窃取服务器php文件,php – 窃取我的POST数据

Can ANYONE from ANYWHERE intercept my POST data just by listening for it, perhaps with some third party software like Firesheep?

不,交通必须靠近他们.

If the above question renders TRUE:

它没有,但即便如此.

Should I always consider my unencrypted POST data freely available for anyone?

除非它只通过局域网,否则.如果它只通过LAN传输,那么在“局域网”上添加限定符,答案为是.

Are the standard login form on my site just a ploy to depict a layer of security that’s not even there?

没有

Should I then consider the login feature just as a way for me to personalize the user experience?

当然,如果没有加密,你不应该做任何严肃的事.

Does it make sense to encourage the user NOT to use his or her normal (assumed safer) password, since it won’t be protected during their registration and login procedures?

对任何系统都这样做是有意义的.即使通信是安全的,您的服务器将来也可能会受到攻击,或者第三方系统可能会被攻陷,然后用于攻击您系统的数据.