Posted by Rik on 01/03/07 00:34

geek7 wrote:
> Hello all! I have written a helpdesk ticket webapp which uses many
> javascript calls to different php scripts to update a mysql database.
> My question is, a) is there a way to prevent access from users trying
> to access the php scripts via a URL..ex..
>
> http://www.???.org/scripts/getTickets.php?tid=3234&user=jdoe
>
> and if so, b) what is the best way to do this?

1. Use HTTPS, HTTP is not secure.
2. Authenticate, either by authenticationheaders sent to the server or by
some cookie/session.
--
Rik Wasmus

[Back to original message]