T
T
therealvetalhidden2014-10-13 23:41:14
PHP
therealvetalhidden, 2014-10-13 23:41:14

Tell me, ajax hash, what is it for?

For example, VKontakte attaches a hash to each ajax request. I mean, when an ajax request is sent to the server hash, for example 8828962ff4f29bae20 What role does it play? Why is it needed at all? Here is an example from VK:.
6b6be3aa994fd8a85e - hash that is passed to...

Answer the question

In order to leave comments, you need to log in

4 answer(s)
A
alektive, 2014-10-15
@therealvetalhidden

I remember it used to be in vogue among fake 'ers to open an iframe on VK, or rather a logout link ... well, I think whoever understood understood what I was talking about ... Until VK began to attach a hash to almost every link and in general any action. Then the iframe was banned altogether. And on your question, I can only say that hash is needed to protect against illegal actions. That is, the same hash is attached to a specific user.
Banal example: In the mobile version of VK, as a rule, all actions are performed through href elements . Whether it's joining groups, likes and adding friends. Now imagine if VK removed its elementary security methods for a day. What do you think, how many subscribers to the group and to my page would I have by the end of the day ???))

E
evnuh, 2014-10-14
@evnuh

Probably CSRF protection

S
Sali_cat, 2014-10-14
@Sali_cat

protection against CSRF, as well as to update the url without reloading like site.rf/#a31sgdg1545...

S
Sergey, 2014-10-13
Protko @Fesor

To change page uri without reloading. There is no html5 history api on older browsers, and hashes are simpler.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question