URL Hiding

Rails
1

Greetings friends,

Please, take my apologies, if the question was asked before.

I`m interested to find out, how to integrate URL hiding technology
into Rails app.
Any help will be helpful.

Thanks in Advance

2

What do you mean of URL hiding?? can you give an example??

3

Someting like Amazons strings, which are generating as urls.

regards

4

On Wed, Jun 16, 2010 at 12:52 AM, JuKuen [email protected] wrote:

Someting like Amazons strings, which are generating as urls.

I still have no idea what you’re talking about.

Maybe you could provide an actual example, or explain what goal you
are trying to achieve?

–
Hassan S. ------------------------ [email protected]
twitter: @hassan

5

The idea is generating url`s which will hide what is the database used
to store the information and hiding the server side language wrapper.
example:
http://www.amazon.com/gp/product/1934356166/ref=s9_simv_bw_p14_i2?pf_rd_m=ATVPDKIKX0DER&pf_rd_s=center-4&pf_rd_r=0QDPNRG9W6H5YTMMF2G9&pf_rd_t=101&pf_rd_p=41171042&pf_rd_i=283155
the idea is in the string generated after the product/ folder

On Jun 16, 6:01 pm, Hassan S. [email protected]

6

On 16 June 2010 17:28, JuKuen [email protected] wrote:

The idea is generating url`s which will hide what is the database used
to store the information and hiding the server side language wrapper.

What do your URLs look like now that gives away the DB and
server-side language?

7

On Jun 16, 2010, at 9:28 AM, JuKuen wrote:

The idea is generating url`s which will hide what is the database used
to store the information and hiding the server side language wrapper.
example:
http://www.amazon.com/gp/product/1934356166/ref=s9_simv_bw_p14_i2?pf_rd_m=ATVPDKIKX0DER&pf_rd_s=center-4&pf_rd_r=0QDPNRG9W6H5YTMMF2G9&pf_rd_t=101&pf_rd_p=41171042&pf_rd_i=283155
the idea is in the string generated after the product/ folder

Hiding the database shouldn’t require any additional work beyond making
sure your error messages don’t point out that the database is.

Hiding the server side language is harder… regardless of what URL you
use.

For example… if /images/rails.png exists, good chance it’s Rails :slight_smile:
Lots of people forget to remove it.

Or, if the server sends back the following header…

X-Powered-By: Phusion Passenger (mod_rails/mod_rack) 2.2.5

Good chance it’s Rails. You can configure it not to do this, but there
are other ways too… just look for common Rails idioms (asset
timestamping, etc.)

Dig deeper at the network level and you can even figure out the OS in
many cases…

Just saying that it’s probably not possible to truly hide this
information from someone determined enough to get it.

-philip