Protection method and system for general gateway interface service

Abstract

The present invention provides a method and system for protecting CGI services of a general gateway interface, wherein the method includes: a previous CGI receives a previous service request from a client, and feeds back an encrypted string to the client; a latter CGI receives a subsequent service from the client request, verifying whether the encrypted string is included in the next service request, if yes, passing the verification and feeding back the second service response to the client. The solution of the invention can ensure the security of the general gateway interface service on the premise of reducing the verification times of the verification code.

Description

technical field [0001] The invention relates to security protection technology, in particular to a protection method and system for universal gateway interface services. Background technique [0002] Generally, a Common Gateway Interface (CGI, Common Gateway Interface) service is completed by cooperation of multiple CGIs on the server. CGI is on the server and provides an interface for the client to request data. [0003] For the convenience of description, a CGI service requires the cooperation of two CGIs on the server to complete the description below. The execution process of the CGI service includes: the client sends the first service request to the server, and CGI1 on the server executes the first service request. processing, returning the first service response to the server; the client sends the second service request to the server after receiving the first service response, and the CGI2 on the server processes the second service request and returns the second servi...

AI Technical Summary

Problems solved by technology

[0008] This method has the following defects: it is necessary to establish a frequency limit system on the server, the development is complicated, a large storage space is required, and the cost is high, and it is judged whether to deny access based on the user's access record, which may cause misjudgment

[0010] The verification code technology greatly damages the user experience, especially in complex web applications, where a CGI service operation needs to initiate multiple CGI service requests to the server. Correspondingly, if these CGI service requests are protected by verification codes, users need Enter verification code multiple times

If the number of verification code verifications is reduced and only the first business request is verified, there will be malicious traversal behaviors in which the user modifies user name B and adds other users, or even adds multiple other users, during the second friend addition operation, resulting in CGI The security of the business is affected

[0011] It can be seen that although verification code technology can save development costs, it cannot guarantee security under the premise of reducing the number of verifications

Images