jQuery $.post concern

Question

As you all know, the $.post function for jQuery is quite awesome, but the problem I have with that is the person who views the source of the page can view where the data is going, thus moving towards that page to snoop around, or, God forbid find the folder where everything is kept. So my question is, who knows how to hide that, or, the best way to protect that information, no matter what the way is, to make sure that vulnerability is fixed. What solution do you offer?

Answer 1

It doesnt matter whether you use the jQuery post/get methods or your own created ones. Using Ajax to send and receive data from client to server will easily enable the user to see where its going. That is why the best practice is to just secure everything from the server side. Make sure to research secure PHP programming tactics, that is really all you can ask for when using Ajax.

Answer 2

The very first thing you need to do is install tamperdata. Immediately after running this software you'll realize that the user can see every single http request the browser makes and can modify every single http request the browser makes.

Let me be crystal clear: If you're secuirty system relies on obscuring traffic then your system is very insecure.