Send or get data from mysql using php ajax jquery - what is the secure method?

Question

I have use Ajax and jquery for get data from database and send data, but when we use ajax or jquery methods, web page source view ,we can see details like below;

Ajax

<script type="text/javascript">
function showUser()
function showUser()
{
var str = document.getElementById('txtusername').value;
if (str=="")
{
document.getElementById("txtHint").innerHTML="<span style='color:#FFF;font-size:10px;'>Enter username</span>";
return;
} 
if (window.XMLHttpRequest)
{// code for IE7+, Firefox, Chrome, Opera, Safari
xmlhttp=new XMLHttpRequest();
}
else
{// code for IE6, IE5
xmlhttp=new ActiveXObject("Microsoft.XMLHTTP");
}
xmlhttp.onreadystatechange=function()
{
if (xmlhttp.readyState==4 && xmlhttp.status==200)
{
document.getElementById("txtHint").innerHTML=xmlhttp.responseText;
}
}
xmlhttp.open("GET","chkusername.php?q="+str,true);
xmlhttp.send();
}
</script>

In here you can see the get method and what are the sending values and also more things. I want hide these thing from source view, help me ..

You really should look into using jQuery. It would make your life a lot easier. — John Conde
– John Conde, Commented May 12, 2012 at 20:58
Which "details" would you like to hide? Looks like that's the minimum code required to do what you're trying to do. — bfavaretto
– bfavaretto, Commented May 12, 2012 at 21:07
IE5? Didn't know anyone still cared about that .000001% of people. — Jon Egeland
– Jon Egeland, Commented May 12, 2012 at 21:07
I want to user registration form and login form but now people like fill all details in one page and.. registered Susses details also on that page without page refreshing.. what is the best method for that ? — Sampath
– Sampath, Commented May 12, 2012 at 21:28

Niet the Dark Absol · Accepted Answer · 2012-05-12 21:08:28Z

3

You can't. Anything on the client side (HTML, CSS, JavaScript) is free for the user to see.

That's why anything security-related is on the server side, where it can be trusted (for the most part).

It's not a security risk if the user knows that to log in you go to /chkusername.php?q=username (or whatever). It is one, however, if you don't properly sanitise the input.

answered May 12, 2012 at 21:08

Niet the Dark Absol

326k86 gold badges480 silver badges604 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Sampath Over a year ago

thank you,..for answer .. if we create login page or registration page is this method is good ?? or are their more methods ?? how to do it in meager web site ?? how they do it ?? help mee

Collectives™ on Stack Overflow

Send or get data from mysql using php ajax jquery - what is the secure method?

Ajax

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

Ajax

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related