Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 7 years ago.
Improve this question
I started creating online open source game as a project in school. It will be server with n connected clients. But now I have a problem with "security". What to do if one client would used modified source code for changing some restrictions? How can I prevent it? My first idea was make client only for connection to server and server would send all necessary files but I don't like this idea very much. Can you advise me something better? Thank you.
You need to keep your validations in the server. The server should check each client move, and if it's not allowed according to the server's rules - reject it.
You should still keep validations in the client, too, so that users who don't mess with the client code can get speedier responses.
Related
Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 6 years ago.
Improve this question
How can I create a file (let's say a markdown file) that persists on the server, strictly using HTML5? So no database or web server, just an static site server.
Your question is probably too broad but you need some type of program that serves a file but not "server software" such as Apache or nginx. Just like those web servers, they are written to listen to a port on the IP address of the computer attached to an internet connection somewhere. A program to do that is actually relatively easy to write but all the needs of a proper web server aren't such as needed security and the ability to interface to other programs.
But then that program is, in essence, a server and functions in the same manner so being able to serve a file without a server of some sort in some manner isn't possible.
Whole books are written about this and one of the best is, "Advanced Programming in the Unix Environment" by Stevens and "Unix Network Programming" also by Stevens.
Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 6 years ago.
Improve this question
Im looking to hide a post request name from the user, So they cannot post to a URL.
For example, Im looking for something that will avoid users checking the post request name and sending something to bypass the restrictions to insert into a database.
If the POST request comes from the user's browser, then they can inspect it. There is no way to avoid that.
Your only option is to make the POST request from somewhere else (such as your server). There is a good chance that you won't be able to do that (due to dependencies on the request coming from the user or included data they supply).
You mention "restrictions". If those restrictions are currently enforced with client side code: Enforce them with server side code.
Closed. This question is opinion-based. It is not currently accepting answers.
Want to improve this question? Update the question so it can be answered with facts and citations by editing this post.
Closed 8 years ago.
Improve this question
I need to build an application in Visual Basic 2010 to connect to a MySQL database. I saw many examples for that, but i've a question:
should the login form be the first or the splashscreen ??
should i check the connection before the login form appears ou after ?
since the application it's going to be used by many people in different places should i implement a secondary authentication method to avoid the non-authorized copy of application ?
Any sugestion or help regarding this matter is appreciated.
It's a legitimate question and from experience this is how I would approach it
When launching the application I would first show the splash screen during that time I would check the connection and determine if they are connected appropriately. If they are connected appropriately I would then show the login screen. If not then show a non-authorized screen. I would also implement a second authentication since your application is used by different sets of users.
Closed. This question needs details or clarity. It is not currently accepting answers.
Want to improve this question? Add details and clarify the problem by editing this post.
Closed 8 years ago.
Improve this question
I have never done anything like this... So here it goes.
I need to be able to submit (at one time) roughly 300 user ids and get back their name and email address... The company has all this info in active directory.
Does anyone have any idea how this would work with Perl, or really any language? I don't even know what type of UI I would need, and how to actually connect to AD to get the requested information..
Any and all help is appreciated!
you can connect to Microsoft AD with Net::LDAP - Lightweight Directory Access Protocol
Closed. This question needs to be more focused. It is not currently accepting answers.
Want to improve this question? Update the question so it focuses on one problem only by editing this post.
Closed 7 years ago.
Improve this question
What is the name where the application shows messages of any updates available whenever the update is available?
Is it called web service?
For example, I have installed an antivirus (avast); sometimes a small popup message shows that an update is available.
I have very vague idea about it, it must be contacting the server periodically for checking the new updates are available or not.
I do not know what the application name is so I was not able to search.
It's called an auto-update software feature. It's part of the software itself usually - If you'd like to look at some API's regarding implementing them into your application, find out more here. WinSparkle is also something you could look into if your doing Windows development.
Those are vendor dependant solutions. It is usually not a separate software checking for updates. All they do is query a web service that replies with the 'current' version. At least as long as talking about MS-Windows. More elegant and efficient solutions exist in the Linux environment.