Home/ Questions/Q 8616757
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-12T05:41:55+00:00

I am building a WebApp which connects to my server through a web service.

  • 0

I am building a WebApp which connects to my server through a web service.
Users (there is no login) which use the webapp can send their scores to the
server.

The code is written mostly in javscript, so anyone can read it.

As I know there is no 100% gurantee method of doing this, I am just looking for ideas
how to make it as hard as possible for users to send false scores.

Ideas?
10X!

EDIT

The server side web service is an asmx (.net) web service hosted on an IIS.
I can modify it as needed.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I’d say the best thing to do would be to have a webservice call that generates a guid on the the serverside, which is passed back. This becomes your session token. It’s stored on the database or in cache on the server

    Each subsequent call requires the passing of the token back to the server, which validates the token. If they pass a bad token you don’t update.

    This will only insure that the calls come from the correct process. They won’t be able to spoof the entry with a single call

    • 0