• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Jeanne Boyarsky
  • Ron McLeod
  • Paul Clapham
  • Liutauras Vilda
Sheriffs:
  • paul wheaton
  • Rob Spoor
  • Devaka Cooray
Saloon Keepers:
  • Stephan van Hulst
  • Tim Holloway
  • Carey Brown
  • Frits Walraven
  • Tim Moores
Bartenders:
  • Mikalai Zaikin

Need help in writing a secure code

 
Greenhorn
Posts: 1
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
1. Code to disable the back button in the browser.

2. Code to disable the back button in the keyboard

3. Code to make the URL read-only

4. Code for Encryption and decryption of the query string in the URL

5. Code to clear the history from the browser for a specific Site/ URL
 
author
Posts: 15385
6
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
1) Impossible - there are history.go() hacks, but they are not really disabling it
2) Impossible - there are history.go() hacks, but they are not really disabling it
3) Impossible - URLS can be changed, user can easily write it down and type it in manually
4) You can find hashing stuff out there on the net, BUT you got to realize that the code is is plain site to the user and anyone with a little knowledge of JS can get it.
5) You really can not do that. Look into using Posts with expires meta tags.

It is virtually impossible to make a page secure like you want to do. You need to build security on your serverside and make it smart to handle different situations.

Eric
 
Ranch Hand
Posts: 2458
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
I would hammer in: securing your application is to be done at the server side!
 
We cannot change unless we survive, but we will not survive unless we change. Evolving tiny ad:
a bit of art, as a gift, that will fit in a stocking
https://gardener-gift.com
reply
    Bookmark Topic Watch Topic
  • New Topic