URL Parameters or Session variables?

[cleako]

What is recommended when using many variables that contain information that could be considered a privacy problem if captured?

Are URL parameters fine to use and just use the Request.QueryString("variablename") or should I use session variables even though they can time out?

This is with VB.NET and ASP.NET

Thanks,
Cleako

 

[reshma]

Hi,

If its a sensitive information, use of session variables is recomended than using the quertystring. Coz a user is able to see the data passed in the url as a part of the querystring and its also possible for the user to tamper the data.

Good Luck,
Reshma