Encrypt query string parameters

Hi All,
I have a SharePoint designer workflow email. I want to send encrypted link to users within email. Is there any way to send encrypted query string parameters?
Please guide me how to send parameters with url in email so that users cannot see it.
All suggestions are highly appreciated.
Regards and Thanks

Hi,
Per my knowledge, we can't Encrypt query string parameters in SharePoint Designer.
As a workaround, we can encrypt query string parameters using C# code and store the URL in a list. Then we can get the URL in SharePoint Designer.
http://www.codeproject.com/Articles/33350/Encrypting-Query-Strings
Best Regards
Dennis Guo
TechNet Community Support

Similar Messages

Reports 6i Encrypting query string parameters using Web.Show_Document()

I am developing Forms 6i form which initiates a report on our reports server (using rwcgi60) using a call to Web.Show_Document(). However, we pass several parameters to the report from the form which we'd like to encrypt, otherwise they're likely to be abused.
For example, I might have something like:
http://www.myserver.com/dev60cgi/rwcgi60?report=MYREPORT&p_unsecure_param=1234
I am aware of the following document which describes how to use a JavaBean implmentation and client cookie to hide sensitive information using a client side cookie - but this appears to be specific to hiding user logon information - can it be extended to cover any parameter on the query string?
http://www.oracle.com/technology/products/forms/pdf/secure_webshowdoc_rep6i.pdf
...or will I have to provide my own solution - e.g. perhaps using the DBMS_OBFUSCATION encryption and decryption functions to pass an encrypted parameter string to the report, and have the report decrypt the string on the reports server....
I should probably point out that the parameter values are dynamic - not static, so adding an entry to cgicmd.dat isn't going to solve my problem.
Any ideas?
Shane

Frank,
Thanks for confirming this - this is what I had suspected - just wanted to check that there wasn't already some inbuilt functionality which I had overlooked. DBMS_OBFUSCATION_TOOLKIT it is then!
Shane

Masking of query string parameters

Hello all,
I have a dot net application which has a query string parameters coming from a sharepoint site. I want to mask those incoming query string parameters.
Can anybody sugeest me whats the best method to mask paramters which are coming from another application, but not from any other aspx page.
Any help is greatly appreciated.
Thanks

Hello,
Seems that you've post your question in Sharepoint Forums, and some developers have given you suggestions or solutions. Please check the answers there and follow up if needed.
https://social.msdn.microsoft.com/Forums/office/en-US/d999d231-c517-4dbb-80e3-ede99eab09ed/encrypt-query-string-parameters?forum=sharepointdevelopment#d999d231-c517-4dbb-80e3-ede99eab09ed
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Using Query String Parameters with Session Scoped bean

I would like to pass query string parameters from a product page (user clicks on a specific product commandLink) that is request scope to a details page that is session scoped.
The problem is that the session scoped page only handles the first request. If you view the details of a product and then navigate back to the product page and choose another product ... the details page will not handle the new query string parameters and display the details for the first product chosen.
Is there a way to make the session scoped bean recognize the query string parameters past the first request?

I was able to replicate this problem with a very simple app that performs a redirection... just like the real app. Here's the simple app that I put together:
From request scope page:
<f:view>
         <h:form>
           <h:commandButton value="Link 1" action="#{reqbean.Link1}"/>
           <br/><br/>
          <h:commandButton value="Link 2" action="#{reqbean.Link2}"/>
        </h:form>
       </f:view>
From request scope bean:
public String Link1() throws IOException
    // Add event code here...
    //redirect the user
    FacesContext.getCurrentInstance().getExternalContext().redirect("untitled2.jspx?p=1");
    return null;
public String Link2() throws IOException
    // Add event code here...
    //redirect the user
    FacesContext.getCurrentInstance().getExternalContext().redirect("untitled2.jspx?p=2");
    return null;
}At this point... I put a println in the constructor of the session scoped bean because this is where I want to get the query string params. The constructor only gets called the first time a redirect is performed.

