javascript - How to detect cracked JS validation? -


i have website quiz on it. users cannot gain directly doing on quiz, can share result on facebook , twitter.

the problem can't figure out how check if answer correct or not. after each question, user should able restart or continue if got wrong, or automatically continue if user got right.

if check done server side, user have wait second after submitting answer before either next question pops or 2 alternatives pop up. however, if on client side, there no delay , users more happy.

so there isn't extremely gain on cheating, people show off on facebook , twitter.

so, there way spot checks or other method of detecting users cheating on client side? or have decide want validation?

no, cannot prevent cheating if validation on client side. can make little harder, @ end of day not control user's browser, , code must executable. unless take steps, easy cheat viewing page source , looking @ code correct answer. if care cheating, validation on server side. use ajax create seamless user experience during validation. couple seconds of waiting ajax request not bad, , not create poor user experience.

if dead set on client side validation, 1 trick make pain in behind attacker obfuscate javascript routine. if wrap obfuscated code generator js eval function call, attacker have de-obfuscate before determine "correct" answer question. done using spidermonkey, thwart script kiddies , lazies. idea of using wrong answer here , there may well, when paired obfuscation.

at end of day though, wouldn't validation client side @ all. use ajax/server side combo create experience users fair.


Comments

Post a Comment

Popular posts from this blog

authentication - Mongodb revoke acccess to connect test database -

i have ec2 instance mongodb 3.2.0 installed. have user admin access. can connect user , perform operation remotely. 1 can connect database test remote if knows ip mongo 11.11.11.11. although not able make operations, want restrict access user credentials can connect server. first need create users , grant roles users, example: use admin db.createuser( { user: "myuseradmin", pwd: "abc123", roles: [ { role: "useradminanydatabase", db: "admin" } ] } ) then need start server --auth parameter mongod --auth more information here
Read more

r - Update two sets of radiobuttons reactively - shiny -

i have read ( how make choices in radiobuttons reactive in shiny? ) shows me how update radiobutton s in reactive way. however, when try , update 2 sets of buttons same data, 1 set renders. example: server: # create example data wafer <- rep(c(1:3), each=3) length <- c(1,1,2,1,1,1,3,5,1) width <- c(3,1,6,1,1,1,1,1,6) dd <- data.frame(wafer, length, width) shinyserver(function(input, output, session){ # create reactive dataframe store data values <- reactivevalues() values$df <- data.frame() # lengths , widths of wafer user input <- eventreactive(input$do, { subset(dd, wafer %in% input$wafer, select = length:width) }) # update reactive data frame lengths , widths have been selected user input observe({ if(!is.null(a())) { values$df <- rbind(isolate(values$df), a()) } }) output$wl <- renderdatatable({ a() }) # update radio buttons unique length , widths stored in values$df # ever "observe" put first in co...
Read more

ios - Realm over CoreData should I use NSFetchedResultController or a Dictionary? -

i'm working on app using core data , nsfetchedresultcontroller many reasons switch use realm. saw there "realm version" of nsfetchedresultcontroller on github wouldn't compatible current code using core data. the view controller displaying list of people same school, address book. list sublist of people studied in same city. so thinking make 1 unique request database retrieve list of people , filter locally list within 1 dictionary per school [string: anyobject] string section name within tableview , anyobject array of people. first solution, make nsfetchedresultcontroller each school predicate filtering location. delete actions etc.. handled delegates -> not compatible realm create dictionaries , update them each actions... -> works realm it's annoying code. any better solution? edit: i need clarify request: i'd write class inherit uitableviewcontroller. this class has list of people sorted in alphabetical order the tableview has ...
Read more