javascript - Enforcing Facebook Authentication: Client-side and server-side -


I am preparing a social media app in Flash (AS3) which is tightly integrated with Facebook - all users Accounts are handled via Facebook Connect, and all Facebook Connectivity and API is handled through a combination. I am using backend for server-side data management, which includes tracking user actions and data on the site, which is from Flash to URLRequests

My problem is that I know How to prevent duplicate server requests from Flash; In theory, malicious users can call for Flash on my server and reproduce them in a manner that includes (for example) garbage data and with the Facebook user ID given in my database All authentication is being done on the client side (via the Facebook JS API) without having any interference on the server, so let me find out Skil is how to secure the flash and secure calls between servers in a manner that the user must authenticate with Facebook to make them.

One possibility that I understand is that the client is using the encryption scheme known to the client and server to pass the UID forward and behind, which would definitely be better for them to pass in clear . However, with an adequate time / patience to break this plan, an entrepreneur will take the hacker (or to scing the SCF) to screw everything.

Still, I can finish it, but this is an important point and I'm not really sure about the best approach. Any feedback will be highly appreciated!

This is a legitimate concern because you are violating the encryption can not help this station because a malicious The customer will be able to get any secret.

The best way to verify the client is to send the flash app back to the server. The server will need to connect back to Facebook as if the server can confirm that the client has a valid session with Facebook, it should be done once the login is done, and then you can access the data store for that user. You can issue a session ID (cookie) on the Flash app to reach.


-

Comments

Post a Comment

Popular posts from this blog

Eclipse CDT variable colors in editor -

I hope this is a good question to ask here. This programming is related, so I thought it would be better than the superuser, so I am using the CDT C ++ Eclipse plugin. I know how the editor changes colors for some things But is there a way to do that all the variables are different colors? For example in KDEValue, it sets the local variables and square variables in different colors and bold square squares. Can I copy it to CDT? Eclips provides some level of color customization for text editor syntax You can see it on the following: There are many elements, including the Window> Preferences> C / C ++> Editor> Syntax color code that can be changed, assembly, Comments, Preprocessor and Doxian Under the code, it is possible to change the color of some variable types, such as global variables, local variable announcements, local variable references, and parameter variables. But I do not think the code is capable of changing the color of each variable declared....
Read more

AJAX doesn't send POST query -

$ (दस्तावेज़) .ready (function () {function ajaxselectrss (rssurlvar) {var ajaxRequest; // वेरिएबल जो अजाक्स को संभव बनाता है! कोशिश करें कि {// ओपेरा 8.0+, फ़ायरफ़ॉक्स, सफारी अजाक्स अनुरोध} = नया एक्सएमएलएचटीपीआरइवेस्ट ();} कैच (ई) {// इंटरनेट एक्सप्लोरर ब्राउज़र्स {ajaxRequest = new ActiveXObject ("Msxml2.XMLHTTP");} पकड़ो (ई) {try {ajaxRequest = new ActiveXObject ("Microsoft.XMLHTTP");} कैच (ई) {// कुछ गलत चेतावनी ("आपका ब्राउज़र तोड़ दिया!"); वापसी झूठी;}}} // एक बनाएं फ़ंक्शन जो सर्वर से भेजे गए डेटा प्राप्त करेंगे ajaxRequest.onreadystatechange = function () {if (ajaxRequest.readyState == 4) {var ajaxDisplay = document.getElementById ('news'); ajaxDisplay.innerHTML = ajaxRequest.responseText;}} / / Var rssurlvar = $ (this) .attr ("title"); var queryString = "rurl =" + rssurlvar; var urltofile = "rssget.php"; ajaxRequest.open ("पोस्ट", urltofile, सच); ajaxRequ Est.setRequestHeader ("सामग्री-प्र...
Read more

wpf - Custom Message Box Advice -

Well, I'm using a custom window box that comes with some custom control boxes that accompany the text The producers who are displayed are called. I have a defined event, which has been subscribed through the original class, it gets burnt when clicking on the button. However, I can not see how to use it effectively, I would like to return one yes, whether yes or not, but obviously my code will continue to execute, so this Below is some example code to clarify the problem that the method has subscibed by clicking on the button. Message box window Public partial class custom message box: window {public representative message messagebox object sender, event events e); Public event messagebox handler messagebox document; Public Customs Box () {Initial group (); } Public Customsbox (String Message) {InitializeComponent (); This.txtdescription.Text = Message; } Public Customsbox (String Message, String Title, String First BTNtext) {Initialization (); This.lbltitle.Content =...
Read more