RE: Passing data between frames

Chris,
The best way would then have to be in sessions. Your only other options would be cookies (not secure) or as a url string (not secure).

There is the possibility of posting from a form on the one page to a form on the other frame. This is complicated, and may not work for your app.

Just my two cents.

Vinny Bedus
Bit Changers
http://www.bitchangers.com/

-----Original Message-----
From: Chris Neil [mailto:Chris.Neil@abs-ltd.com] Sent: Friday, March 28, 2003 5:34 AM
To: 'webappsec@securityfocus.com'
Subject: Passing data between frames

What would people recommend as the best way to pass sensitive data between
frames? The frames are separate web sites hosted on the same machine.

(if it matters it's IIS)

Chris Neil
  Security Officer
  Chris.Neil@abs-ltd.com

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek