[support] Question about send parameters from Drupal to an external site

[Robert Hicks]

Sorry for the ambiguity, I mentioned a FORM just a means to see if the
iFrame could receive POST data, and this failed. The request never
made it to the iFrame.

Right now it works like this: User logs into the site which is managed
by Drupal. Drupal retrieves all of the data said user is able to
see/have access to. Drupal needs to send some identifier for each
piece of data to our external site running in Tomcat (these will
probably be primary keys in a table). This all works fine with the
iFrame Page if I specify all of those identifiers in URL (like
http://www.our-site/?a=1&b=2&c=3) but that is not desirable since I
would like to hide the data being sent between the two servers.

On Mon, Apr 26, 2010 at 1:00 PM, Gottwig, Jeremy M.
(GSFC-272.0)[ZIMMERMAN & ASSOC.] <jeremy.m.gottwig at nasa.gov> wrote:
> I'm often slow in working through workflows, so forgive me if you've already described all this using different language:
>
> In your original post, you mentioned something about posting through a form.  For a workflow, does this mean that currently, you have a form (is this form in the iFrame as well?) which, upon submission, sends out a GET request to your Tomcat application, and then Drupal displays the resulting Tomcat page in an iFrame?
>
>
> -----Original Message-----
> From: support-bounces at drupal.org [mailto:support-bounces at drupal.org] On Behalf Of Robert Hicks
> Sent: Monday, April 26, 2010 12:27 PM
> To: support at drupal.org
> Subject: Re: [support] Question about send parameters from Drupal to an external site
>
> Thanks Jeremy,
>
> I realize POST data is no more secure, but it makes it less obvious to
> the user that they can muck around with the request. I actually tried
> using POST data but the iFrame page failed to receive the request
> entirely, so at least off the shelf this module will only accept GET
> parameters.
>
> The framework idea is this: Drupal manages what a user can and can't
> see. This list of data that the user can see is then sent to an
> external page (which is actually a JSP running in a Tomcat Container)
> and the data is presented to the user. Basically Drupal is managing
> the requests to Apache Tomcat. Therefore, Tomcat knows nothing of user
> roles or even who is looking at the data. I realize this probably
> isn't the best way to do this but Java is my (and every other
> developer I work with) strongest language so we are trying to keep the
> existing functionality that we have already written in Tomcat as
> Servlets and JSPs.
>
> Hope that makes sense and thanks in advance!
>
> On Mon, Apr 26, 2010 at 9:57 AM, Gottwig, Jeremy M.
> (GSFC-272.0)[ZIMMERMAN & ASSOC.] <jeremy.m.gottwig at nasa.gov> wrote:
>> Well, I guess you could pass the params through POST data, but that's really not any more secure for anyone who knows what to look for.
>>
>> In this case, I might build a module that can tap into your external data directly.  You could include the necessary PHP as part of your page callbacks both for display and submitting your form data.
>>
>> -----Original Message-----
>> From: support-bounces at drupal.org [mailto:support-bounces at drupal.org] On Behalf Of Robert Hicks
>> Sent: Monday, April 26, 2010 9:37 AM
>> To: support at drupal.org
>> Subject: [support] Question about send parameters from Drupal to an external site
>>
>> Hi all, I am currently using an iFrame Page to create my content. I
>> have an embeded iFrame which goes out to an external site and brings
>> back some data to be displayed to the user. The data that is displayed
>> depends on certain parameters and the only way I have thus far been
>> able to get it to work is by passing them in the URL (i.e.
>> http://localhost:8008/drupal/?param=value). I need to be able to hide
>> these so they are not easily changed by the client. Posting through a
>> FORM would be ideal. Is this possible? If not with this module is
>> there another way I could be doing this?
>>
>> Thanks!
>>
>> --
>> web http://www.hyxspace.com
>> aim hyx1138
>> --
>> [ Drupal support list | http://lists.drupal.org/ ]
>> --
>> [ Drupal support list | http://lists.drupal.org/ ]
>>
>
>
>
> --
> web http://www.hyxspace.com
> aim hyx1138
> --
> [ Drupal support list | http://lists.drupal.org/ ]
> --
> [ Drupal support list | http://lists.drupal.org/ ]
>



-- 
web http://www.hyxspace.com
aim hyx1138