jsp - How to validate authorized form submission -
generally use captcha validate form not submitted robot or script. in our application can not captcha everywhere..
what strategy can used validate request comming our own form , not duplicated/assembled form?
specially jsp/servlet. although talking strategy , not more concern technology.
one way embed security token request parameter in html form. can use various algorithm generate security token. generate security token based on random number alongwith session id if how hacker steals session also, wont able access resource in application
Comments
Post a Comment