UserId & Password in the address bar of the browser

The address bar of the web browser running a form shows the user id and the password? How to hide them?

If you don't specify a username and password on the URL, the user has to provide one. This one is not shown in the address bar. E.g. you can start a form like this:
http://server:8888/forms90/f90servlet?form=logon.fmx
and the user will be prompted for a username and password.
You can also call the form like this to automatically log in:
http://server:8888/forms90/f90servlet?form=logon.fmx&userid=un/pw@db
but the un/pw are shown in the address bar.

Similar Messages

Firefox no longer accepts my master password when the browser is launched.

When I launch firefox it normally asks for my master password. That's fine, I've set a master password for myself but now when I go to enter it and hit OK nothing happens. I have to hit cancel at the prompt for a master password for the browser to launch. At that point if I go and change the master password it accepts my password and I'm now "logged in" to the password database. I can repeat this process every time I restart the browser.

Resetting my master password with that method doesn't fix the problem. Once I set a master password again I encounter the same problem as before. The password prompt that appears upon starting Firefox does not accept my password.
edit: I've solved it. An add-on that was using the master password needed to be re-installed.

How do I shut off password Key in address bar?

There is now a key icon on the left of the address bar that asks to remember every password site I go to. How do I shut it off?

Gracias for taking the time to reply. You just saved me a lot of future-stress.
Have a great new year! :)

Address bar disappears in browser after scroll

I was looking at an iPhone 4S at the Verizon store, and was reading a very long webpage article about the phone. When I got to the bottom, I noticed that the URL bar was gone, and it took me over 10 swipes to get back up to it. This is really a pain in the butt and I couldn't figure out how to get the bar back. How do I do that? Android is really easy in that it scrolls really quickly and only takes me one swipe, but iPhone slows down fast and I have to keep swiping.

Congratulations, your statement is correct.
As for the question hidden in there, swipe up too the top of the page, and slide it a little bit more and the address bar appears. Too my knowledge there's no setting for it.
If you don't like it, don't buy it.
ThatGuy

A gap of 1 row below address bar in firefox browser after I installed Google Toolbar. Unistalling both and then installing just firefox hasn't helped. Any solutions?

I am not able to remove the 1-inch gap which came just after installing google toolbar. After that, I uninstalled Google Toolbar and Firefox respectively and then again, installed Firefox alone but the gap of 1-inch (1 row) remains just below the address bar of the browser. How to remove it?

Hi Danieldesira,
Thanks for the solution, it worked!!! I disabled extensions one by one except Google Toolbar. I observed that the gap was removed only after removing Norton Toolbar 5.6 version. For now, I have removed the toolbar of Norton but it seems necessary for security purpose. Can we keep it on and still hide since in the empty row it generates in Firefox is not showing a single button or anything else.
Thanks.

HT201320 My iPod states my username/password is incorrect. When I use my username/password through the browser it is correct? Why isn't the iPod reading it?

Any suggestions on how to fix this?

Go to Settings.iTunes and App Stores and sign out and sign back in.

Hiding password on the connection string

Hi,
Am trying to see if it is possible to hide password on the connection string when connecting from the application server. I can see one way of doing this, that is to use Oracle's OS Authentication. But because my Oracle is installed on Unix and my application server is on Windows 2000. I am not sure if this is possible?
Has any done something similar before?
Thanks

The problem with using a single sign-in product like Kerberos is I believe the Advanced Security Option is required. The ASO is an additional license fee.
Having the password in a file does not have to be a major security problem. Have a set of common logon modules created, one for each language in use, and have the module contain the logic to fetch the key.
This way the file name and path to the key is not obvious. Then have the premissions set so that only the ID that runs the production batch can read the file. Neither the customers or the developers should have access to that ID.
Unfortunately while this works for works batch ran out of products like Unicenter and application server based applications this technique does not work very well for cleint server applications. Client server based applications really need every user to have to sign-in with their own id.
If every user does not have their own id and it is undesirable to hard code the userid/password into the application then you are back to getting the password from an unsecured external source. Having the common module to do the fetching at least makes someone work to find the ID/password. Any Id used in this manner should have limited access in the database which means you might have two, three, or more such ID's setup but with each having access to the tables behind only specific applications.
HTH -- Mark D Powell --

