securing an asp.net web service for use with jquery ajax -

-

I am using jquery ajax to fetch data from the asp.net webservice I am wondering how i safe it I can do it and work with jazzery Ajax. This service is part of my web application and in order to access it you have to log in to the application. However I want to make it more secure. For example, a consultant who is looking at all its customers in an autocomplete box, that's good, but they can send it to another adviser's ID instead. What is the best way to safeguard it? Though I have seen this article here, I do not know how any help to make this work with jquery ajax would be appreciated.

As far as I understand, you want to make sure that you use the person who uses your service Know the identity of If the web service is part of your application, then it should not be a problem using cookies (on the same domain on the site to handle web services). Look for some ideas.

Otherwise, you can exclude the temporary identifier from the log members of your site which will be used in the webservice call - in this way even if the identifier is stolen it can be used for a limited time for.


Comments

Post a Comment

Popular posts from this blog

MySql variables and php -

-
I am getting an error with php in order to format mysql_query () in php to format this string What is the right way? SELECT SELECT SELECT (*) Agents @AgentCount; User_Agent_English, User_Angent_Oursal, US.___Gent_Aginal, COUNT (User_Agent_Percade) ACC, COUNT (*) / (AgentCount) Percentage by agents user_agent_preser order DEC limit limit 50; In PHP, how am i setting $ query $ query = "SELECT count (*) agents @ agentcount; SELECT user_agent_parsed, User_agent_original , COUNT (user_agent_parsed) ascount, COUNT (*) / (@AgentCount) as a percentage by user_agent_parced by URI date DESC limit 50 "; This exact query will work properly if I put it in MySQL directly through a command line session. Do I need to release two separate php calls from mysql_query () and store the results first? I get the following error: There is an error in your SQL syntax; Instead of using a sub-selection and instead of using the 'SELECT user_agent_parsed, user_agent_original, ne...
Read more

Which Python client library should I use for CouchdB? -

-
I am starting to experiment with CouchDB because it looks like we have the right solution to certain problems That all the work will be on a new project, which does not have any legacy dependency, which the client library will suggest you use, and why? If we overlap any of the OS. Freeband is available only in the collection of its ports, but asks to use the library's project website. None of those people are Ubuntu, which is only with ships, since those two OSAs are not common in libraries, I am probably installing something from source (and hopefully if I have time, then Ubuntu and FreeBSD People pack the package). For those interests, I want to use CouchDB as a convenient intermediate storage space for data passed between different services - think of a message bus system, but less formalities with. For example, we have daemons that download and pars the web page, then send an interesting bit to other daemons for further processing. Many of them are ill-defined until the...
Read more

c# - How can I find out if there are windows above a control? -

-
If I have Winforms controls, can it be possible to tell whether the window above it (from any application)? Actually, I have to know that some parts of my control are actually appearing on the screen. If you are happy to p / call, the EnumWindows function provides all top-level windows HWND on the screen is; This allows you to get a Non-Client Rectangle (GetWindowRect) to compare the limits of your form. This non-rectangular opaque areas (media player and fancy skins for choice), so you can be false positive for such a control window.
Read more