jsp - How to validate authorized form submission -


generally use captcha validate form not submitted robot or script. in our application can not captcha everywhere..

what strategy can used validate request comming our own form , not duplicated/assembled form?

specially jsp/servlet. although talking strategy , not more concern technology.

one way embed security token request parameter in html form. can use various algorithm generate security token. generate security token based on random number alongwith session id if how hacker steals session also, wont able access resource in application


Comments

Popular posts from this blog

linux - xterm copying to CLIPBOARD using copy-selection causes automatic updating of CLIPBOARD upon mouse selection -

qt - Errors in generated MOC files for QT5 from cmake -