Username/password displayed in Titile bar

Hi:
I have successfully managened to encrypt the username and password in the "address bar" of the Internet Explorer while report is displayed when destype=HTMLCss. But when destype=PDF, the username and passowrd is displayed in the "TITLE BAR" of the Internet explorer browser, though it is encrypted in the "address bar".
If I choose destype=HTMLCss instead of PDF, such probelm does not arise. But I want my reports to be displayed in PDF!
Can anyone suggest me how do I hide username and password entirely ?
Thanks,
Ashish

Hi Ashish,
The best way to avoid displaying the username/password in the browser is to use the cgicmd.dat file.
More information in "Publishing Reports to the Web"
http://download.oracle.com/docs/html/A92102_01/pbr_run.htm#1006007
Navneet.

Use of active directory userid/password authentication instead of SAP R/3 User/Password for digital signature?

Dear all,
I am looking to setup the use of active directory userid/password authentication instead of SAP R/3 User/Password for digital signature. We SSO to the backened ABAP AS via an SAP NW Portal to which SPNEgo kerberos authentication is setup. Today we specify R3 user id/password to digitally approvae a lot release. The idea is to have users maintain one AD password and don't have to remember the R/3 password anymore and also our Security team to avoid password maintenance.
I know there are 3 options for digital signature and
System signature with authorization by user ID and password (We use this currently)
Digital User signature with verification - (We would like to use this with AD userid/password, so the system still ask the users their AD userid/password for the authentication when they try to "sign" a document.)
User signature without verification
Do you think there is a way to configure the system in order to ask and check the active directory userid/password instead of SAP R/3 password? Where can I found documentation about it ?
I have several different versions of AS ABAP starting from NW 7.02 to NW 7.31.
My active directory is based on Windows 2008.
Thanks in advance!!
Dhee

Actually enabling Kerberos for SSO purposes and enabling Kerberos for digital signatures are two different topics although the latter is because of the former. I'm interested in the topic as well and I'm currently looking at different options. SAP provides a BAdI for the digital signature API which can be used for external authentication but they do not provide the solution to invoke Kerberos authentication based on username and password. SAP provides a semi solution with NWSSO 2.0 SP2 which works only on Windows with classic dynpros meaning SAP GUI for Windows is assumed. The solution is based on an ActiveX component which does the actual Kerberos authentication using the Secure Login Client which is part of the NWSSO suite. Extending that implementation to non-Windows and non-GUI applications would require some sort of web enabled service that could be used to authenticate the user with username and password. In case authentication is successful, a Kerberos token would be returned to SAP which would then be validated. All the required pieces are there since SAP has Kerberos support now in both stacks of the NetWeaver Application Server, some bits are still missing though which leaves customers looking at 3rd party or custom solutions.

Using javascript to control the browser

Hi all,
One of the most requested features on our first Breeze
project was a "quit" button. The easiest way to do so in an HTML
environment is to use the command
javascript: window.close();
Type this into the address bar on your browser, and hit
return. Isn't that neat?
Okay, the scripting language in Flash (Actionscript) can
simulate typing something in the address bar with the command
getURL ("javascript: window.close();");
...all we have to do is add that actionscript to the
onRelease event handler for a button in Flash. Then, add the button
to your PowerPoint before you use Presenter, and when the student
clicks it... voila!
This same trick can be used to replace that MacroDobe©
logo in the Breeze player. This time, when the user clicks the
button, we'll use javascript to pop up an alert box with a clever
message:
getURL ("javascript: alert('Aren't we clever?');";
This button has to be small, around 50 x 29 pixels, to
properly replace the logo. To actually replace it, you need to
publish your presentation to the hard drive like normal. Next, find
the folder you published to, and place a copy of your "button.swf"
file in the "data" subfolder. Then, edit (don't "open") the
vconfig.xml file in the same subfolder using notepad. Near the top,
you'll find an entry that says:
<uireplace name="logo" value= "" />
place the name of your button file between the quotation
marks and save:
<uireplace name="logo" value= "button.swf" />
When you load up the training next time, the logo will have
changed to your button.
You'll have to do this every time you publish the training,
as Presenter deletes & recreates all those subfolders each time
you do. BTW, MacroDobe© does offer a small applet to parse
this xml file for you... but they want 5 grand per copy. I'm
thinking notepad works just as well :)
cheers!
Marc B

The biggest difficulty with a Swing Applet is that it needs the latest version of the JVM to run and many people don't have this installed on their PC. You can set the Aplet tags to download the plug-in but it can discourage users and may not always work. I would only use a Swing Applet for webapps with a limited client base.

