Posted by Rik on 01/03/07 00:34

geek7 wrote:
> Hello all! I have written a helpdesk ticket webapp which uses many
> javascript calls to different php scripts to update a mysql database.
> My question is, a) is there a way to prevent access from users trying
> to access the php scripts via a URL..ex..
>
> http://www.???.org/scripts/getTickets.php?tid=3234&user=jdoe
>
> and if so, b) what is the best way to do this?

1. Use HTTPS, HTTP is not secure.
2. Authenticate, either by authenticationheaders sent to the server or by
some cookie/session.
--
Rik Wasmus

• Next in forum: Re: installed pdo.so and pdo_mysql.so still no go
• Prev in forum: Re: Another Newbie - Error Installing PHP 5.2 with Apache 1.3
• Thread view: Re: calling PHP with HTTPrequest security

[Reply to this message]