UiXML and query string parameters

Is there a simple way to access a query string parameter within the destination page?
Example:
- in my source page I have something like:
<link text="My page destination"
destination="page?param1=value1" />
What I want is to be able to acces directly to the param1 within page.uix without handling events or writing any kind of java code.
I have tried to use ctrl:page, ctrl:eventResult or ctrl:servletRequest without success (thought it was not the right thing to do but gave it a try anyway).
As i understand (?) the doc query string parameters are event parameters:
- does it mean we can only deal with query string parameters in an event handler?
Oscar

Hi Oscar -
As i understand (?) the doc query string parameters are event parameters:
- does it mean we can only deal with query string parameters in an event handler? Right. The UIX Controller allows you to pass data to a new page using URL parameters in one of two ways: as event parameters - in which case you need to have a corresponding event handler - or as page properties. So, the built-in data providers that are supported by the UIX Controller (ctrl:page, ctrl:eventResult) are designed for supporting these two mechanisms.
If you do not want to write an event handler, then you could consider using page properties to pass your parameters. The following link shows how to use the pageURL bound value to construct a destination which includes a single page property:
<link text="Go to target page" xmlns="http://xmlns.oracle.com/uix/ui">
<boundAttribute name="destination">
<pageURL name="targetPage" xmlns="http://xmlns.oracle.com/uix/controller">
<properties>
<property key="prop1" value="value1"/>
</properties>
</pageURL>
</boundAttribute>
</link>
And the following sample shows how to bind to the same property:
<styledText data:text="prop1@ctrl:page"/>
Andy

[svn:osmf:] 13412: WebPlayer: optimizing JS code to forward all query string parameters to WebPlayer.swf .

Revision: 13412
Revision: 13412
Author:   [email protected]
Date:     2010-01-11 02:02:20 -0800 (Mon, 11 Jan 2010)
Log Message:
WebPlayer: optimizing JS code to forward all query string parameters to WebPlayer.swf.
Modified Paths:
    osmf/trunk/apps/samples/framework/WebPlayer/html-template/index.template.html
    osmf/trunk/apps/samples/framework/WebPlayer/src/Configuration.as

ls -l /var/run/lighttpd/
And how are you spawning the php instances? I don't see that in the daemons array anywhere.
EDIT: It looks like the info in that page is no longer using pre-spawned instances, but lighttpd adaptive-spawn. The documentation has been made inconsistent it looks like.
You will note that with pre-spawned information, the config looks different[1].
You need to do one or the other, not both (eg. choose adaptive-spawn, or pre-spawn..not both).
[1]: http://wiki.archlinux.org/index.php?tit … oldid=8051 "change"

Using RSA to encrypt query string data

If I want to use RSA to encrypt query string data, what is the industry standards for such a thing? I understand how the RSA works. Based upon that alone, I would just need to get the public key. However, I understand that it is safer to use a PKI to obtain that public key?
Can someone tell me what is "best practice" for such a thing?

If the third-party-site supports https:, you do NOT have to encrypt anything yourself. That's what https is for - the communication between the user-agent and the server is encrypted as part of the protocol, and all the complicated parts of insuring a secure channel are handled for you.
If the secure site does not support htpps, then you can't use it. Which begs the question of why you are trying to do secure communication via HTTP POST with an insecure site.
To clarify, so we're sure we're talking about the same scenario - there's your server (A), which generates pages for a user-agent (B), which pages point to a third-party site (C). Are you trying to protect your data from eavesdroppers? Or are you trying to hide it from B?
In the first case, you have two options.
1) If both A and C supports https, then all you need to do is build pages with https: URLs pointing at C, and you're done. B hits A using https: URLs, it gets pages back that point to C using https URLs, lots of crypto-magic happens under the covers without you haveing to worry about it, and your data is protected.
2) If A and/or C do NOT support https, then you have to figure out how to encrypt communications between A and C. This is a private channel - we won't be able to help you much, because we don't know what C is expecting. Whatever C's protocol is, and whatever its key is, is what you'll need to implement in A, in order to talk to C.
(If you're actually trying to hide data from B, while sticking it into a page that B has to render - ew. Just...ew. It's wrong on enough levels that I don't think I can adequately describe them all.)
You asked about best-practices - 1) is it. 2) is not. Don't do that. No offense, but specially given your level of understanding of How Crypto Works, whatever you come up with is really really REALLY likely to be horribly flawed in a way that you won't see.
Crypto is both easier and harder than you think it is. Your best bet is to use the standards that the community has hammered out - your data is much, much safer that way.
Grant

