Securing report path in address bar for 10g Reports

Question

I am using the following code to run report developed in reports 10g using windows. Report is running but it shows all the path in the address bar. like
http://rep_server:8889/reports/rwservlet?report=d:\Sticker_rpt&desformat=pdf&destype=cache&paramform=no&From_Roll=123&userid=user/password@orcl
I don't want the user to view this path for some security reasons. i am a middle level programmer, so can anybody please guide me how can i protect path from user by editing it after report open or some changing in the following code. any solution..........
Code to run report.
Declare
v_url      varchar2(3000);
BEGIN
v_url     := 'http://rep_server:8889/reports/rwservlet?report=d:\Sticker_rpt&desformat=pdf&destype= cache&paramform= no&REFNO=123&userid=user/password@orcl;
web.show_document(v_url,'_blank');
Exception
when others then
message(SQLCODE||SQLERRM);
raise form_trigger_failure;
End;

Answer 1

when you run the report from forms, you should use RUN_REPORT_OBJECT to run the report, then there is no username/password in the url (example Procedure is giving an error. ). Also, you can use javascript to hide the adressbar when using WEB.SHOWDOCUMENT
WEB.SHOW_DOCUMENT('javascript:void(window.open("the_url","","location=no,toolbar=no,menubar=no,status=no,resizable=yes"))','_blank');