How to hide values in hidden fields?

Question

I have a simple form in which I have 3 hidden fields, through which I am passing values to another page.

But I don't want anyone to see it through view page source or Fire Bug. I am working with PHP.

<form action=" " method="post" name="push">
    <input type="hidden" name="publisherid" value="createcoolapps"/>
    <input type="hidden" name="username"value="buzzmo"/>
    <input type="hidden" name="pass" value="Javea0615"/>
    <select name="appid">
        <option value="QRScanner">app1</option>
        <option value="app2">app2</option>
        <option value="app3">app3 </option>
        <option value="app4">app4</option>
    </select > 
    <input type="hidden" name="topics" value=" "/>
    Notification Message:<br />
    <textarea style="width:10; height:10;" name="pushmessage"></textarea><br/>
    <input type="submit" value="Push"/>
</form>

Dude! That HTML need some love! Delete those unnecessary spaces. — Axel A. García, Apr 14 '13 at 17:24
i tried it using sessions and its hide the values ...is there any another way ????? — gss, Apr 19 '13 at 18:36

score 2 · Answer 1 · answered Apr 14 '13 at 17:15

2

You cannot hide values of hidden form elements. You could encrypt it or try to protect other way, but it will be there.

answered Apr 14 '13 at 17:15

Marcin Orlowski

72,056
11
123
141

i dont know how to encrypt them...plz telll mee how to doo...n i am fetching the data in hidden filed from database – gss Apr 14 '13 at 17:16

score 2 · Answer 2 · answered Apr 14 '13 at 17:15

2

You can't hide anything in HTML. If it's in the code, anyone can see it. If you need to pass values between pages and keep them hidden, then you need to use Sessions.

answered Apr 14 '13 at 17:15

John Conde

217,595
99
455
496

score 2 · Answer 3 · answered Apr 14 '13 at 17:16

You can't. If you want to keep something secret from the visitor, don't give it to the visitor's browser.

Store the data on the server and send a token related to that data to the browser instead. Look the data up using the token when the browser submits it back.

You could use sessions for this (although beware of race conditions).

score 0 · Answer 4 · answered Apr 14 '13 at 17:55

0

As already said, $_SESSIONis the way to go.
If you can't, there ARE ways to protect hidden fields, with a certain amount of security.
The solution is
1. encoding the data and sending the encoded data and the hash,
2. validate if the data has been changed on the 2nd page and de-code it there.

If you are interested, leave a comment and I'll provide some examples.

answered Apr 14 '13 at 17:55

michi

6,565
4
33
56

can u tell how encode the data....and i have to send two variables username and password which are hiddden – gss Apr 15 '13 at 13:13

How to hide values in hidden fields?

4 Answers4

Linked

Related