Hiding Querystring into URL

Question

I want to hide the Querystring which is displayed into my URL as shown below in Image::

enter image description here

I am opening it into New Window as::

1) Jquery Code to Oepn New Window:

 var url = rootUrl("Home/Test?Docs=" + check);
 var w = window.open(url, '_blank');

And 2) Controller(Server side) code :

    public class TestViewModel
    {
        public string Docs { get; set; }
        public long DocIDs { get; set; }
        public long TestIDs { get; set; }
    }
    public ActionResult Test(TestViewModel Test)
    {
        return View();
    }

But in this case the Document IDs displayed into the Querystring. I just want to hide the Querystring for more security. How can I do this?

You are asking the wrong question. Whether or not someone can see the document id should not matter to the security of your web app. If you are relying on hiding a variable to secure your application, you are doing it wrong. See stackoverflow.com/a/245586/130387 for more information — Tommy
– Tommy, Commented Jan 29, 2014 at 5:08
@BappiDatta But as shown above in the URL I am posting List of Documents maybe more. then in that case I need to hide those IDs. — Rahul
– Rahul, Commented Jan 29, 2014 at 5:55

TGH · Accepted Answer · 2014-01-29 04:54:59Z

1

You can do a post request instead. If you want it to be encrypted you should send it over https

answered Jan 29, 2014 at 4:54

TGH

39.4k13 gold badges106 silver badges140 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Nilesh Gajare · Accepted Answer · 2014-01-29 04:53:29Z

0

You can store data in session variables or try storing values in cookies.
It would be better to use TempData, which only allows the value to be used once (removed on first access). However, this implies the value will be used almost immediately.
encrypt the querystring.

answered Jan 29, 2014 at 4:53

Nilesh Gajare

6,4283 gold badges44 silver badges73 bronze badges

Comments

Community · Accepted Answer · 2017-05-23 12:28:40Z

0

If you don't want to show the parameters, then don't send them store them in hidden fields in your main page, then on the opened window (TEST) get the values with JavaScript with window.opener.document.getElementById('ID_OF_THE_HIDDEN_ELEMENT_IN_THE_PARENT_PAGE').

Look at this example I wrote for another answer.

edited May 23, 2017 at 12:28

CommunityBot

11 silver badge

answered Feb 5, 2014 at 15:08

CodeHacker

2,1381 gold badge22 silver badges36 bronze badges

Collectives™ on Stack Overflow

Hiding Querystring into URL

3 Answers 3

Comments

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related