method should have little to do with the enctype -- I post such forms all the time. You should investigate why that is causing an issue.

And, even under Javascript control, you can populate a form with hidden values and POST it.

[Hugo de la Mora]

Yeah!, you're right, thx.