Question

Web Forms are one of the most important aspects of an HTML interface to secure. Consider a simple Login Form that includes a username and password for allowing access to an application.

Discuss methods that will help secure the data-in-transit and at-rest. Be sure to reference your findings. Provide code examples as applicable for your example. Python is preferred but other languages are acceptable as well.

Answer 1

First of all data should be sent using POST method as it will allow the data not to be sent with url. Another thing you can do is send data in encrypted form either using bcryot,rsa or any web tokens so that even if your data gets breached it does not gets decrypted by hacker.

import requests
headers = {'User-Agent': 'Mozilla/5.0'}
payload = {'username':'niceusername','password':'123456'}

session = requests.Session()
session.post('https://admin.example.com/login.php',headers=headers,data=payload)
# the session instance holds the cookie. So use it to get/post later.
# e.g. session.get('https://example.com/profile')