Web Development

Mohammad A Gdeisat wrote:

in a forum topic, the final tag for an image is so at the moment I am only limited to transfer JPEG data

Mohammad A Gdeisat wrote:

I was wondering if there was a trick to change the MIME response type of the server AND to make the browser accept html response inside an tag.

Response.ContentType 

For list of MIME types see <a href="http://www.w3schools.com/media/media_mimeref.asp" target="_blank" title="New Window">here</a>

salil_k_singh wrote:

there is a page where i need to get images that are stored on the server from XML file.

1. You don't control the client. Obvious, right? But i'll repeat it, because too many web devs forget this and we all suffer for it: you don't control the client. So no, you can't hide the address bar, and even if you could there's no guarantee the user couldn't un-hide it, or that the "hide" function would work on all browsers, etc. But more importantly,
   
2. A determined user can change anything that gets sent from the client to the server. The address bar is a bit easier to change than, say, POST data... but a savvy user can throw a custom POST together in seconds. Same with cookies. How do you prevent this? You can't - see #1.
3. Javascript isn't secure. Again, it's maybe a bit less obvious than the URL in the address bar, but just as most browsers let you "View Source" to see how the page itself is built, most also allow debuggers to be attached or custom Javascript (bookmarklets, etc) to be inserted into the page such that variables can be read, edited, etc. I've used this many times on commercial sites to work around breakage, and less kind users may well use it for more nefarious means. Same goes, more or less, for Java applets, Flash, Silverlight, etc... See #1.
   

michael_jhons wrote:

i just want to send the variables without be visible in the QueryString, these variables will be displayed inside a forme which the user can manipulate them.