Facebook Graph API – The missing part

As you all know recent changes in privacy issues made Facebook to change their basic API and added some security concerns. From my best practise, most of the old applications are safe, but you will be in trouble when you create new application. By default you cannot access user’s photos, profile pictures , albums etc. [...]

4 Comments , , , , , , , , , , , , , , , , , , , ,

Quick tips for https connection (Non secure content warning – IE)

If you are using https pages or some of the pages (payment pages etc) in your website, keep the following in your mind. In some browsers especially IE shows warning of non-secured content in secured page. This cause user the feeling that the website is not secured. Use relative url always. Relative URL means those [...]

1 Comments , , , , , , , , , , ,

Session/Cookie alone does not secure your web application – CSRF

Guess what will happen if you add an image like below in your html page: <img src=”http://mail.google.com/mail/?logout&hl=en”  /> It does not appear in page, but your google account in another window or another tab will get logoff. Now an external website could logout you from your gmail or orkut. IF you coded your website to [...]

0 Comments , , , , , , , , , ,