[jQuery] Re: security advice

2007-06-06 Thread Erik Beeson
Yargh! Unless you've omitted something, or I'm misunderstanding, I think you still have a leak in your design. To the OP: that's a fairly big question, but here are some thoughts. Apologies in advance for the length of this. Here's the big thing about web security: *any* webpage that a user brow

[jQuery] Re: security advice

2007-06-06 Thread Christof Donat
Hi, Wow, what is this. I have not inserted the '>' in front of the line that starts with "from thinking". It is not in the copy of the message in my sent-folder. It must have beed added somewhere else. Christof

[jQuery] Re: security advice

2007-06-06 Thread Christof Donat
Hi, > i think what i really was after, was a small 'framework' that does the > thing for me. i can include it everywhere i need/want and check a > "isLoggedIn" or sth like that. There can't be a framework that takes the burdon of secure programming from the programmer. There are features of you

[jQuery] Re: security advice

2007-06-05 Thread Michael Stuhr
Alexandre Plennevaux schrieb: That's a rather vague question, hence my vague answer :) i know :-) thanks anyway. Michael Price schrieb: Hi Michael, [...] thanks for your detailed answer. i think what i really was after, was a small 'framework' that does the thing for me. i can include i

[jQuery] Re: security advice

2007-06-05 Thread Michael Price
Hi Michael, On my website I have a lot of pages called via AJAX, some of which are quite sensitive (private messages, user submission data etc.). At the top of every page I have a PHP include which, as well as opening the database connection etc., also includes code to check and authenticate a

[jQuery] Re: security advice

2007-06-05 Thread Alexandre Plennevaux
That's a rather vague question, hence my vague answer :): have your php script called via ajax check for the user authentication session before performing the request. -Original Message- From: jquery-en@googlegroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Michael Stuhr Sent: mardi 5 j