Hiding some GET parameters from URL

Question

I am redirecting page using PHP header location:

Current URL in browser

 https://mywebsite/open/firstpage/php/start.php?&cnt=us&language=en&url=http://secureURL.com

but want to show

https://mywebsite/open/firstpage/php/start.php?&cnt=us&language=en

I am using GET method on the other side to collect all variables. I have to hide &url in querystring but want to receive it on other side $_GET['url']

How can I share my &url without showing in URL querystring? HOw can I write htaccess?

If `&url=...` is removed from original string then it won't be available as `$_GET['url']` — anubhava, Apr 28 '16 at 10:21
@anubhava I have keep `&url=` in URL, but dont want to show in broesers URL — Mangesh Sathe, Apr 28 '16 at 10:23
What does that mean? If browsers doesn't see some part of URL that means they will not send that to your web server as well. — anubhava, Apr 28 '16 at 10:32

Rijul Sudhir · Answer 1 · 2016-04-28T12:13:56.090

2

Redirect for all URLs

RewriteEngine on
RewriteRule ^(.*) $1?%{QUERY_STRING}&url=http://secureURL.com [L]

Redirect for only /open/firstpage/php/start.php

RewriteEngine on
RewriteCond %{REQUEST_URI} ^/open/firstpage/php/start.php
RewriteRule ^(.*) $1?%{QUERY_STRING}&url=http://secureURL.com [L]

I think this is what you want.

edited Apr 28 '16 at 12:13

answered Apr 28 '16 at 11:41

Rijul Sudhir

2,064
1
15
19

1

Yes,but still I am not sure if all urls needed to be redirected or just the one mentioned. – Rijul Sudhir Apr 28 '16 at 11:48

score 1 · Answer 2 · answered Apr 28 '16 at 11:30

You can't do that. If a parameter is not present in the query string, it won't be available anywhere, it's just not there. There's no such thing as "hiding" the query string.

You could, however, use some form of session mechanism to pass a piece of data from one page to another. You could put it in the $_SESSION, or use cookies. There may also be a way to achieve this through really arcane mod_rewrite magic, but you shouldn't go down that route. Really.

More importantly: what are you trying to achieve? Why are you trying to do this?

Aesthetic reasons? Then be aware that modern browsers tend to hide the query string part of the URI from the user.

Security reasons? Then you're doing it horribly wrong, you shouldn't use something so easily manipulated by the client.

User tracking? There are established solutions out there for that (say, Google Analytics).

I am now applying Security salt, I will share it with thirdt paarty they will check RSA on it. Finally both hash values should be same — Mangesh Sathe, Apr 28 '16 at 11:38

Hiding some GET parameters from URL

2 Answers2