RK

[Cosmic @cosmicc1444]

Day2 : Building Secured Applications

Basically, injecting JS through user's input.

[Cosmic @cosmicc1444]

Day2: Building Secured Applications

CSRF tokens ARE visible in frontend.

If user opens:

DevTools, Inspect, console, page source,they can see token.

Then Why Is It Still Secure?

Because:

only the CURRENT authenticated user/browser can access their own token.

[Cosmic @cosmicc1444]

Day2: Building Secured Applications

This is one of the MOST common real-world vulnerabilities.

And honestly:

many beginners accidentally create this vulnerability without realizing it.

[Cosmic @cosmicc1444]

Sessions and Cookies.

I made it easy for you to understand.

[RK @rahidk85]

@cosmicc1444 Thanks, I appreciate that. It's much clearer now and easier to understand.

[RK @rahidk85]

@cosmicc1444 That's like stealing someone's house key's photo and trying to open the door with the photo itself. 😆
The lock wants the actual key (password), not a picture of it (hash).

[RK @rahidk85]

@cosmicc1444 Absolutely. Security starts when user input is treated strictly as data, not executable code. Parameterized queries and proper input validation are fundamental to preventing vulnerabilities like SQL injection.

[Cosmic @cosmicc1444]

Day1 : Building a Secured Application

If attackers already have the hash values from the database, can’t they just use those hashes as passwords?

The website login system does NOT say:

“Give me the hash.”

It says:

“Give me the original password.”

Then it verifies to match.

[Cosmic @cosmicc1444]

Day 1: Building a Secured Application

The real issue:

Whether input is treated as DATA or CODE.

That’s the entire security concept.

Separate SQL logic from user data!

[RK @rahidk85]

@cosmicc1444 @cricketworldcup Yayyy🎉

[RK @rahidk85]

@cosmicc1444 Informative.

[RK @rahidk85]

@cosmicc1444 Can you please de-duplicate my name? 😎

[RK @rahidk85]

@cosmicc1444 Nice work! That was a tricky bit of logic, and you handled it really well 👏

[RK @rahidk85]

@cosmicc1444 And that's why Saturdays are my favourite.

[RK @rahidk85]

@cosmicc1444

[RK @rahidk85]

@cosmicc1444 Here you go.

const reversedStr = str.split("").reverse().join("");
console.log(reversedStr); // "cimsoc ma I"

[RK @rahidk85]

@cosmicc1444 This looks absolutely adorable! 🌸 Love the soft pastel vibe and how clean the UI feels. Perfect way to warm up those JS skills ✨🪄

[RK @rahidk85]

@PrimeVideoIN Hume follow back nahi chahiyea.......
Hume mirzapur season 2 chahiyea.....