| Re: php includes and ajax [message #173114 is a reply to message #173105] |
Tue, 22 March 2011 10:34   |
Captain Paralytic
Messages: 204
Registered: September 2010
Karma:
|
Senior Member |
|
|
On Mar 22, 12:06 am, Lwangaman <u...@compgroups.net/> wrote:
> I have not been able to post back to this forum for the last few hours, the server hasn't been responding... I've lost my post a couple times I hope it gets through this time.
>
>> Which can easily be faked on the client. There is absolutely NOTHING to
>
> prevent me from creating my own page with the buttons, for instance, and
> submitting it to your server.
>
> Perhaps I have not explained myself well enough. I AM doing server side verification. So I don't need counseling on security. The administrative divs ARE created by php user verification in the first place, the buttons on the jquery-ui dialog interface are created afterwards using an ajax style verification. You can fake those buttons all you want tricking the ajax call, but those buttons won't do anything if you're not a real administrator because the administrative div that they pull up (or unhide) won't exist on the page unless you are an administrator. I hope I have explained that better..
>
>> The first thing to do is to FORGET ABOUT AJAX!
>
> Well, I would say that this affirmation is not very informed or open-minded. I don't if you have ever used ajax or if you know what it is useful for.. AJAX does not substitute server-side coding. All AJAX does is create an asynchronous channel of communication between the client and the server in such a way as to not have to refresh the entire page.
I have used AJAX and I do know what it is useful for and I have tried
to help you by telling you that by talking about AJAX in the context
of a pure php problem (since PHP knows nothing about AJAX) you are
simply muddying the waters.
I do not need a lecture from you about what AJAX is and isn't.
Since you seem not to want help from your betters, I for one am out of
here.
|
|
|
|
Calendar
Search
Help
Members
Register
Login
Home
]