Re: put in safety my Rest Web Services

Henrik Rützou <hr@...> writes:

Richard

if you control both the client and the server it is quite simple.

Lets say you have a URL like

http:// serverip/getinfo.pgm?userid=aaaaa&password=bbbbb&account=123456

you change the url to

http:// serverip/getinfo.pgm?userid=aaaaa&hash=

4625fd63b0e96fc0d656ae7381605e48d4a0f63a319fc743adf22688613883c7&account=123456

Everybody can do a HASH - but the HASH is 'salted'

The user id aaaaa has a 'salt'-value only the client and the server knows
so the input
to the HASH algoritm is

aaaaa123456salt

hi
thanks for you reply
as i have never used HASH .. could you please let me know how can i use it ?
)expecially in RPGLE .. where can i find some example.

Thanks in advance