
KevinR
Veteran

Mar 4, 2009, 9:39 PM
Post #5 of 5
(48160 views)
|
Re: [santhosh_89] GET/POST Method value hiding
[In reply to]
|
Can't Post
|
|
Ok,Suppose you are going to create a banking interface,When you are validating the user and password we must use post method for passing the values to next page,If I launch tamper data add-ons ,I could see your secret password in this application even post method,I can see your user name and secret password when you are logging in the banking interface,Here there is no security,other can misuse my resource, Some ways may be there, Any bank stupid enough not to use https to send sensitive data over the internet will soon be out of business. -------------------------------------------------
|