Web Development

1. You don't control the client. Obvious, right? But i'll repeat it, because too many web devs forget this and we all suffer for it: you don't control the client. So no, you can't hide the address bar, and even if you could there's no guarantee the user couldn't un-hide it, or that the "hide" function would work on all browsers, etc. But more importantly,
   
2. A determined user can change anything that gets sent from the client to the server. The address bar is a bit easier to change than, say, POST data... but a savvy user can throw a custom POST together in seconds. Same with cookies. How do you prevent this? You can't - see #1.
3. Javascript isn't secure. Again, it's maybe a bit less obvious than the URL in the address bar, but just as most browsers let you "View Source" to see how the page itself is built, most also allow debuggers to be attached or custom Javascript (bookmarklets, etc) to be inserted into the page such that variables can be read, edited, etc. I've used this many times on commercial sites to work around breakage, and less kind users may well use it for more nefarious means. Same goes, more or less, for Java applets, Flash, Silverlight, etc... See #1.
   

michael_jhons wrote:

i just want to send the variables without be visible in the QueryString, these variables will be displayed inside a forme which the user can manipulate them.

salil_k_singh wrote:

i want to add a video (FLV) to one of my web page

<object width="550" height="400">
<param name="movie" value="somefilename.swf">
<embed src="somefilename.swf" width="550" height="400">
</embed>
</param></object>

Kiefie wrote:

Am I doing or missing something

foreach(TableRow tr in YourTable.Rows)<br />
	{<br />
	   foreach( TableCell cell in tr.Cells;)<br />
             {<br />
	       foreach (Control control in cell.Controls )<br />
		 {<br />
		    TextBox txt = control as TextBox;<br />
		    if (txt != null)<br />
			   string someStr=txt.Text<br />
		 }<br />
<br />
              }<br />
	}<br />
				<br />

<input type="text" önkeypress="return onDigittxtkeypress(event)" />

Johnny ² wrote:

It's also not going to help having an accented character in the HTML:

mostafarastgar wrote:

onkeypress="return onDigittxtkeypress(event)"