Querystring tampering

[Ram]

Hi,

I am passing values from one form to another using querystring. It is
easy for anyone to tamper these values. Now i don't want to show any
values in the url .How can be this done?.
I don't want any encryption. Please suggest a solution which can be
incorporated in a single file and use across the application .

Thanks and Regards,
S.Ramalingam.

 

[Eliyahu Goldin]

On server side: session variables.

For opening dialog forms from client side: second argument in
showModalDialog call.

Eliyahu

 

[Steve C. Orr [MVP, MCSD]]

Sensitive information should be kept on the server, not passed around via
querystring or form posts.
So you should probably store it in a database or in Session/Application
variables.