B4X FEED [BANanoVuetifyAD3] Encrypting & Decrypting Traffic between JavaScript (Encrypt) & PHP (Decrypt)

  • نویسنده موضوع نویسنده موضوع practicalsoft
  • تاریخ شروع تاریخ شروع
  • برچسب‌ها برچسب‌ها
    client

اطلاعات موضوع

درباره موضوع در تاریخ, در دسته b4xfeed ایجاد شده و آغاز کننده آن practicalsoftمی باشد و موضوع آن: [BANanoVuetifyAD3] Encrypting & Decrypting Traffic between JavaScript (Encrypt) & PHP (Decrypt) است. این موضوع تا کنون 77 بازدید کننده و, 0 پاسخ داشته و 0 بار پسندیده شده...
نام دسته b4xfeed
نام موضوع [BANanoVuetifyAD3] Encrypting & Decrypting Traffic between JavaScript (Encrypt) & PHP (Decrypt)
آغاز کننده موضوع practicalsoft
تاریخ شروع
پاسخ‌ها
0
بازدیدها
77
پسندها
0
آخرین ارسال توسط PracticalSoft
Jun 6, 2020
11,517
4,383
Ola

Whilst you might be secure when running PHP apps on top of SSL, the issue at times is internal and the risks it poses. Anyone who has access to your app can access it and be able to see what happens in the backend if you do PHP CRUD or any ajax/fetch call. Case in point this example.

To be able to see what is being sent by BANano.CallInlinePhpWait, open developer tools, select network, select payload, execute some crud functions.

برای دیدن تصاویر باید ثبت نام کنید


Whilst this is just an example of what one should not do client side (the client app must never know what happens in your backend), in most situations we are faced with building SQL queries client side and needing to be sent to the server for processing.

What if there was a way to change this by encrypting and decrypting the traffic between JavaScript & PHP? Fortunately there is. I will depict the plan to achieve this below.

برای دیدن تصاویر باید ثبت نام کنید



Step 1

A person would normally click a Save button, we want to get the form content and...



 

عقب
بالا