function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
Sean434992Sean434992 

prevent user from URL hacking a VF page

In our custom app we are running VF pages that are all showheader=false

 

I don't want a user to be able to edit the URL and remove the VF page name that then allows them to get in the native salesforce pages and then they are out of the VF app.

 

Any way to prevent this?

Rahul_sgRahul_sg
check this out:
http://boards.developerforce.com/t5/Security/Secure-public-visual-force-page-site-in-the-controller-extension/td-p/311647
Sean434992Sean434992
No, I don't feel this answers my question
Kiran KurellaKiran Kurella
The only option I can think of is to override the standard View / Edit buttons with your VF page.

If the end user is smart then he can by pass your VF page by adding nooverride=1

https://na2.salesforce.com/a006000000MeOwo?nooverride=1

Please leave your feedback (Kudos), if the suggested solution is working.