You can also get the hash of the password and submit the hash to the server.
In that way you'll avoid cleartext passwords on the wire.

-- 
Regards,
Artashes Hovasapyan


2009/9/10 Kamal Chandana Mettananda <lka...@gmail.com>

> Exactly; while using Ajax you must pay more attention towards security.
>
> Also you should never bring the passwords from the database into your jsp
> page and do a check using javascript; rather send your password to the
> server and see whether it's valid or not.
>
>
> ---------------------------------------
> Kamal Mettananda
> http://lkamal.blogspot.com
>
>
> On Thu, Sep 10, 2009 at 3:21 PM, Maximiliano <moraga....@gmail.com> wrote:
>
>>
>> it is possible with ajax as Kamal said, but why you want to do that?
>> as i can see it will be really insecure.
>>
>> On Sep 10, 9:28 am, aryan <sagar.k...@gmail.com> wrote:
>> > Hello,
>> > I am validating user entered password with database password on server
>> > side in jsp. Can any one tell is there any way to validate password
>> > with database password on client side like using JavaScript? and how?
>>
>>
>>
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google
Groups "Java EE (J2EE) Programming with Passion!" group.
To post to this group, send email to
java-ee-j2ee-programming-with-passion@googlegroups.com
To unsubscribe from this group, send email to
java-ee-j2ee-programming-with-passion+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/java-ee-j2ee-programming-with-passion?hl=en?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to