How to hide parameters in bar address ? (GET vs POST)

Question

Hello,
I have to develop a web application and I would like to resolve some security issues.
My problem is that, when I pass parameters from a stored procedure to another, every parameters are shown in the bar address.
According to you, what is the best solution ?
I have tried to use the POST method for forms but it only works for one button.
Example :
/* -------- Form -------- */
HTP.PRINT('<form name="subProjectManagement" action="./C3bd7.incr2n.addSubProject">');
      HTP.PRINT('<input type="hidden" name ="p_id_proj" value="2060" />');
      HTP.PRINT('<input type="hidden" name ="error" value="" />');
      /* -------- "Add" Button -------- */
      HTP.PRINT('<input type="button" name="add" value="Add" onClick= this.subProjectManagement.submit()/>');
      /* -------- "Delete" Button -------- */
      HTP.PRINT('<input type="button" name="delete" value="Delete" onClick="Delete()"');     
HTP.FORMCLOSE;- When I click on the "Add" button, the procedure addSubProject is called and the parameters are well hidden in the bad adderss.
- For the "Delete" button, I made a different process because I can't put two different submit buttons in one form. In another word, the POST mechanism can't work for the "Delete" button so I do not know how to hide parameters in this case.
As for direct links, I do not know what do to.
Example :
HTP.PRINT('<a href="./c3bd7.incr2n.subprojectList?p_id_proj=' ||p_id|| '">Go back</a>');- I am using this kind of link to switch from a page to another, and once again I do not know how to hide the parameters...
The official documentation encourages to use cookies (http://download.oracle.com/docs/cd/B19306_01/appdev.102/b14251/adfns_web.htm#CHECAHEB) : is it easy to implement ?
Thank you a lot in advance !
Best regards.
Edited by: user11922628 on 12 janv. 2010 04:42

Answer 1

Hi,
if you willing to investigate how one could reuse session variables, then that might offer you some solution. Browser session variables can be passed on from page to page. Trouble is, back and forward browser buttons don't work so well.
P;