Diasble Address/Menu Bars of a Browser using JSP

HI,
Is there a way to disable or hide Menu Bar/Address Bar of a Browser i.e. Internet Explorer and Netscape using JSP. Don't want to use Javascript as what if JavaScript is disabled in the browser. Can someone please help me how to hide the Browser Bars using JSP.
Thanks

Can't be done. JSP is SERVER-SIDE execution, not CLIENT-SIDE.
JavaScript is your only bet here. If it is VITALLY important to you, have your main window launch another window using JavaScript. If javaScript is disabled, post a little warning that JavaScript must be enabled to use this site.

Http redirects not changing url in address bar

I'm going crazy trying to fix a major bug in our application. Http
redirects are not changing the url in the address bar of the latest versions of internet explorer. But this only happens if the redirected page is an xml page with an xslt reference for the browser to do the transformation. Mozilla seems to work fine, but I seem to have encountered a major bug in Internet Explorer. If anybody can help or at least point me in a direction I'd be SO grateful. This doesn't seem to be a java servlet specific issue, but that's what we're using so I thought I'd ask the question here too.
We have an MVC type framework we developed. For example, if you were to add something to a shopping cart, the url might be:
http://ecommerce.com/cart/add?sku=54321. In the add servlet, we would add the sku to your shopping cart and then redirect to, let's say,
http://ecommerce.com/displaycart. I think this is how most MVC frameworks work. And it works great for us.
The problem began when we started sending XML to the browser with an XSLT stylesheet. So now the browser does the transformations (if the browser is capable of doing them, which we check) instead of the server. This is a major part of our project. One of the reasons we started this.
The problem is that Internet Explorer no longer updates the url in the
address bar after a redirect. Mozilla works great though. We haven't
tested on other xslt capable browsers yet. In the example above, what would happen is after adding something to your shopping cart, the "displaycart" page would be shown but the http://ecommerce.com/cart/add?sku=54321 url would be shown in the address bar. It wouldn't seem to be too big of a deal since everything works. But now all the relative links are messed up. They start from the "cart" directory. So we need absolute links. But that introduces many other problems. We then need to know the host and the parent directories (not as easy as it seems).
So is there a solution? Is this a big bug that nobody has realized yet (or maybe they have, but my searches don't see it) in internet explorer? Is there a way for the redirected url to appear in the address bar from a browser-based xslt transformation in internet explorer? By the way, I'm testing with the latest version of IE6.0 as of July 7, 2003.
When testing, redirects work perfect if I do the xslt transformation on the server side and just send plain html to internet explorer. And it works perfect with either serverside or browserside xslt transformations in mozilla.
Scott Mueller
AccelerateBiz Incorporated

As I've been reading in the specs, microsoft, etc, it seems that it's not what's supposed to happen. But the specs are not very specific about this. However, internet explorer DOES always replace the url in the address bar with the redirected url if HTML is being returned from the redirected servlet. As is the case with all other browsers. So, at least, this behavior is the de-facto standard.
BUT when the redirected to page is an xml page which references an xslt stylesheet.. then, ONLY in internet explorer, the original url is what's shown in the address bar (and, more importantly, what's used as the base url). Regardless of what the links look like or how they're manipulated in the transformed HTML that ends up being shown, I can't seem to make the url in the address bar the redirected url..

