security - Object of curretUser - Is it safe -
i sitting programming "atm/internetbank" school assignment , wondering "safety" of creating object save currentuser. "atm" should able run @ laptop. "atm" assignment there related database. when log-in matching username , password saves info balance user object currentuser. question is, how safe password , balance. possible manipulate info outside program. thinking of getting balance when needed directly database , directly updating balance when new has happened. in advance.
first atms , web banks different in atms assume physical security of client while web sites have little physical security.
that said, server need data. feel free keep data in server side session object. guess during data in memory on client safe there isn't need.
Comments
Post a Comment