redirecting data from asp to jsp

[ghr]

I'm new to asp.
My requirement is:
getting the user mail id from the system and forward it to a jsp
Now i'm getting the mail id
while redirecting it to jsp i'm using

Response.Redirect("http://systemnumber:portnumber/cp/jsp/index.do?userName="&strMailID)

i'm getting strMailID from windows authentication

during the process of redirection user can change the mail id and hence can enter into the site with another user id.I have to restrict this.
how can i do it in asp?
Thanks in advance...

Regards,
ghr

[jhardman]

I'm new to asp.
My requirement is:
getting the user mail id from the system and forward it to a jsp
Now i'm getting the mail id
while redirecting it to jsp i'm using

Response.Redirect("http://systemnumber:portnumber/cp/jsp/index.do?userName="&strMailID)

i'm getting strMailID from windows authentication

during the process of redirection user can change the mail id and hence can enter into the site with another user id.I have to restrict this.
how can i do it in asp?
Thanks in advance...

Regards,
ghr

The easiest way to do this is to put the data in a session-level variable.

session("userName") = strMailID

then this is kept with any page on your site the user visits. You could also send this data to a cookie, which the user shouldn't be able to change.

Or, if you need to submit the data, this might work.

print all the data to a form, make the fields hidden or at least read-only, then immediately submit the form, like in a onLoad attribute.

Let me know what works for you.

Jared

[danp129]

If the user doesn't need to interact with the jsp page I would use serverxmlhttp to have the webserver hosting the ASP page post the e-mail to the other page, and if neccessary read a response back to the user.

If they need to interact with the page, I'd make a private string that only the ASP and JSP file knows.. like prvKey="4klfmsmk$%#SD9_sdkl><" Then make an md5 hash of that key concatenated with the e-mail address like hash=md5(prvKey & strEmail). Then pass the e-mail and the hash from asp to jsp page. Then in the JSP page make the prvKey the same and make the hash using the same method, then compare the hash created in JSP to the hash passed from ASP to validate.


MD5 hash functions