Http request parameter verification method applied to electronic channel of telecom operator

Abstract

The invention particularly relates to an http request parameter verification method applied to an electronic channel of a telecom operator. The method comprises the steps of 1, when the verification data are generated, calculating a verification field according to sensitive content, wherein the sensitive content refers to commodity numbers and / or data of price discount data participating in generation of verification data S, and the server side puts the generated verification data S into a cookie field and returns the verification data S to a user front-end browser through a message; 2, operating a user at the browser end in the browser operation verification process of the user, selecting corresponding commodities and price discounts, and submitting the commodities and the price discountsto the server end; using the server to verify the request parameters of the user; reading the commodity selected by the user and the price discount, and outputting a business code Code1 correspondingto the content according to the content selected by the user; and calculating a request parameter S1 for the Code1, comparing the verification data S with the request parameter S1 by the server, andif the verification data S and the request parameter S1 are different, indicating that the request parameter is illegally modified or forged on the browser side, and the processing fails.

Description

technical field [0001] The invention belongs to the field of telecommunication operator's electronic channel and Internet software system, and in particular relates to an http request parameter checking method applied to the telecommunication operator's electronic channel. Background technique [0002] "Handheld business hall" is an important mobile Internet product for mobile operators in terms of electronic channels. It is the business that involves some discounts and free services and becomes the key attack target of illegal users. Therefore, the industry usually sends verification data for verification when handling the above-mentioned sensitive business. In the common http request interaction process, request parameters are transmitted in the form of url or request body. However, due to the openness of http requests, request parameters are easily intercepted and tampered with. Some illegal users use tools or programming methods to modify the content of http request p...

AI Technical Summary

Problems solved by technology

[0009] The above existing methods have the following problems: In a distributed cluster system, application services may be stateless, and multiple requests may not be processed on the same server server, resulting in session data not being obtained

Images