Calling_reports_unleashes_user_name_and_password

Question

hi all,
i have a problem with calling report....
when i call a report, browser address bar unleashes my user_name and password. can i hide it any way??? i use the follwing code to call reports:
DECLARE
     report_url VARCHAR2(3000);
     login_string VARCHAR2(1000);
BEGIN
login_string := 'userid='||GET_APPLICATION_PROPERTY(username)||'/'
|| GET_APPLICATION_PROPERTY(password) ||'@'||GET_APPLICATION_PROPERTY(connect_string);
report_url := 'http://192.168.1.10:8889/reports/rwservlet?server=erasoft&destype=CACHE&desformat=HTMLCSS&'||login_string||'&report=c:\proj_modules\all_employees.rep';
web.show_document(report_url,'_blank');
END;
so in browser the follwing url is vivid:
http://192.168.1.10:8889/reports/rwservlet?server=erasoft&destype=CACHE&desformat=HTMLCSS&userid=SCOTT/TIGER@orcl&report=c:\proj_modules\all_employees.rep
can any one guide me in modifying this code or any other way to hide this user_name and password in the url????
product version info are as folowing:
Forms [32 Bit] Version 10.1.2.0.2 (Production)
Oracle Database 10g Enterprise Edition Release 10.2.0.1.0 - Production
With the Partitioning, OLAP and Data Mining options
browser version 6.0.2900.2180.xpsp_sp2_rtm.040803-2158
windows xp service pack 2
regards....

Answer 1

Review the last section in the Technical Whitepaper:
Oracle Forms Services - Using Run_report_object() to call Repost with a paramter form
It will explain the coding changes in the form and on the app server.