Protect page & AJAX

[sb5309]

I need a page where only certain people can fetch data from a
database, ie using name and password.

Just an idea: has anybody used AJAX to protect a page ?

Thanks.

 

[Martin Gregorie]

I need a page where only certain people can fetch data from a database,
ie using name and password.

Just an idea: has anybody used AJAX to protect a page ?

Have you looked at Apache's authorisation capabilities? See .htaccess
documentation.

 

[Mark Space]

I need a page where only certain people can fetch data from a
database, ie using name and password.

Just an idea: has anybody used AJAX to protect a page ?

Thanks.

AJAX can't be used to protect a page. AJAX is run on the client, so an
attacker can easily skip it. Protection must be server side.

 

[Arne Vajhøj]

I need a page where only certain people can fetch data from a
database, ie using name and password.

Just an idea: has anybody used AJAX to protect a page ?

Assuming it is a Java web app, then you can use both
container managed and app managed security.

Arne