Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options answers only user 16960

Application Programming Interface; a set of routines, protocols, tools or endpoints used in software development.

3
votes
GitHub Pages is designed for hosting public websites, and it's great at doing that. But as soon as you want to start keeping certain things private, it falls apart as an option pretty quickly. Even …
answered Oct 30 '17 by Xiong Chiamiov
7
votes
My question is what prevents users from intercepting their regular post from the app (getting the token) and then possibly sending bunch of POST requests (using something like postman or fiddler) t …
answered Nov 14 '17 by Xiong Chiamiov
60
votes
It won't actually slow down an attacker any appreciable amount, but will cause any future developers who work on your platform to be really annoyed at you. It may also cause certain nice features of …
answered Feb 8 '17 by Xiong Chiamiov
2
votes
Obviously authorization needs to be checked on the server side, as relying solely on client checks opens you up to malicious clients. There's no general consensus on where in the server-side code you …
answered Jun 7 '17 by Xiong Chiamiov
2
votes
There's one pretty major issue that's immediately apparent, but may be an artifact of your development environment: the request is transmitted over plain ol' http, which means the API key is … returning an error page, rather than a redirect, when an API request is sent over http enabling hsts for your domain (although I don't think this will have any effect on custom curl-based programs) As …
answered Dec 7 '16 by Xiong Chiamiov
15
votes
If there's no user input used to construct the queries, there's no threat of SQL injection. This is a reasonably good way to go about allowing an Android app to get data from a shared database. The p …
answered Dec 24 '17 by Xiong Chiamiov