How to customize the SharePoint 2010 search query string parameters

Hi All,
I am trying to redirect default SharePoint search to a custom search results page.
I modified the Search Settings to redirect to the URL that I want.
But my custom search page takes different query string parameters to provide the results.
Eg: SharePoint search passes k=search term when we perform a search. But my custom page needs
test=search term
I would like to pass 'test' instead of 'k' as a query string. Is this possible?
Thanks
Carol

There is no way out of the box to change it. You could always write your own control that passes the value or inherit from SearchBoxEx web part (if you are using a search center) to pass a different value. Query String Filter web part won't
help you here I am afraid. However, wouldn't it be easier just to change your code to take the value that SharePoint passes you?
Corey Roth - SharePoint Server MVP blog:
www.dotnetmafia.com twitter: @coreyroth

FLVPlayback source with query strings (parameters) doesn't load

Flash version: CS4
AS version: AS3
I'm currently trying to use the FLVPlayback component and pass a source FLV that's living on a cloudfront webserver. The problem is that the cloudfront requires authentication in the form of query strings in the source FLV. For example:
import fl.video.*;
var mainMovie:FLVPlayback = new FLVPlayback();
mainMovie.source = "http://www.somedomainname.com/firmware.flv?dummyquery=22";
trace(addChild(mainMovie));
As soon as I take away the "dummyquery", it works fine. When I add a query string, it breaks (nothing loads).
Here is the error output I get:
[object FLVPlayback]
VideoError: 1005: Invalid xml: URL: "http://www.somedomainname.com/firmware.flv?dummyquery=22&FLVPlaybackVersion=2.1" No root node found; if url is for an flv it must have .flv extension and take no parameters
     at fl.video::SMILManager/http://www.adobe.com/2007/flash/flvplayback/internal::xmlLoadEventHandler()
     at flash.events::EventDispatcher/dispatchEventFunction()
     at flash.events::EventDispatcher/dispatchEvent()
     at flash.net::URLLoader/onComplete()
It adds on "&FLVPlaybackVersion=2.1" to the end.
I saw a different article that said I should add a dummy variable at the end like "&dummy=.flv" because I was told that Flash is basically looking for an .flv extension at the end and you can trick it, but it doesn't work because they add on additional code.
Does anyone know how to work around this?

Hey supervu,
I know you already found a workaround to make this work, just figured I'd post an alternative to editing the FLVPlayback compoent. I also am retrieving an FLV file via a .Net ASHX file. To keep both worlds happy, I used a URLRewriter module to translate for me... this one translates what I am using for the FLVPlayback component source:
http://domain.com/flv/22.flv to be resolved as http://domain.com/API/resource.ashx?ID=22
There is of course no flv folder in the root of my application...
Here is my very simple URLRewriter class in vb.net:
Imports Microsoft.VisualBasic
Imports System
Imports System.Web
Public Class URLRewriter
    Implements IHttpModule
    Public Sub Init(ByVal inst As System.Web.HttpApplication) Implements System.Web.IHttpModule.Init
        AddHandler inst.BeginRequest, AddressOf Me.OnBeginRequest
    End Sub
    Public Sub OnBeginRequest(ByVal app As Object, ByVal e As EventArgs)
        Dim inst As HttpApplication = CType(app, HttpApplication)
        Dim req_path As String = inst.Context.Request.Path
        Dim trans_path As String = ""
        Dim search As String = "/flv/"
        Dim pos As Integer = req_path.IndexOf("/flv/")
        If pos > -1 Then
            Dim key as string = req_path.Substring(pos + search.Length, (req_path.LastIndexOf(".flv") - (pos + search.Length)))
            HttpContext.Current.Response.Redirect("~/API/resource.ashx?ID=" & key )
        End If
    End Sub
    Public Sub Dispose() Implements System.Web.IHttpModule.Dispose
    End Sub
End Class
and make sure you add this to your web.config.. this will cause URLRewriter to intercept all HTTP requests, and redirect as needed.
<system.web>
     <httpModules>
          <add name="URLRewriter" type="[Namespace].URLRewriter"/>
      </httpModules>
</system.web>
Hope this helps someone.

