Question

I m使用 no子和现在js。我想获得把这一功能称作服务器的功能的全时长度,如果情况相同,则进行检查。防止用户操纵客户的辅助功能。可能排除可能改变的变量。是否有办法在 j中做到这一点?

页: 1

客户

now.sendMessage() {
    //Some code...
}

服务器

everyone.now.sendMessage() {
    //Check that the code is the exact length 
    //as the function body written in the 客户side script
    //To see if it has been manipulated...
    if (codelength === ?) {
        //execute code
    } else {
       //return error
    }
}

Answer 1

可做到这一点:。 http://jsfiddle.net/RsrCB/1/。

But in practice, it s not reliable. JavaScript code can t be checked for integrity for several reasons:

It s easy to obfuscate it
It s easy to override the integrity-checking code

Answer 2

为此:

   var codelength =  (String(yourfunction_name).length);

有了这种知识,你也可以在职能单位中计算出一些洗衣物,并进行比较。

Answer 3

你现在就错了。我们不能信任用户。

With now you just define procedures on the client and call them with some data. You do not pass sensitive data like this.

你发给客户的任何数据都属于客户,你不能躲避劫持。

now uses websockets or XHR underneath. Your simply sending data to a client on a socket, it can be intercepted.

友情链接