Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #17163

Re: Multipart questions

Show all headers | View raw

Cybercode wrote:

> bit-naughty@hotmail.com wrote:
>> I've used sites, for example, a bank's where you login with your username 
>> and password, and then it asks you "security questions" - like, your
>> favourite colour, whatever, etc. etc. How is this sort of thing coded?
>> The security questions appear without a refresh, mind you, ie. on the
>> same page - so after the name+pwd authentication is done, does *client
>> side Javascript* set some sort of cookie? If, after entering your
>> username and password, the security quesions appear, and you refresh the
>> page - what happens exactly? The authentication will happen again, and
>> *another* cookie will be set..... - how does the system protect against
>> that?
> 
> Sounds to me like it uses XHR in order to request your security question
> from the server after you have entered your login credentials.

Not necessarily.  In fact, it is more likely that it happens in an iframe.  
Bank sites, for example, are not usually based on XHR.
 
> XHR is often used with AJAX in order to update pages with new information
> from the server without having to reload the page.

XMLHTTPRequest (XHR) is the *proper* term for that technology; AJAX 
(Asynchronous JavaScript and XML) is the historic marketing buzzword,
in common cases a *misnomer*.
 
> https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest
> and
> https://developer.mozilla.org/en-US/docs/AJAX
> can provide you with more information about this.

Please read that carefully yourself, and post here using your real name 
only.

-- 
PointedEars
Zend Certified PHP Engineer <http://www.zend.com/en/yellow-pages/ZEND024953>
<https://github.com/PointedEars> | <http://PointedEars.de/wsvn>
Twitter: @PointedEars2 | Please do not cc me./Bitte keine Kopien per E-Mail.

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Multipart questions bit-naughty@hotmail.com - 2016-12-01 09:50 -0800
  Re: Multipart questions Cybercode <lambda@dr.com> - 2016-12-01 18:36 +0000
    Re: Multipart questions Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2016-12-02 01:06 +0100
      Re: Multipart questions Jerry Stuckle <jstucklex@attglobal.net> - 2016-12-01 19:48 -0500
        Re: Multipart questions Arno Welzel <usenet@arnowelzel.de> - 2016-12-03 12:55 +0100
          Re: Multipart questions Jerry Stuckle <jstucklex@attglobal.net> - 2016-12-03 10:12 -0500
            Re: Multipart questions Arno Welzel <usenet@arnowelzel.de> - 2016-12-04 23:24 +0100
              Re: Multipart questions Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2016-12-05 00:17 +0100
              Re: Multipart questions Jerry Stuckle <jstucklex@attglobal.net> - 2016-12-04 19:17 -0500
                Re: Multipart questions "R.Wieser" <address@not.available> - 2016-12-05 10:08 +0100
                Re: Multipart questions Jerry Stuckle <jstucklex@attglobal.net> - 2016-12-05 08:27 -0500
                Re: Multipart questions "R.Wieser" <address@not.available> - 2016-12-05 16:33 +0100
                Re: Multipart questions Arno Welzel <usenet@arnowelzel.de> - 2016-12-05 19:06 +0100
  Re: Multipart questions "J.O. Aho" <user@example.net> - 2016-12-01 20:03 +0100

csiph-web