You need to sign in to do that
Don't have an account?
Sean434992
prevent user from URL hacking a VF page
In our custom app we are running VF pages that are all showheader=false
I don't want a user to be able to edit the URL and remove the VF page name that then allows them to get in the native salesforce pages and then they are out of the VF app.
Any way to prevent this?
http://boards.developerforce.com/t5/Security/Secure-public-visual-force-page-site-in-the-controller-extension/td-p/311647
If the end user is smart then he can by pass your VF page by adding nooverride=1
https://na2.salesforce.com/a006000000MeOwo?nooverride=1
Please leave your feedback (Kudos), if the suggested solution is working.