facebook js sdk security in regards to a custom ajax

0.00/5 (No votes)

See more:

I want to use facebook's js sdk for login. I would like to have a user login, get their email, use ajax to send the email to my server, and than store the email in a database. The problem I am seeing is that if I get the user to login using js, the call to the api would be done in js, and the callback would be in js. So when I get the email from facebook and I want to send it to my server, what would stop a user from changing the facebook response (email) before sending it up to my server? Is there any workaround for this? Do I have to use the php sdk instead? I would like to avoid php if I could for server load issues.

Posted 27-Sep-13 12:13pm

Member 10302507

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Last 24hrs

This month

Richard MacCutchan	55
Graeme_Grant	35
Andre Oosthuizen	10
OriginalGriff	10
Wonde Tadesse	5

Pete O'Hanlon	2,305
OriginalGriff	1,693
Graeme_Grant	1,160
Richard Deeming	893
Dave Kreskowiak	839