[jboss-user] [JBoss Portal] - Portlet form's POST method behaving like GET method
bala24
do-not-reply at jboss.com
Thu Nov 6 12:28:34 EST 2008
Hello,
I am using Jboss Portal 2.6.6-GA. I have a form in a portlet, that collects username and password from the user and sends it to the portlet logic to process it.
<form name="mainForm" action="<portlet:actionURL/>" method="POST">
| <INPUT TYPE=TEXT NAME=username SIZE=20>
| <INPUT TYPE=PASSWORD NAME=password SIZE=20>
| :
| :
| </form>
When submitted, even though the form is sent using POST method, the form data is seen in the address bar of the browser, including the password that the user typed.
What I am seeing in the address bar is something like this:
https://myserver.com:443/portal/sec/portal/default/default/MyPortletWindow?password=somepassword&action=e&windowstate=normal&mode=view&username=myself
But I do not want the password or any other form data to be visible in the location bar. How can I prevent this? Any clues?
Thanks much in advance.
.Bala.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4187447#4187447
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4187447
More information about the jboss-user
mailing list