Real Software Forums

The forum for Real Studio and other Real Software products.
[ REAL Software Website | Board Index ]
It is currently Thu Oct 19, 2017 3:09 pm
xojo

All times are UTC - 5 hours




Post new topic Reply to topic  [ 4 posts ] 
Author Message
 Post subject: Client Hackability
PostPosted: Tue May 21, 2013 10:01 am 
Offline
User avatar

Joined: Mon Nov 29, 2010 7:01 pm
Posts: 446
Let's say I have a disabled text field, the client uses code to update the text field (and/or enable it). Does RS know that the textfield is disabled and so the "valueChanged" event won't trigger or update for the server side of things?


Top
 Profile  
Reply with quote  
 Post subject: Re: Client Hackability
PostPosted: Tue May 21, 2013 11:10 am 
Offline

Joined: Mon Jul 02, 2007 12:38 pm
Posts: 62
When you say "the client uses code to update the text field (and/or enable it)". do you mean the client updates the javascript code on the browser (assuming it is possible)?

I wonder too if events are automatically triggered!! :?:


Top
 Profile  
Reply with quote  
 Post subject: Re: Client Hackability
PostPosted: Wed May 22, 2013 10:09 am 
Offline
User avatar

Joined: Mon Nov 29, 2010 7:01 pm
Posts: 446
PrietoM wrote:
When you say "the client uses code to update the text field (and/or enable it)". do you mean the client updates the javascript code on the browser (assuming it is possible)?

I wonder too if events are automatically triggered!! :?:


Yeah, let's say they update the javascript to re-enable the text field, or they just rerender the page with the modification. I want to know that even though the would see the textfield as editable and their browser would send RS the textchanged event, that RS would know to ignore this event when it gets to the server side.


Top
 Profile  
Reply with quote  
 Post subject: Re: Client Hackability
PostPosted: Thu May 23, 2013 2:34 am 
Offline

Joined: Wed Mar 22, 2006 11:15 am
Posts: 712
Location: Southern California
neonash7777 wrote:
Yeah, let's say they update the javascript to re-enable the text field, or they just rerender the page with the modification. I want to know that even though the would see the textfield as editable and their browser would send RS the textchanged event, that RS would know to ignore this event when it gets to the server side.


I just tested this and it doesn't seem to. However, I wouldn't rely on this behavior for security purposes. I would double check in the control event handler if it matters for the application.

_________________
Daniel L. Taylor
Custom Controls for Real Studio WE!
Visit: http://www.webcustomcontrols.com/


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

All times are UTC - 5 hours


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group