How to hide WAP URL from the users?

How to hide WAP URL from the users? SearchSearch
Author Message
Anonymous
 
Posted on Thursday, January 15, 2004 - 08:26 am:   

Hi all:

Is it possible to hide the detailed WAP URL from the users? Currently we use WAP Push for our ringtone download service. User will receive a WAP push msg from us and click to make a connection and download will starts. The msg text is set by us, such as "your ringtone".

However, there is a security loop hole. If the user click to view the detail of the msg, he will be able to see the actual link which initiates the download. Something like: "123.456.789.987/ringtone/222.mid". By modify this msg, he can actually download some other ringtones. The worse thing is our side can do nothing to stop this. So I am wondering, is there a way to make the detail of WAP msg invisible to the user? Please advise me. Thanks
Bryce Norwood - NowSMS Support
Board Administrator
Username: Bryce

Post Number: 1635
Registered: 10-2002
Posted on Thursday, January 15, 2004 - 05:12 pm:   

Unfortunately, you can't hide it.

The ability to display the URL is a function of the phone, and there is no attribute that can be set to hide it.

Generally we find that people use dynamically generated links for this type of purpose.

Each push gets sent out with a dynamically generated link. And after it is downloaded, the link expires so that it is no longer valid.

We've had a "Multimedia WAP Push" function in our Now SMS/MMS Gateway for awhile now. What happens with it is that an application posts the content to NowSMS, and NowSMS publishes a dynamic link just for that instance of the push.

In the most recent version (see http://support.nowsms.com/discus/messages/53/1948.html), we added an ExpireDynamicLinks setting, so that these dynamic links could be automatically expired after access. This prevents the user from forwarding the link to a friend which is another problem that you can run into.

-bn
Anonymous
 
Posted on Friday, January 16, 2004 - 03:55 am:   

Hi BN:

Thanks for advice. Just one more question, is there a way to generate the dynamic link you mentioned in PHP? If yes, can u help me by giving some links on how to do it?

Thank you
Bryce Norwood - NowSMS Support
Board Administrator
Username: Bryce

Post Number: 1757
Registered: 10-2002
Posted on Wednesday, January 28, 2004 - 08:37 pm:   

Using NowSMS, there is a PHP example in the following thread:

http://support.nowsms.com/discus/messages/12/2276.html

Doing it yourself, you'd need to do your own interfacing with your web server to create and expire dynamic links.

-bn
Dhiram
New member
Username: Morpheus

Post Number: 10
Registered: 04-2004
Posted on Friday, May 14, 2004 - 07:25 am:   

Thanks, Can you let me know more on how it works. What value to put to make the link expire.
Joseph
Unregistered guest
Posted on Saturday, June 05, 2004 - 04:02 pm:   

Hello,

I have a question.Actually i want to send a URL to mobile and i want it to be protected.I mean right now when i'm sending the URL it goes directly and anyone can see the URL and could download the link.So i want to send the URL in such a manner that the URL is linked with the particular mobile number so that only that mobile user could download that link.
Please help me with a sample link containing mobile number.
Apeq 224
New member
Username: Apeq

Post Number: 1
Registered: 06-2004
Posted on Tuesday, June 08, 2004 - 05:53 am:   

With regards to the above queries, i m now doing a research on generating URL to a HEX Binary. Does anyone have any idea or tools on how to convert the URL to binary?
John
Unregistered guest
Posted on Friday, June 18, 2004 - 04:47 pm:   

I have a website (http://www.kirkland4thofjuly.com) and then I have a wap site (http://www.buzzed.co.uk/wap/4thofjuly) that is hosted in the uk. Is there some line of html I can put on my index.html page that will direct wap browsers to the wap site?
Dhiram
New member
Username: Morpheus

Post Number: 13
Registered: 04-2004
Posted on Saturday, June 19, 2004 - 07:08 am:   

Also how is possible to prevent wap emulators from accessing my site. (Tagtag.com). Also if someone were to access my wap page via Internet explorer the page gets downloaded exposing the directory of ringtones. How can I prevent this.