php - How to secure hidden fields data? -


i have form in have 2 hidden fields. want secure data in hidden fields no 1 can see through page source , fire bug. alreday used session , it's working cant use that. need altrnative please help.

<form name="android" method="post" action="http://apps.createcoolapps.com/c2dm_send.ashx" target="_blank" onsubmit="return valid();"> <table align="center">   <?php $qry_id=mysql_query("select * users u_name='$_session[u_name]'");                     while($id_fetch=mysql_fetch_assoc($qry_id)){             ?>        <input type="hidden" name="publisherid" value="createcoolapps" /> <input type="hidden" name="username" value="<?php echo $query_id[manager_uname];?>" /> <input type="hidden" name="pass" value="<?php echo $query_id[manager_pass];?>" />     <tr align="center">     <td style="width: 100px; font-family: helvetica,arial,sans-serif; font-weight: bold;">select appid:<br>       <select name="appid" style="border-style:hidden">     <option value="">select one</option>     <option value="qrscanner">app1</option>     <option value="app3">app3</option>     <option value="app4">app4</option>     </select>     </tr>      <tr align="center">     <td style="width: 100px; font-family: helvetica,arial,sans-serif; font-weight: bold;">notification message:<br>       <textarea name="pushmessage" style="width: 300px;"></textarea><br />     </tr>     <?php }?>

this not possible. firebug reads dom in it's actual state, if it's added in later stage, can still retrieved.

this way of security called security through obscurity , kind of non-security. have solve way, letting server request in stead.

you let user submit form server. curl, make call webservice correct user code.

for further info best way hide form input field being accessed using firebug?


Comments

Post a Comment

Popular posts from this blog

c# - Send Image in Json : 400 Bad request -

from android trying send image class of data, iis webservice. (c#) the problem 400 bad request . the image being encoded base64 . , placed json rest of class elements. my guess base64 not valid inside json. server not understand it. if set string "" , post accepted fine. so question is, how make base64 valid within json array? ( tried url.encode no success). or how should send image android webservice? gson gson = new gson(); string json = gson.tojson(record); // record has param { string base64photo } how big image? i'm pretty sure surpassing iis json size limit (default 4 mb). check http://geekswithblogs.net/frankw/archive/2008/08/05/how-to-configure-maxjsonlength-in-asp.net-ajax-applications.aspx or http://www.webtrenches.com/post.cfm/iis7-file-upload-size-limits good luck!
Read more

jquery - Fancybox - apply a function to several elements -

this source code below posted cristiano g. carvalho in answer question: calling fancybox gallery other link made user. <div class="details_gallery"> <a href="#" class="manualfancybox">manual call fancybox</a> <div class="details_gallery_min"> <a rel="details" href="max/1.jpg" class="fancybox"><img src="min/1.jpg" alt="" /></a> <a rel="details" href="max/2.jpg" class="fancybox"><img src="min/2.jpg" alt="" /></a> <a rel="details" href="max/3.jpg" class="fancybox"><img src="min/3.jpg" alt="" /></a> <a rel="details" href="max/4.jpg" class="fancybox"><img src="min/4.jpg" alt="" /></a> </div> </div> <script> $(document).read
Read more

An easy way to program an Android keyboard layout app -

i program android app replaces standard keyboard 1 one-hand optimized coffee++ keyboard layout. what special problems have face in progress? guess such project go deep android core, cause keyboard such essential thing. is wise start android developer tools (adt)—eclipse plugin described in this tutorial ? or there better way achieve goal? i new android programming, firm in php, mysql , javascript , use eclipse php i guess such project go deep android core, cause keyboard such essential thing. no. can create inputmethodservice implementation of keyboard. there sample soft keyboard in android sdk installation (if chose download sample code sdk manager), , there open source input methods floating around well, such hacker's keyboard. inputmethodservice distributed part of ordinary android application, , user can elect activate input method if user chooses. is wise start android developer tools (adt)—eclipse plugin described in tutorial? that fine s
Read more