Website Hacking Techniques and their workarounds Cross-site Request Forgery: Sometimes, hackers make an API call to another website. It is called fake identity or false authorization To prevent CSRF, we add an input element with type "hidden" and a _token to the value of a 32 character token that is sent by the server to the client in the first response. After this, the client will send this token in the hidden field every time the client makes HTTP requests to the server Hence, the server matches the token sent by the client to the token stored by the server at every clientHTTP request, and if it matches, it means , that the cliengt is a genuine client. For some pages in a website, We don't want this authorization to take place, hence we disable the token field in the HTTP request for that web page. SQL Injection:- Sometimes, in a form, which has input fields, the user e...
Comments
Post a Comment