Dear colleagues,
I'm facing a peculiar problem. I have a BSP application, the URL of which is in the format
http://<messageserver:<port_no>/sap/bc/bsp/sap/<bsp_app_name>/start.do
Now one of the customer has come back with a request that if anybody knows the bsp application name and has hacked the password one way or other, then the person can easily logon to the system and do whatever is possible.
The main concern is that as all our bsp application URLs have standard format, so it is possible to just substitute bsp_app_name with another bsp application name and then give password to work with it.
His request is to encrypt the URL. Is it possible? Any pointers in this direction will be helpful.
Regards,
Priyanka
p.s I have posted this message also in the roadrunner newsgroup.