Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.javascript > #31423

Re: Logging in without a refresh

Show all headers | View raw

bit-naughty@hotmail.com wrote on 21 Sep 2016 in comp.lang.javascript:

> I've seen pages, where if you click Login, it pops up a box asking for
> username+password, if you authenticate, it *logs you in without a
> refresh*!!, ie.  the box says "Authenticated" or whatever, and
> disappears, and the page behind is now logged in.

You are just assuming.
Better do some reseach on the page, 
try F12 and inspect the clientside code.

> I'm interested in the
> mechanics of this, but what I'd like most of all to know is - is the
> cookie that's set on the client side set on the server side or the
> client

You are just assuming.

Cookies are always clientside.

Cookies, therefore are unsafe for authentication.

Serverside session-variables are much safer.

> ie. in PHP or Javascript? 

You are just assuming.

Serverside can have a bunch of other languages than PHP,
even including Javascript.


-- 
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)

Back to comp.lang.javascript | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Logging in without a refresh bit-naughty@hotmail.com - 2016-09-21 07:13 -0700
  Re: Logging in without a refresh "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2016-09-21 17:37 +0200
  Re: Logging in without a refresh Ram Tobolski <ramtob@gmail.com> - 2016-09-23 02:55 -0700
    Re: Logging in without a refresh "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2016-09-23 12:02 +0200
      Re: Logging in without a refresh Ram Tobolski <ramtob@gmail.com> - 2016-09-24 06:35 -0700
        Re: Logging in without a refresh "Evertjan." <exxjxw.hannivoort@inter.nl.net> - 2016-09-24 15:51 +0200

csiph-web