Hiding configuration block due to security reasons

[vnd -]

Hi,

I have a web player url which has 'user' as parameter in it... I am assigning this url to a button using java...

when i click the button, my report is working fine in the webplayer..

Here my concern is, the user can copy the url from the address bar and modify the configuration block to see other user data in it.

I have hidden the address bar to overcome this issue, but it is working fine in IE only not in chrome..

Other than hiding the address bar in the web browsers, can you please suggest any idea to hide the configuration block...

Thank you in advance