Web页面安全性技术初探

Research on Security of Web Pages

随着Internet技术的飞速发展,WWW技术得到广泛应用.有些Web站点需要对Web页面进行访问控制,但是由于HTTP协议的无状态性,使得依靠HTTP协议进行Web页面的访问控制变得不可能.文中给出了在网络的应用层利用QueryString、Form的隐含类型域和Cookie方法对Web页面进行用户名／口令校验的方法,并对这些方法进行了比较.

： With the rapid development of Internet,WWW technology is widely used.The web pages of some web sites are required to be accessed restrictedly.For the stateless paradigm of HTTP,it is impossible to limit the access of web pages by HTTP.In this paper,we give three methods of limiting the access of web pages.In the web server,We use the Querystring,the hidden fields of Form and Cookie to check the username／password from Browser.We also compare these three methods.