{"id":10102,"date":"2012-01-03T11:20:06","date_gmt":"2012-01-03T03:20:06","guid":{"rendered":"http:\/\/living.donghong.info\/blog\/?page_id=10102"},"modified":"2012-01-11T11:57:23","modified_gmt":"2012-01-11T03:57:23","slug":"120103-fb%e7%9a%84%e8%ae%9a%e8%88%87%e6%8e%a8%e8%96%a6%e6%ac%a1%e6%95%b8%e4%b8%8d%e4%b8%80%e8%87%b4%ef%bc%8c%e6%aa%a2%e6%9f%a5%e6%98%af%e5%90%a6%e4%be%86%e8%87%aa%e6%90%9c%e5%b0%8b%e5%bc%95%e6%93%8e","status":"publish","type":"page","link":"https:\/\/donghong.info\/blog\/?page_id=10102","title":{"rendered":"120103 fb\u7684\u8b9a\u8207\u63a8\u85a6\u6b21\u6578\u4e0d\u4e00\u81f4\uff0c\u6aa2\u67e5\u662f\u5426\u4f86\u81ea\u641c\u5c0b\u5f15\u64ce=>\u771f\u5be6\u539f\u56e0\u53ef\u80fd\u662flike-jacking attacks"},"content":{"rendered":"

\u7531\u65bc\u767c\u73fe\u5728\u7ad9\u5167\u6309\u8b9a\u7684\u6b21\u6578\u8207\u63a8\u85a6\u6578\u4e0d\u540c\u6b65\uff0c\u56e0\u6b64\u61f7\u7591\u662f\u5426\u662f\u5426\u4f86\u81ea\u7ad9\u5916\u7684\u63a8\u85a6(\u4f46\u56e0\u5fc5\u9808include js\uff0c\u4f3c\u4e4e\u4e0d\u592a\u53ef\u80fd)\uff1b\u6240\u4ee5\u53c8\u61f7\u7591\u662f\u5426\u4f86\u81ea\u65bc\u641c\u5c0b\u5f15\u64ce\u3002\u4f46\u641c\u5c0b\u5f15\u64ce\u61c9\u8a72\u4e5f\u4e0d\u6703\u767b\u5165fb\uff0c\u4f46\u4e5f\u53ea\u80fd\u5047\u8a2d\u5176\u6709\u4e00\u500bsession\u7684\u6a5f\u5236\uff0c\u5de7\u5999\u7684\u907f\u958b\u3002\u65bc\u662f\u5728\u8b9a\u7684event\u4e2d\u52a0\u5165\u5224\u65b7\u662f\u5426\u4f86\u81ea\u641c\u5c0b\u5f15\u64ce\u3002\u6548\u679c\u6709\u5f85\u9a57\u8b49\u3002<\/p>\n

var userAgent = navigator.userAgent;\r\nif(userAgent.match(\/(Bot|Crawl|Spider|slurp|sohu-search|lycos|robozilla)\/i))\r\n        return;<\/pre>\n
\u53c3\u8003\u8cc7\u6599\uff1a<\/p>\n
    \n
  1. http:\/\/lonelymisconception.blogspot.com\/2008\/11\/javascript.html<\/li>\n
  2. http:\/\/yoonow.pixnet.net\/blog\/post\/11140571-php%E5%A6%82%E4%BD%95%E5%88%A4%E6%96%B7%E7%B6%B2%E7%AB%99%E4%BE%86%E8%A8%AA%E8%80%85%E6%98%AF%E5%90%A6%E7%82%BA%E6%90%9C%E5%B0%8B%E5%BC%95%E6%93%8E%E6%A9%9F%E5%99%A8%E4%BA%BA<\/li>\n<\/ol>\n
    \u771f\u6b63\u539f\u56e0\u53ef\u80fd\u662f like-jacking attacks<\/strong>
    \n\u5f9e1\/3\u958b\u59cb\uff0c\u6309\u4e86\u8b9a\u4e4b\u5f8c\u7121\u6cd5\u76f4\u63a5\u8b9a\uff0c\u800c\u662f\u6703\u5148\u8df3\u51fa\u78ba\u8a8d\u7684\u6309\u9215\uff0c\u624d\u80fd\u9032\u4e00\u6b65\u6309\u8b9a\u3002\u6839\u64dafacebook\u9019\u4e00\u7bc7<\/a>\u7684\u8a0e\u8ad6\u9019\u53ef\u80fd\u662flike-jacking attacks\uff0c\u56e0\u6b64facebook\u5b98\u65b9\u4e3b\u52d5\u52a0\u5165\u78ba\u8a8d\u7684\u6309\u9215\u3002<\/p>\n
    \u5982\u679c\u539f\u56e0\u662flike-jacking attacks\uff0c\u5c31\u53ef\u4ee5\u89e3\u91cb\u70ba\u4f55\u6703\u51fa\u73fe\u6309\u8b9a\u6578\u8207\u63a8\u85a6\u6578\u4e0d\u4e00\u81f4\u7684\u60c5\u5f62\u3002like-jacking attacks\u7121\u6cd5\u9020\u6210\u771f\u6b63\u7684\u8b9a\uff0c\u4f46\u537b\u4ecd\u80fd\u89f8\u767cedge event\u7522\u751f\u800c\u5c0e\u81f4\u6587\u7ae0\u63a8\u85a6\u6578\u589e\u52a0\u3002<\/p>\n
