动态网页生成技术是基于B/S体系结构应用的基础技术手段之一。在B/S体系结构下,常用于保存会话信息的手段是COOKIE技术。由于Cookie允许客户端读写访问,所以存在会话信息被客户端篡改的可能,从而使服务器受到客户端的欺骗。这一欺骗在一定程度上危害基于B/S体系结构系统的信息安全。本文从网络安全理论着手,探讨了利用信息技术,通过散列函数摘取出固定长度的信息进行加密、解密和比较验证,实现防止动态网页中会话信息被客户端篡改之目的。 Dynamic webpage generation technology is one of the basic technical means based on the application of B / S architecture. Under the B / S architecture, the common method for saving session information is the COOKIE technology. Because the cookie allows the client to read and write access, there is a possibility that the session information is tampered with by the client, so that the server is spoofed by the client. This deception to a certain extent, endanger the information security based on B / S architecture system. This paper starts with the theory of network security and explores the use of information technology to extract the fixed-length information through the hash function to encrypt, decrypt, and compare to verify that the session information in the dynamic web page can be tampered with by clients.