What happens if a malicious user decides to submit the form 10,000 times in a single day?
如果恶意用户决定在一天内提交 10,000次此表单，会发生什么情况呢？
This brings up a few questions: What if a malicious user hacks the underlying security mechanism itself?
这会带来几个问题：如果恶意用户攻破了底层安全机制本身，那么会怎么样？
Any code that executes in a Web browser can be tampered with, or bypassed completely, by a malicious user.
Web浏览器上运行的任何代码都可能被恶意用户篡改或者完全绕开。
If a malicious user gets hold of this key information, then the security of that host machine can be compromised very easily.
如果恶意用户获得了这些密钥信息，那么主机的安全性就很容易受到威胁。
For example, a malicious user could gain access to a user's resources if the user walks away from his machine and leaves it logged in.
例如，如果用户登录之后离开了他的机器，恶意用户就可以访问他的资源。
Provides information on guarding against malicious user input.
提供有关防止恶意用户进行输入的信息。
Consider the scenario in which a malicious user USES proxy tools to hijack data sent by the browser.
考虑恶意用户用代理工具劫持由浏览器发送的数据这一情况。
A malicious user manages to get code (script) to execute by masking it as user input from a page or as a link.
恶意使用者能够取得要执行的程序码(指令码)，方法是将其伪装成页面的使用者输入或连结。
If you create custom error messages, make sure that you do not display information that might help a malicious user compromise your application.
安全说明如果要创建自定义错误信息，请确保显示的信息不会帮助恶意用户损害您的应用程序。
When your application displays error messages, it should not give away information that a malicious user might find helpful in attacking your system.
当应用程序显示错误讯息时，不应将有助于恶意使用者攻击系统的资讯送出。
Data can be stored in the session with no direct way for a malicious user to alter it. (Bugs in your code may still give an attacker an opening, of course.)
数据可以存储在会话中，恶意用户无法直接修改它(当然，代码中的bug仍然可能产生安全漏洞)。
The most security-conscious developers distrust even their own databases, on the theory that a malicious user might have found a way to tamper with the database.
安全意识很强的开发人员甚至不信任他们自己的数据库，理由是他们认为恶意用户可能有办法篡改数据库。
Unsafe arguments are ones that include database or command line escape characters that could allow a malicious user to manipulate your application into executing arbitrary commands.
不安全参数是包含数据库或命令行转义符的参数，这些转义符可以让恶意用户操纵应用程序执行任意命令。
Directory traversal is another injection-style attack, wherein a malicious user tricks filesystem code into reading and/or writing files that the Web server shouldn't have access to.
目录遍历是另一种注入类型的攻击，攻击者欺骗文件系统读或写服务器不允许操作的文件。
Directory traversal is another injection-style attack, wherein a malicious user tricks filesystem code into reading and/or writing files that the Web server shouldn't have access to.
目录遍历是另一种注入类型的攻击，攻击者欺骗文件系统读或写服务器不允许操作的文件。
应用推荐