SSOServlet - query string parameters being lost

Hi,
We recently upgraded ALUI from version 5.04J to 6.1. After the upgrade, we noticed one issue with the redirection. When the user is not logged in & accesses a secure commnity, he/she is redirected to the SSO Servlet. For instance, if the following URL is accessed
/portal/server.pt?open=512&objID=326&PageID=0&cached=true&mode=2&userID=2&CommunityID=326
the user should be redirected to (as in version 5.04J)
/portal/SSOServlet?open=512&objID=326&PageID=0&cached=true&mode=2&userID=2&CommunityID=326
Instead the user is redirected to /portal/SSOServlet?
(without the query string)
Does anyone know why?
Thanks,
Dev

I've tired doing this and it did not work for me. However, I was able to find a solution that helped me a whole lot.
After running all test runs - I found a solution that helped me take off the extra parameters that Eloqua adds to all URL's.
I created my urls without placing "http://" or "https://" or http://www." or "https://www." and that helped take off all tracking.
Re: Use of tinyUrl

Need example for using query string parameters in Web Dynpro

Hello,
Is it possible to transfer a Web DynPro application parameters at the query string (URL)?
Can someone please show me an example of how to pass it and how to retreive it using code inside an application?
Thank you in advance

Hi,
when launching WD apps in the Portal you have to define a WD iView in the Portal. This can be started using the NavigationTarget parameter.
Parameters (ie. Business Parameters) that should be passed to the WebDynpro application can be defined in the iView itself - the iView attribute is called "Application Parameters". Here you can also define variable expressions like "emailaddr=<User.email>" so that the value of the email address is evaluated on runtime.
This way you don't have to care about URL encodings at all
The following user expressions can be used:
<User.displayname>
<User.uniquename>
<User.firstname>
<User.lastname>
<User.salutation>
<User.jobtitle>
<User.department>
<User.email>
<User.telephone>
<User.mobile>
<User.fax>
<User.streetaddress>
<User.city>
<User.zip>
<User.country>
<User.state>
<User.timezone>
udo

Passing query string parameters to Visual Web Parts?

Does anyone know how to get the parameters from a query string to a Visual Web Part?
Dan Marth

Hi,
you can read the query string parameter from the code behind using:
Request.QueryString["YourParam"];
You can also use Javascript or jQuery:
http://archive.plugins.jquery.com/project/query-object
http://javascript.about.com/library/blqs1.htm
HTH!
Regards, Sjoukje
Web: http://sjoukjezaal.com | LinkedIn:
http://www.linkedin.com/in/sjoukjezaal | Twitter:
@SjoukjeZaal
Please click "Propose As Answer" if a post solves your problem or "Vote As Helpful" if a post has been useful to you.

Export to Excel is not working for List View Web Part after filtering using Query String parameters in SharePoint 2010

Hi,
I am filtering SharePoint list view web part based on Query string parameter and I am doing Export to Excel by using following code.
<a href="#" onclick="javascript:window.location='../_vti_bin/owssvr.dll?CS=109&Using=_layouts/query.iqy&List=0DC67399-BE11-48F3-ADFC-E911FB8B5845&View=54671412-3EFE-4281-835A-9EF747AE774E&CacheControl=1'"><img
alt="Excel" src="/_layouts/images/icxlsx.gif" border="0"/> Export to Excel</a>
Issue: Able to do Export to Excel when there are no filters applied on list view web part but if applied filters on web part and do export to excel , only header fields are displaying in the excel sheet.
I don't know why owssvr.dll is behaving like that .
Please share your ideas.
Thanks in Advance.

