Hi Vineetha,

a form will always send the input values either in the URL for GET requests or 
as body request for POST. By that you will always be able to see your data in 
Firebug, that’s how form submission works in the end.

To prevent others to intercept your credentials the way to go is to use HTTPS 
either for your entire site or at least for the login page. Using javascript on 
the client side to encrypt the form fields prior to sending would prevent an 
easy inspection but I doubt it will add anything to securing the data as the 
javascript logic would be readable by an attacker too.

jw


> Am 28.05.2015 um 13:41 schrieb Vineetha N <[email protected]>:
> 
> Hi
> 
> Please find the enclosed document and help me to overcome this problems
> 
> Thanks & Regards,
> Vineetha N
> <Security_issues.doc>


Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list      ([email protected])
Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com

This email sent to [email protected]

Reply via email to