Quick tips for https connection (Non secure content warning – IE)

If you are using https pages or some of the pages (payment pages etc) in your website, keep the following in your mind. In some browsers especially IE shows warning of non-secured content in secured page. This cause user the feeling that the website is not secured. Use relative url always. Relative URL means those [...]

1 Comments , , , , , , , , , , ,

Session/Cookie alone does not secure your web application – CSRF

Guess what will happen if you add an image like below in your html page: <img src=”http://mail.google.com/mail/?logout&hl=en”  /> It does not appear in page, but your google account in another window or another tab will get logoff. Now an external website could logout you from your gmail or orkut. IF you coded your website to [...]

0 Comments , , , , , , , , , ,