SPD 2013 workflow making a REST call to Search returns no records, even though I can take the exact URL and get back records in the browser

I am making the following REST call from a SharePoint Designer workflow:
Site-URL/_api/search/query?querytext='WorkEmail:*zafgen.com'&rowlimit=10&startrow=0&selectproperties='LastName,FirstName,WorkEmail,JobTitle,Path,PictureUrl,PreferredName,Department,AboutMe'&SourceId='b09a7990-05ea-4af9-81ef-edfab16c4e31'
When I make this call from a designer workflow running as the user who started it (The user is a site collection admin) I get the results shown below. NOTE that I get ZERO records. If I take the url above and place it in the address bar
of any browser, I get back 10 users. (Exactly what I asked for.) Furthermore, if I try to put the call to a REST service in a APP Step, I get a failure return code:
{"error":{"code":"-1, Microsoft.Office.Server.Search.REST.SearchServiceException","message":{"lang":"en-US","value":"An unknown error occurred."}}}
I have no issues making REST calls to SharePoint Lists and Libraries, but a call to search seems to have issues. Any thoughts?
{"d":{"query":{"__metadata":{"type":"Microsoft.Office.Server.Search.REST.SearchResult"},"ElapsedTime":135,"PrimaryQueryResult":{"__metadata":{"type":"Microsoft.Office.Server.Search.REST.QueryResult"},"CustomResults":{"__metadata":{"type":"Collection(Microsoft.Office.Server.Search.REST.CustomResult)"},"results":[]},"QueryId":"deba5b38-d89e-46d6-9911-a4280beead31","QueryRuleId":"00000000-0000-0000-0000-000000000000","RefinementResults":null,"RelevantResults":{"__metadata":{"type":"Microsoft.Office.Server.Search.REST.RelevantResults"},"GroupTemplateId":null,"ItemTemplateId":null,"Properties":{"results":[{"__metadata":{"type":"SP.KeyValue"},"Key":"GenerationId","Value":"9223372036854775806","ValueType":"Edm.Int64"},{"__metadata":{"type":"SP.KeyValue"},"Key":"indexSystem","Value":"","ValueType":"Edm.String"},{"__metadata":{"type":"SP.KeyValue"},"Key":"ExecutionTimeMs","Value":"63","ValueType":"Edm.Int32"},{"__metadata":{"type":"SP.KeyValue"},"Key":"QueryModification","Value":"WorkEmail:*zafgen.com
ContentClass=urn:content-class:SPSPeople","ValueType":"Edm.String"},{"__metadata":{"type":"SP.KeyValue"},"Key":"RenderTemplateId","Value":"~sitecollection\/_catalogs\/masterpage\/Display
Templates\/Search\/Group_Default.js","ValueType":"Edm.String"},{"__metadata":{"type":"SP.KeyValue"},"Key":"StartRecord","Value":"0","ValueType":"Edm.Int32"},{"__metadata":{"type":"SP.KeyValue"},"Key":"IsFirstBlockInSubstrate","Value":"true","ValueType":"Edm.Boolean"},{"__metadata":{"type":"SP.KeyValue"},"Key":"IsLastBlockInSubstrate","Value":"true","ValueType":"Edm.Boolean"}]},"ResultTitle":null,"ResultTitleUrl":null,"RowCount":0,"Table":{"__metadata":{"type":"SP.SimpleDataTable"},"Rows":{"results":[]}},"TotalRows":0,"TotalRowsIncludingDuplicates":0},"SpecialTermResults":null},"Properties":{"results":[{"__metadata":{"type":"SP.KeyValue"},"Key":"RowLimit","Value":"10","ValueType":"Edm.Int32"},{"__metadata":{"type":"SP.KeyValue"},"Key":"SourceId","Value":"b09a7990-05ea-4af9-81ef-edfab16c4e31","ValueType":"Edm.Guid"},{"__metadata":{"type":"SP.KeyValue"},"Key":"CorrelationId","Value":"6288bf51-64fc-45de-a9ca-d62c36e3ebd1","ValueType":"Edm.Guid"},{"__metadata":{"type":"SP.KeyValue"},"Key":"WasGroupRestricted","Value":"false","ValueType":"Edm.Boolean"},{"__metadata":{"type":"SP.KeyValue"},"Key":"EnableInterleaving","Value":"true","ValueType":"Edm.Boolean"},{"__metadata":{"type":"SP.KeyValue"},"Key":"piPageImpression","Value":"16620813_415_1033","ValueType":"Edm.String"},{"__metadata":{"type":"SP.KeyValue"},"Key":"SerializedQuery","Value":"","ValueType":"Edm.String"}]},"SecondaryQueryResults":{"__metadata":{"type":"Collection(Microsoft.Office.Server.Search.REST.QueryResult)"},"results":[]},"SpellingSuggestion":null,"TriggeredRules":{"__metadata":{"type":"Collection(Edm.Guid)"},"results":[]}}}}
Marcel Meth

