Hi.

Could it be that you aren't aware of the way single page qooxdoo apps
are intended to be constructed?

>From what you write, it seems to me you want to use qooxdoo to create
an application consisting of several pages. Why?

The typical app structure with a login is to display the login dialog
on an empty screen, to have a qx.io.remote.<something> sent to the
server to validate the request, then, in the callback from the server
call, to hide the dialog and display the rest of the app. No need for
several html pages here. Everything happens in Javascript code inside
a single page. Very much like if you'd write the UI in VB or C# with
WinForms, and nothing like old style Javascript + some server-side
scripting language apps, or pure PHP apps.

In case you really want to display some html, you can use the same
mechanism, and upon return from the server display the received html
inside a qx.bom.htmlarea.HtmlArea (I think). Still no need to
_replace_ contents of something already loaded with the received html.

Anyway, IMO you should check credentials in server-side code upon each
request. You can't rely on requests always coming from a trusted
source, once authentication has passed and you have a session
established - sessions can be hijacked.

In case you just don't want unauthorized people to download your
Javascript, I wouldn't worry so much about it. Have you tried
decompiling the Javascript? IMO, unless there's something extremely
valuable in it, it makes no sense to reverse engineer it.

In case you have complex, proprietary logic in your Javascript code,
which you don't want unauthorized users to download, I suggest you
rewrite that part as a server-side script. As long as it is sent to
the browser, and it's worth the effort, some man in the middle attack,
scavenging in cache files or simply tracking network traffic will
eventually make it public anyway.

> It's almost that. In my case the response of my request, contains a whole
> page.
> In fact what i want to achieve is the same behavior as html form.

flj
-- 
Fine counsel is confusing, but example is always clear. (Edgar A.
Guest, The Light of Faith)

------------------------------------------------------------------------------
WhatsUp Gold - Download Free Network Management Software
The most intuitive, comprehensive, and cost-effective network 
management toolset available today.  Delivers lowest initial 
acquisition cost and overall TCO of any competing solution.
http://p.sf.net/sfu/whatsupgold-sd
_______________________________________________
qooxdoo-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/qooxdoo-devel

Reply via email to