Pro PHP Security: From Application Security Principles to the Implementation of XSS Defenses, Second Edition

Remote Procedure Calls

Remote Procedure Calls (RPCs) are simply messages from one computer to another, sent over a network of some sort, requesting some information or the execution of a command on the remote server.

Here are some examples of remote procedure call requests, cast in human terms:

• Send me these files.
• Copy these messages to this inbox.
• Post this entry to my weblog.
• Tell me the current weather forecast for my zip code.
• Authorize me to request this financial transaction.
• Carry out this financial transaction for me.
• Provide a list of today's published articles on computer security.
• Return the results of this search query.

RPCs haven't always been a source of computer security problems. Prior to the advent of the Internet, servers ...