change document url w/o page reload

[treebuddy]

Is there a way to change the url that shows in the address bar via the onLoad event without the brower re-requesting using that new url. I tried a few ways: location, location.href, document.location. The thing is I have args in the url, something like '.html?action=copy'that I want to take remove after the new page loads (leaving some other args) so that on a browser refresh, the actions that they run on the servers are not repeated.

The problem that I am having is with request tracker, my page returns a dynamic 'results' box on the page that goes away when I change the url and the page refreshes.

Thanks for any insight.

Ryan

 

[BillyRayPreachersSon]

This cannot be done. Imagine the security implications if it could.

Dan


[tt]Dan's Page [blue]@[/blue] Code Couch

http://www.codecouch.com/dan/

[/tt]

 

[treebuddy]

In what way is this a security risk?

 

[treebuddy]

Does it take a lot of code to keep the url args from being re-requested when using the browser refresh?

 

[BillyRayPreachersSon]

In what way is this a security risk?

You really cannot see how being able to show an arbitary URL in the address bar could be a security risk? Hmm.. one example of many, off the top of my head: Internet banking phishing sites.

Dan


[tt]Dan's Page [blue]@[/blue] Code Couch

http://www.codecouch.com/dan/

[/tt]

 

[treebuddy]

I do not claim to know all things, of course this could be a problem. The thing is, I only want to get rid of one of the args ....html/?id=3&action=run taking off the action=run part, not change the whole domain address.

Maybe suggestions of how to capture the browser refresh action so that it will not resubmit?

 

[BillyRayPreachersSon]

You might be able use the onunload event for that.

Hope this helps,
Dan


[tt]Dan's Page [blue]@[/blue] Code Couch

http://www.codecouch.com/dan/

[/tt]

 

[tsdragon]

Instead of using a url with parameters, make a hidden form with method="post" and submit that via javascript. Then you won't have anything attached to the url.

Tracy Dryden

Meddle not in the affairs of dragons,
For you are crunchy, and good with mustard.

 

[treebuddy]

Thanks for the tip on the hidden forms. The thing is, I am customizing an already made perl app, RT (Request Tracker) and I am not really using forms. I am kindof sticking with the way that it was already being done, I just decided to give an alert saying not to use the refresh button, the users are supposedly technical so they should be ok.

Now that I am thinking about it, with post there is still the chance that the fields will resubmit.

Ryan