In the control panel I built I use URL(..., user_signature=True) and @auth.requires_signature() to secure the urls.
I the init application I built I have various links to a particular function with different combinations of args and vars. I want to limit access to that function so only the explicitly generated links will work i.e. prevent users from generating their own combinations of args and vars. Is it possible to digitally sign the allowed URLs and check the signature in the action to prevent any other URLs from working, without visitors being logged in? Kind regards, Annet -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (Report Issues) --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to web2py+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/web2py/7eb9e6e0-92bd-4316-b209-d7bbe039d6cdn%40googlegroups.com.