Join Kevin Skoglund for an in-depth discussion in this video Faked requests and forms, part of Programming Foundations: Web Security.
…In the last movie we learned that URLs can be easily manipulated.…In this movie, we'll talk about how…request headers and forms can also be manipulated.…When we talk about faked requests, what we're talking about is that the…request header information that comes in to the web server can be manufactured.…Normally that request header information is generated by the browser.…So if we click on a link, the browser generates the header information…necessary to go to that link, and sends it off to the website.…And we don't ever actually work with that header information…directly, but we do end up relying on it at times.…
We need to be aware that it can be manufactured.…When it's manufactured, we often refer to it as being faked, or spoofed.…Those are two other terms that you'll hear.…And while it does take a little more technical knowledge…and planning than URL manipulation does, it doesn't take much.…There are plugins and tools for…Firefox, Chrome, Safari, and Internet Explorer that'll help you to do this.…And there are even more advanced tools available for use on the command line.…
This course is great for developers who want to secure their client's websites, and for anyone else who wants to learn more about web security.
- Why security matters
- What is a hacker?
- How to write a security policy
- Cross-site scripting (XSS)
- Cross-site request forgery (CSRF)
- SQL injection
- Session hijacking and fixation
- Passwords and encryption
- Secure credit card payments
Skill Level Beginner
1. Security Overview
2. General Security Principles
3. Filtering Input, Controlling Output
4. The Most Common Attacks
5. Encryption and User Authentication
6. Other Areas of Concern
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.