Hi,
We are currently looking into this issue and will give you an update as soon as possible.
Thank you for your understanding and support.
Best Regards,
Lisa Chen
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Clear address bar of data

Hi all,
I was wondering if anyone knows how to clear the address bar
of a browser after you are taken to a webpage and returned to the
original page. For example I have a list of potential clients on a
web page with a link to a detail page, I click the link go to the
detail page and make an edit. I have the redirect back to the
orginal page and now if I was to click another clients I get an
error because in the address bar I still have data from the
previous detail page. It looks like
"deleteaccesstomofsystem2.asp?ID=11&ID=10" As you can see it
keeps concatinating the ID= whatever you click next. Problem is you
get an error.
Thanks,
Lenny

On Tue, 9 Oct 2007 11:42:45 +0000 (UTC), "Lenny@ford"
<[email protected]> wrote:
>aken to a webpage and returned to the original page. For
example
>I have a list of
DW inserts this code after the update procedure:
$insertGoTo = "YOUR_PAGE.php";
if (isset($_SERVER['QUERY_STRING'])) {
$insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
$insertGoTo .= $_SERVER['QUERY_STRING'];
header(sprintf("Location: %s", $insertGoTo));
Where your YOUR_PAGE is replaced with whatever your master
page is.
Simply delete the if{ } segment to leave:
$insertGoTo = "YOUR_PAGE.php";
header(sprintf("Location: %s", $insertGoTo));
Steve Fleischer
steve at flyingtigerwebdesign dot com
Hong Kong

Hide UserID, Password, and Report Path when call Report from Report

Hi,
I have been able to call Report from Report using the hyperlink.
I put these code in my Field on the Report caller.
function F_3FormatTrigger return boolean is
temp varchar2(2000);
begin
temp := 'http://<computer_name>:8889/reports/rwservlet?';
temp := temp || 'server=repsrv' || '&' ||
                     'report=C:\MyReport\rep_detail.jsp' || '&' ||
                     'userid=scott/tiger@orcl' || '&' ||
                     'desformat=htmlcss' || '&' ||
                     'destype=cache' || '&' ||
                     'P_1=' || :ItemID || '&' ||
                     'P_2=' || :ItemName;
SRW.Set_Hyperlink(temp);
return (TRUE);
end;The hyperlink showed, and I can see the rep_detail.jsp showed in the same browser after I clicked the hyperlink.
The problem is, the hyperlink has to include the reports path and also userid and password.
If I did not put the userid and password, it will showed in another browse that
"The report has uncompiled PL/SQL"
How can I hide those userid, password, and the reports path?
BTW, Is there anyway to show the report callee in different page (precisely, open another IE) from the report caller?
Any help would be grateful.
Many thanks,
Buntoro

Hi,
Thanks for the answers.
Yet, I am still doubt about using cgicmd.dat.
I have looked around in this forum saying that it is not secure to use cgicmd.dat. Because all report request does not use authentication (the client can directly open report without login).
In Form, I can use the On-Logon to do the Oracle Form login (to do logon to the database), and then I use my own custom user login to restrict the menu for each user.
I do this since I want to restrict the user,
i.e user A can only view the sales form as well as sales report,
user B can only view the purchasing form as well as purchasing report.
Well, I am not so fond about the SSO itself.
It comes to my mind, since I don't have to re-login (to the database) each time I call another form (login database is only once at the first Form, On-Logon). It also goes to when calling the report caller.
What is RAD?
How can we use it?
Is OID = Oracle Internet Directory?
If true, maybe, I won't use it since I don't understand about it also.
Why we don't have to specify the userid and password when Form calls Report1 (using Run_Report_Object and Web.Show_Document())?
But we have to specify the userid and password when Report1 calls Report2.
Any help is appreciated.
Many thanks,
Buntoro

UserId & Password in the address bar of the browser

Similar Messages

Maybe you are looking for