-











This Blog is Permanatly moved to : https://medium.com/@sachin.ramesh


No more posts here ! 

Comments

Post a Comment

Popular posts from this blog

implement CSRF protection - Synchronizer token pattern

-
Image
what is synchronizer token pattern ?  as above figure, first client browser request login page and log in to the system. same time server generates CSRF token and store it on server side. next time user interact with the server, user ask server to send CSRF token with AJAX and user submit data along with CSRF token.  so server can verify this request came from legitimate user by comparing CSRF token received and own. How to implement ? In this web app there are 3 files  client side -> index.html  server side -> login.php                         sever.php step 1 - login UI     you need to model simple its index.html this is the main page of the app. this is my index.html step 2 -  when user click log in data will send to server side (login.php) and authenticate user.  then only if user authenticated client browser will create a new co...
Read more

Implement CSRF protection - Double submit token

-
Image
what is double submit token Cookies? as above figure when client login to the system server generates the CSRF token and store it in the client side (on cookie) when next reques goes to server, client embed the csrf token in to submit form and sends with CSRF token cookie. when server receive an request from client, it will validate user by comparering  both CSRF token field on the submit form and CSRF token cookie. How to implement ? In this web app there are 3 files  client side -> index.html  server side -> login.php                         sever.php step 1 -  login UI     you need to model simple its index.html this is the main page of the app. this is my index.html step 2 -  when user click log in data will send to server side (login.php) and authenticate user, start session  and set 2 cookies in client webbrowser 1 - Session cookie 2...
Read more

Jaggery From WSO2

-
Image
Lets See what is jaggery .. Jaggery is a framework developed by WSO2, to write web apps and HTTP-focused web services for all aspects of the application: front-end, communication, Server-side logic and persistence in pure Javascript. One of the intents of this framework is to reduce the gap between writing web apps and web services. Importantly, Jaggery is open-source and released under Apache 2.0. As a pure Javascript server-side scripting engine, Jaggery combines all the strengths of Javascript with flexibility and freedom at both the development and deployment stages. Most JavaScript webapp development mechanisms restrict developers to a framework-specific structure or patterns, which demand an additional learning curve. By contrast, with Jaggery, any developers who are versed in Javascript have everything they need to get going.  you can download and try the language from the visiting Jaggery website. so lets download and try it... visit the jagger...
Read more