|
Posted by Dag Sunde on 11/14/06 17:26
James54321 wrote:
> Um, wouldnt doing it like that give a major vulnerability so users can
> cheat by going to http://mysite.com/highscores.php?score=23&name=me or
> is that not how you meant :S.
>
That can be avoided by letting the VB-App log in to the web-app first,
using the same principle and with a buildt-in MD5 or SHA1 encrypted
password first. Let the login return a sessionID, and then use that
id as a parameter in all subsequent calls.
--
Dag.
Navigation:
[Reply to this message]
|