FUDforum: FUDforum Suggestions » Semi-bug, slight misdesign? GET requests.

Home » FUDforum » FUDforum Suggestions » Semi-bug, slight misdesign? GET requests.

Show: Today's Messages :: Polls :: Message Navigator

Re: Semi-bug, slight misdesign? GET requests. [message #14169 is a reply to message #14143]

Thu, 06 November 2003 18:24

Anonymous

I wasn't concerned with security as much as I was about the behavior of browsers or proxies submitting more than one GET request for a resource that alters something permanently.

Regarding security, what I do now is something like this(generalized example):

<a href=" http://somewhere.net/somescript.php?action=lock&thread=4&k={special id}">

Where specialid is the md5sum of the session id, remote ip address, and some other unique things.

Then if the value of "k" read in somescript.php does not equal to the calculated special id, the request is denied.

I do something similar to this with POST requests. I guess it would be vaguely similar to using the verification aspects of URL sessions.

Report message to a moderator

[Message index]

		Semi-bug, slight misdesign? GET requests. By: Xodnizel Test on Thu, 06 November 2003 04:34
		Re: Semi-bug, slight misdesign? GET requests. By: Ilia on Thu, 06 November 2003 16:12
		Re: Semi-bug, slight misdesign? GET requests. By: Ilia on Thu, 06 November 2003 16:16
		Re: Semi-bug, slight misdesign? GET requests. By: Anonymous on Thu, 06 November 2003 18:24
		Re: Semi-bug, slight misdesign? GET requests. By: Ilia on Thu, 06 November 2003 20:00
		Re: Semi-bug, slight misdesign? GET requests. By: Xodnizel Test on Fri, 07 November 2003 00:09
		Re: Semi-bug, slight misdesign? GET requests. By: Ilia on Fri, 07 November 2003 00:28
		Re: Semi-bug, slight misdesign? GET requests. By: Anonymous on Thu, 08 September 2005 19:17
		Re: Semi-bug, slight misdesign? GET requests. By: Xodnizel Test on Fri, 07 November 2003 01:38
		Re: Semi-bug, slight misdesign? GET requests. By: Ilia on Fri, 07 November 2003 02:06
		Re: Semi-bug, slight misdesign? GET requests. By: Xodnizel Test on Sat, 08 November 2003 00:17
		Re: Semi-bug, slight misdesign? GET requests. By: Ilia on Sat, 08 November 2003 01:07

Previous Topic:	XML/RSS buttons for easy syndication of forum content
Next Topic:	Capture post title when going from thread-->PM create

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Wed Nov 27 21:28:17 GMT 2024

Total time taken to generate the page: 0.03847 seconds