AJAX with PHP on Web - Security

Question

On some of my web I write with JS/HTML/CSS because is dynamic. But when I working with DB I must call Ajax from JS to working with it. I use POST in Ajax, but how secure is it?

Can someone use my URL with PHP (like www.smt.com/updateDB.php) to edit my DB?

Because when I use it from JS without password and name, so anyone can use it. And if you have Name of DB, Password and Name of User in POST Ajax, then anynone can see it.

Is there any way to secure it in PHP? Like it only update DB when its send from my Hosting IP address?

Thanks :)

synan54 · Accepted Answer · 2016-01-24 14:34:04Z

1

instead of using ip adddresses you need a login system and session controller in php. so in php part for every ajax request you can esily check if user logged in or have rights to run db functions

answered Jan 24, 2016 at 14:34

synan54

6581 gold badge6 silver badges16 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Martin K. Over a year ago

Nice idea, but i need that Ajax will be able to do anything with DB, like download list of user, not only logged user. But user is able to edit JS. So how secure this?

Collectives™ on Stack Overflow

AJAX with PHP on Web - Security

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related