CODEWITHSUNDEEP
javascriptphpjquerymysqlajax
Sampath
Sampath

Reputation: 308

Send or get data from mysql using php ajax jquery - what is the secure method?

I have use Ajax and jquery for get data from database and send data, but when we use ajax or jquery methods, web page source view ,we can see details like below;

Ajax

<script type="text/javascript">
function showUser()
function showUser()
{
var str = document.getElementById('txtusername').value;
if (str=="")
{
document.getElementById("txtHint").innerHTML="<span style='color:#FFF;font-size:10px;'>Enter username</span>";
return;
} 
if (window.XMLHttpRequest)
{// code for IE7+, Firefox, Chrome, Opera, Safari
xmlhttp=new XMLHttpRequest();
}
else
{// code for IE6, IE5
xmlhttp=new ActiveXObject("Microsoft.XMLHTTP");
}
xmlhttp.onreadystatechange=function()
{
if (xmlhttp.readyState==4 && xmlhttp.status==200)
{
document.getElementById("txtHint").innerHTML=xmlhttp.responseText;
}
}
xmlhttp.open("GET","chkusername.php?q="+str,true);
xmlhttp.send();
}
</script>

In here you can see the get method and what are the sending values and also more things. I want hide these thing from source view, help me ..

Upvotes: 0

Views: 600

Answers (1)

Niet the Dark Absol
Niet the Dark Absol

Reputation: 324750

You can't. Anything on the client side (HTML, CSS, JavaScript) is free for the user to see.

That's why anything security-related is on the server side, where it can be trusted (for the most part).

It's not a security risk if the user knows that to log in you go to /chkusername.php?q=username (or whatever). It is one, however, if you don't properly sanitise the input.

Upvotes: 3

Related Questions