Facebook Javascript SDK security -

-

i'm in process of using facebook javascript sdk provide user login functionality website.

what i'd take logged in user's unique facebook id , put/fetch data to/from mysql database using id determine data available said user.

however don't feel secure. whilst i'm not storing sensitive credit-card details etc, i'd prefer secure practically possible.

my fear javascript being it, fake facebook id , pull whatever wanted.

i'm aware php sdk provide solid solution problem, javascript 1 because it's easy use , have basis of set (i admit it, i'm lazy).

so, questions are:

  1. would set insecure feel might be?

  2. is there can improve security of such system, other switching php sdk?

thanks!

facebook ids pretty hard make (at user know own). depending on store in database (which not user cannot on own, unless ask extended permissions)

if worried user trying information database, add access token or signed request each row , , facebook id data. increase security.

edit

there few occasions signed request user:

* signed_request passed apps on facebook.com when loaded facebook environment * signed_request passed app has registered deauthorized callback in developer app whenever given user removes app using app dashboard * signed_request passed apps use registration plugin whenever user registers app

signed requests contain user id if use has accepted permissions though, , not passed again if user enters application, , accepts permissions (meaning signed request not contain id). because of saving access token may better idea. here more on signed request

also signed request in url (param = "signed_request"). parse through c# sure can @ least 1 through javascript


Comments

Post a Comment

Popular posts from this blog

c# - How to set Z index when using WPF DrawingContext? -

-
how set z-index drawing object when using drawingcontext.drawxxx() methods? the object drawn last have higher z index. can't change index of drawn objects. way draw in order. if using wpf (as placed tag), can use, example, canvas control. create shapes need like polyline obj = new polyline(); //... // ... set properties of obj and add them canvas uielementcollection: yourcanvasname.children.add(obj); //or yourcanvasname.children.insert(i, obj); first items of collection have higher z index. advantages in way: no need redraw on window changes, can anytime move objects , change order.
Read more

razor - Is this a bug in WebMatrix PageData? -

-
i think may have found bug in webmatrix's pagedata, not sure. concerns how pass data partial page calling page. in webmatrix documentation (tutorials, e.g. " 3 - creating consistent look ", , example code), pagedata recommended mechanism pass data between pages (e.g. content page layout page, or partial page). however have found not work other way, pass data partial page calling page. modifying or adding entries in pagedata in partial page, not seem calling page. cutting right down simplest possible example, in test page may have this: @{ pagedata["test"] = "initial entry"; } <p>before calling partial page, test value @pagedata["test"]</p> @renderpage("_testpartial.cshtml") <p>after returning calling page, test value @pagedata["test"]</p> and in _testpartial.cshtml page might have this: @{ pagedata["test"] = "modified entry"; } <p>in partial page...
Read more

visual c++ - Using relative values in array sorting ( asm ) -

-
i need sort through array , sort each individual row in array in ascending order. doesn't seem going (surprise!) keep getting hit 2 errors: a2101: cannot add 2 relocatable labels , a2026: constant expected here's sort, makes sense me, think i'm still trying implement high-lvl language techniqes assembly. there way around not being able use relative values? (the array 7 rows 9 columns, btw). mov cx, 7; cx = number of rows outer: ; outer loop walk through rows push cx mov cx, 9 mov row, cx ;rows middle: ; middle-loop walk through columns push cx sub cx, 1 ;cx = cx-1 mov column, cx ;columns inner: ;inner loop - compare , exchange column values cmp marray[row*9 + column], marray[row*9 + column+1] xchg marray[row*9 + column+1], marray[row*9 + column] ; compare , exchange values marray table inc column loop inner pop cx loop mid...
Read more