    \u81f3\u65bc\u8981\u600e\u9ebc\u4e0d\u8981\u8b93confrim\u51fa\u73fe\uff0c\u770b\u4f86\u53ea\u6709\u7b49facebook\u5b98\u65b9\u89ba\u5f97like button usage\u6062\u5fa9\u6b63\u5e38\u4e4b\u5f8c\uff0c\u624d\u80fd\u89e3\u9664\u5427\u3002<\/p>\n
    1\/6 \u5728php\u5224\u65b7\u662f\u5426\u6709\u767b\u5165FB\uff0c\u6709\u767b\u5165\u624d\u80fd\u589e\u52a0\u63a8\u85a6\u6578\u3002\u4f46\u767c\u73feandroid\u700f\u89bd\u5668\u96d6\u53ef\u6309\u8b9a\uff0c\u4f46\u7121\u6cd5\u6293\u5230user id\uff0c\u56e0\u6b64\u63a8\u85a6\u6578\u4e0d\u80fd\u589e\u52a0(fb \u8b9a\u6709\u589e\u52a0)\u3002\u76ee\u524d\u7684\u72c0\u6cc1\u662f\u6062\u5fa9\u4e0d\u9700\u5224\u65b7\u662f\u5426\u6709\u767b\u5165fb\u3002<\/p>\n
    1\/7 \u665a\uff0c\u5982\u679c\u5df2\u5148\u884csetAccessToken\uff0c\u5247getUser\u5f97\u5230\u4e26\u975e\u662f\u73fe\u884c\u767b\u5165\u7684fb user\uff0c\u800c\u662f\u64c1\u6709accessToken\u7684\u90a3\u500buser<\/p>\n
    1\/9 IE6\u6216IE8\u7121\u6cd5\u4f7f\u7528Graph API getUser(\u4e0d\u7ba1\u662fphp\u6216\u662fjavascript SDK)\uff0c\u7d93\u904e\u8ffd\u8e64\u662fgetLoginStatus\u7684callback\u6c92\u6709\u56de\u61c9\u3002\u4f46\u53ef\u4ee5\u6b63\u5e38\u6309\u8b9a\u63a8\u85a6\u3002(\u5728HTML tag\u52a0\u5165opengraph\u5b9a\u7fa9\uff0cIE8\u5373\u53ef\uff0cxmlns:og=”http:\/\/opengraphprotocol.org\/schema\/”\uff0c\u4f46IE6\u4ecd\u7136\u4e0d\u884c\u3002)<\/p>\n
    1\/10 \u7d93\u904e\u8ffd\u8e64log\uff0c\u767c\u73fe\u5927\u90e8\u5206IE8\u4ecd\u7136\u4e0d\u884c\uff0c\u6709\u4e9b\u5247\u662f\u4f86\u81eaAppleWebKit\u4f7f\u7528IE8\uff0c\u76ee\u524d\u6301\u7e8c\u89c0\u5bdf\u3002\u6709\u53ef\u80fd\u8ddfuser\u662f\u5426\u53d6\u5f97app\u6388\u6b0a\u6709\u95dc\u3002\u7d93\u904e\u6e2c\u8a66\uff0c\u5982\u679cAPP\u6c92\u6709\u5f97\u5230user\u7684\u6388\u6b0a\uff0c\u5247\u4ecd\u7121\u6cd5\u6293\u5230user fb id\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
    \u7531\u65bc\u767c\u73fe\u5728\u7ad9\u5167\u6309\u8b9a\u7684\u6b21\u6578\u8207\u63a8\u85a6\u6578\u4e0d\u540c\u6b65\uff0c\u56e0\u6b64\u61f7\u7591\u662f\u5426\u662f\u5426\u4f86\u81ea\u7ad9\u5916\u7684\u63a8\u85a6(\u4f46\u56e0\u5fc5\u9808include js\uff0c\u4f3c\u4e4e\u4e0d\u592a […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":24,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-10102","page","type-page","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/donghong.info\/blog\/index.php?rest_route=\/wp\/v2\/pages\/10102","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/donghong.info\/blog\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/donghong.info\/blog\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/donghong.info\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/donghong.info\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=10102"}],"version-history":[{"count":0,"href":"https:\/\/donghong.info\/blog\/index.php?rest_route=\/wp\/v2\/pages\/10102\/revisions"}],"up":[{"embeddable":true,"href":"https:\/\/donghong.info\/blog\/index.php?rest_route=\/wp\/v2\/pages\/24"}],"wp:attachment":[{"href":"https:\/\/donghong.info\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=10102"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}