Path: csiph.com!2.us.feeder.erje.net!feeder.erje.net!1.eu.feeder.erje.net!weretis.net!feeder4.news.weretis.net!feeder5.news.weretis.net!news.solani.org!.POSTED!not-for-mail
From: Thomas 'PointedEars' Lahn <PointedEars@web.de>
Newsgroups: comp.lang.php
Subject: Re: Multipart questions
Date: Fri, 02 Dec 2016 01:06:24 +0100
Organization: PointedEars Software (PES)
Lines: 40
Message-ID: <1976808.iZASKD2KPV@PointedEars.de>
References: <083d5e3f-1bb8-4caf-9372-2c4ced60bb2f@googlegroups.com> <P4_%z.146464$a14.134302@fx45.am4>
Reply-To: Thomas 'PointedEars' Lahn <php@PointedEars.de>
Mime-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 7Bit
X-Trace: solani.org 1480637186 30842 eJwFwYEBwCAIA7CXlELRc5DR/09YEuBmpzPooVDZPKDAnFu9Q6vVEFm27B2WSh/SuM7FjP8tcxGK (2 Dec 2016 00:06:26 GMT)
X-Complaints-To: abuse@news.solani.org
NNTP-Posting-Date: Fri, 2 Dec 2016 00:06:26 +0000 (UTC)
User-Agent: KNode/4.14.2
Cancel-Lock: sha1:PCpQ1ZhZDMH0uWssFDdJv5GJYro=
Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAGFBMVEXTxa4RFk5dUWANED8PFEfy7+MGBiW+n3ZNF/QuAAACaElEQVQ4jVXUwVOcMBQG8Dc7Rc4PUntdWV2uxjDpGaGeozOp1woar4jd5t/v9wLstMwsA/ntlxdCAgUc1hjTc9/JCZfGoo3wG3HdmdAWrIJRHe7GM/TmpY5VFefuVcAkkPbLIaN8rmPmjloyZxgyR3GuJ4K0AGtJ2htz8o7yqikm759fldQXaMpbDzjKAG+8v+AugVTOPO5DOjLvGtUYQwh0CPjnVMyGd+8/GfUB5nLKJDD2aLDh5HYyMDJGDwQIo2ZmZcKbowNmAdB/AzyFhrmF2MHRb0QJJfaAnwGB6orZhoykLzJtGwF/xpYxI1dswomiUj3gTuAIqCn/4C7cULwGNBtwMTk3Y4LfKB5YUaOKBKYtpplm7u0vip8tU1NWWyI/7XdcSuIDoMt6rVHMWT0DbjHPGqDqZVSa6zleLcUTcIKLoMv3ueJluALtAo9B302zPPlrtiVScRdCjXvVh3e3JpYa/jjkuC9N+LrBMlz/eAN4eQijX2EdLo6c5tGGHwLyHFtXk89dDGHwCVhG9T0S/j55AhRZgkMCmUQXJ49TnS1wnQDvw0eAh9ICeMmEFbCnPMFzjAvsWoEWEFdYEx+S0MoUZ1gT1wId8+AF3Bl2OoEu906AUHx5VLw/gXYg/x84loOah/2UYNrgiwSwGO7RfUzVBbx/kgpckumGOi6QirtD6gkLTitbnxNol47S2jVc2vsN5kPqaAHT8uUdAJM4v/DanjYOwmUjWznGfwB7sGtAtor5BgofDuzaRj4kSQAqDakTsKORa3Q3xKi3gE1fhl71KRMqrdZ2AWNNg/YOhQyrVBnb+i+nEg4bsDA+egAAAABJRU5ErkJggg==
X-Face: %i>XG-yXR'\"2P/C_aO%~;2o~?g0pPKmbOw^=NT`tprDEf++D.m7"}HW6.#=U:?2GGctkL,f89@H46O$ASoW&?s}.k+&.<b';Md8`dH6iqhT)6C^.Px|[=M@7=Ik[_w<%n1Up"LPQNu2m8|L!/3iby{-]A+#YE}Kl{Cw$\U!kD%K}\2jz"QQP6Uqr],./"?;=4v
X-User-ID: eJwFwQkBwEAIAzBNFMojB7jhX8ISqotvmNONx5PCK8vpJXG0YDYVoR9K8aFbMmGWMns72LqYaiNKap/8M0wU3Q==
X-NNTP-Posting-Host: eJwFwYEBwCAIA7CXRErBc6iO/09YEk7jTTCImJhvr328haqUs6Bp0Azlc4WH68azhsqWxfsBDfYQzA==
Xref: csiph.com comp.lang.php:17163

Cybercode wrote:

> bit-naughty@hotmail.com wrote:
>> I've used sites, for example, a bank's where you login with your username 
>> and password, and then it asks you "security questions" - like, your
>> favourite colour, whatever, etc. etc. How is this sort of thing coded?
>> The security questions appear without a refresh, mind you, ie. on the
>> same page - so after the name+pwd authentication is done, does *client
>> side Javascript* set some sort of cookie? If, after entering your
>> username and password, the security quesions appear, and you refresh the
>> page - what happens exactly? The authentication will happen again, and
>> *another* cookie will be set..... - how does the system protect against
>> that?
> 
> Sounds to me like it uses XHR in order to request your security question
> from the server after you have entered your login credentials.

Not necessarily.  In fact, it is more likely that it happens in an iframe.  
Bank sites, for example, are not usually based on XHR.
 
> XHR is often used with AJAX in order to update pages with new information
> from the server without having to reload the page.

XMLHTTPRequest (XHR) is the *proper* term for that technology; AJAX 
(Asynchronous JavaScript and XML) is the historic marketing buzzword,
in common cases a *misnomer*.
 
> https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest
> and
> https://developer.mozilla.org/en-US/docs/AJAX
> can provide you with more information about this.

Please read that carefully yourself, and post here using your real name 
only.

-- 
PointedEars
Zend Certified PHP Engineer <http://www.zend.com/en/yellow-pages/ZEND024953>
<https://github.com/PointedEars> | <http://PointedEars.de/wsvn>
Twitter: @PointedEars2 | Please do not cc me./Bitte keine Kopien per E-Mail.