Re: Securing the URL

You could:

...use POST instead of GET
...obfuscate the string with some very simple encryption (basically a substitution cypher)

...make the password the last entry, and have some other long params, so that the tail of it would not be viewable, like this:

http://www.biglumber.com/cgi-bin/joke.pl?active=on&&HowManyProgrammers
+DoesItTakeToScrewInALightbulb=thejoke&thepunchline=hidden&password=pe
+rlrocks
[download]

...buy the C.H.I.M.P. and switch apps when someone approaches. :)

Comment on Re: Securing the URL Download Code