Protected Variables

The Web Application Server supports 'protected' variables. Any variable name that starts with '__protected__' (e.g. '__protected__IsLoggedOn') can only be set using Xbasic code in a page, and cannot be set from the URL. For example: http://myserver/page1.a5w?session.__protected__IsLoggedOn=yes will not create the variable 'session.__protected__IsLoggedOn'.

Note: The word "protected" is preceded and followed by 2 underscore characters.