Applet security

I'm going to be implementing an applet for a customer over the next month
or so that interfaces with the customers phpFox installation and
downloads, updates, and uploads images.

The problem of course, is that I don't want just anyone to be able to
perform these tasks, but only the logged in user of phpFox.  So how is
this best implemented?  Can an applet get access to the cookies stored by
the surrounding browser?  Is there some other way to handle this?

Thanks,



--
Kenneth P. Turvey <kt-usenet@squeakydolphin.com>

The normal applet security mechanisms of Java, as far as I can tell,
is to protect users instead of restrict them. No matter what kinds of
tricks and traps you place in your code, an experienced user can
always decompile the code, reverse engineering the protocol, and
bypass all kinds of restrictions.

So pay less attention on the client applet, and add real security to
the communication protocol and your server infrastructure. That's the
correct approach.

Speedo

On Mar 25, 5:00 am, "Kenneth P. Turvey" <kt-use...@squeakydolphin.com>
wrote:
> I'm going to be implementing an applet for a customer over the next month
> or so that interfaces with the customers phpFox installation and
> downloads, updates, and uploads images.
>
> The problem of course, is that I don't want just anyone to be able to
> perform these tasks, but only the logged in user of phpFox.  So how is
> this best implemented?  Can an applet get access to the cookies stored by
> the surrounding browser?  Is there some other way to handle this?
>
> Thanks,
>
> --
> Kenneth P. Turvey <kt-use...@squeakydolphin.com>

On 24 Mar 2008 21:00:28 GMT, "Kenneth P. Turvey"
<kt-usenet@squeakydolphin.com> wrote, quoted or indirectly quoted
someone who said :

> Can an applet get access to the cookies stored by
>the surrounding browser?

see http://mindprod.com/jgloss/authentication.html
--

Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com

A don't think an applet can do those things on the normal security
manager.

 ________________________________________
____________________________________
 ________________________________________
_________________
Hi, I just started a Facebook and Google group for anyone interested
in Java.  You can use both for discussions, but the Google group also
will give you the ability to upload code, and other files.

http://www.facebook.com/group.php?gid=10839808670

[url]http://groups.google.com/group/java-software-develoupment/members_invite?hl=en[/ur
l]