gary4gar Posted September 1, 2011 Share Posted September 1, 2011 (edited) I have written a custom PHP script to which client submit requests from the client area via AJAX. the data is passed as GET/POST method. Now, When I receive the XHR request in my custom php script, I need validate if the request is coming from user who is logged in & not from random script kiddie. I have observed that each valid request will have the following cookies, If XHR request is sent within the client area after login is done. WHMCSUID WHMCSPW PHPSESSID Currently, I am just checking is these are set which is not secure. I want actually verify these against whmcs's client database to be sure that the request is indeed coming from client who has successfully logged in by providing valid username & password. Any ideas? Edited September 1, 2011 by gary4gar 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.