Hi,
According to your post, my understanding is that you wanted to create hyperlink to export to excel.
The URL to execute the export is as follows:
{Site URL}/_vti_bin/owssvr.dll?CS=109&Using=_layouts/query.iqy&List={List GUID}&View={View GUID}&CacheControl=1
After getting the GUID, you need to “decode” the list GUID.
Replace %7B with {
Replace %2D with –
Replace %7D with }
More information:
Create Link to Export Library Contents to Excel
SharePoint - Create a link to export to Excel
Best Regards,
Linda Li
Linda Li
TechNet Community Support

Problem in retrieving query string parameters

Hi All,
AM working on wsrp in weblogic..Have a doubt in it..
I have two tabs in my application home page..One is tab HOME and another one is tab SEARCH..
So i want to navigate between these two tabs and i have my consumer portlet in tab HOME and producer portlet in tab SEARCH..
AM trying to pass some values when i click the tab SEARCH from the home page in query string using <render:param> tag.. AM using that tag, since have used <render:paramURL> tag for navigation..
so it will be like this:
<render:param name="test" value="sample"/></render:pageUrl>">
but am not able to retrieve the value in my producer doview()..
i get NULL value
when i try to access it using
request.getParameter("test")
but when i focus the mouse pointer on the SEARCH tab in my application, i see the value gets appended to the query string but not able to retrieve it inmy producer portlet..
Does anyone have idea about this??
Regards

Hello,
There is no way to generate a URL to another portal page from a producer portlet, as the producer has no idea what the structure of the consumer-side portal looks like or how to change a page.
By far your best bet is to use events to change the page, and put an "activatePage" handler on the portlet on your "HOME" page, and send an event to trigger the page change.
Put an "activatePage" handler in your remote portlet's .portlet file (on the producer side), such as:
<?xml version="1.0" encoding="UTF-8"?>
<portal:root xmlns:html="http://www.w3.org/1999/xhtml-netuix-modified/1.0.0" xmlns:portal="http://www.bea.com/servers/netuix/xsd/portal/support/1.0.0" xmlns:netuix="http://www.bea.com/servers/netuix/xsd/controls/netuix/1.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.bea.com/servers/netuix/xsd/portal/support/1.0.0 portal-support-1_0_0.xsd">
    <netuix:portlet title="Sample Page Activating Portlet" definitionLabel="eventsLinkDef1">
        <netuix:handleCustomEvent event="SampleCustomEvent">
            <netuix:activatePage /> 
        </netuix:handleCustomEvent>
        <netuix:titlebar>
            <netuix:minimize/>
            <netuix:maximize/>
        </netuix:titlebar>
        <netuix:content>
            <netuix:jspContent contentUri="whatever"/>
        </netuix:content>
    </netuix:portlet>
</portal:root>This way, when you send the event (and you can include a payload in the event if you want to send search terms), the consumer will automatically switch pages to the page containing the search portlet. And it works over WSRP and locally (not over WSRP).
Kevin

_layouts/Authenticate.aspx losing Query String Parameters in redirection

Hi,
we are losing query strings when _layouts/Authenticate.aspx redirects to a application page after user authentication.
Example shown below
http Request is shown below
/_layouts/Authenticate.aspx?Source=http://ourwebsite.com/somepage.aspx?paramapp=testapp&paramdata=testdata
redirection happens fine, but all the query string expect the first gets truncated.
In the above the example paramdata gets truncated

Hi Chandan,
please have a check if should this situation applied, i just talked with my colleague regarding this,
if you are using OOB, there are a set on AAM that may not eligible to do so, for example there is an encoding feature on it, sharepoint by design may not able to receive this because security concern.
"When the AAM redirect is configured requests for data that doesn't exist in the local farm is directed to another farm. If this request contains a query string, the query string is dropped"
Regards,
Aries
Microsoft Online Community Support
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Encrypt query string parameters

Similar Messages

Maybe you are looking for