简体   繁体   English

Appcelerator Titanium和Web身份验证-Android和iOS

[英]Appcelerator Titanium and Web Authentication - Android and iOS

Forgive me, but this is a vague question: 请原谅我,但这是一个模糊的问题:

I am wanting to build an Android and iOS application to interact with my web application. 我想构建一个Android和iOS应用程序来与我的Web应用程序进行交互。

For example: Within my Android and iOS app, I am wanting to authenticate the users through my current web application, which currently is Laravel 4.2. 例如:在我的Android和iOS应用程序中,我想通过当前的Web应用程序(当前为Laravel 4.2)对用户进行身份验证。 The only tutorial I can find (which I'm sure is out of date) is - TutsPlus 我可以找到的唯一教程(我确定已经过时了)是-TutsPlus

My question is, do you have any more recent tutorials on web authentication (registering users with their tokens) / push notifications (sent from a server) etc... The script I can see on the above example is both vulnerable to MYSQL injection and has a lack of SSL. 我的问题是,您是否有关于Web身份验证(使用其令牌注册用户)/推送通知(从服务器发送)等最新的教程?我在上述示例中看到的脚本都容易受到MYSQL注入和缺少SSL。

Many thanks for your help in this. 非常感谢您的帮助。 I know there is no right and wrong answer, this is mainly just for guidance for someone starting out in mobile development! 我知道没有对与错的答案,这主要是为刚开始进行移动开发的人员提供指导!

Try using HttpClient 尝试使用HttpClient

Appcelerator has an example in there. Appcelerator中有一个示例。

In essence, you're posting to the same URL as your web page, or another with a more mobile appropriate response 本质上,您将发布到与您的网页相同的URL,或者发布到另一个具有更适当移动响应的URL

As for SQL injection, you can perform basic validation yourself, but remember for Http requests, clients can be bypassed, which is why you want your validation to be server side 至于SQL注入,您可以自己执行基本验证,但是请记住,对于Http请求,可以绕过客户端,这就是为什么您希望将验证作为服务器端的原因

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM