Symfony2 RESTful API + AngularJS Symfony2 RESTful API + AngularJS symfony symfony

Symfony2 RESTful API + AngularJS


You can limit the abuse of your system in a number of ways, including:

  • Limit the total number of requests that API will return before requiring CAPTCHA or some other validation method. This can be limited by IP, browser fingerprint, authentication token, etc.

  • Make it difficult for abuser to guess IDs of products, categories, etc. by using GUIDs or other randomly generated IDs.

  • Use API management proxy such as Azure API Management for more enterprise level management of the APIs (http://justazure.com/azure-api-management-part-one-introduction/)


You could try something like:

  1. To access the site anonymous users first need to fill in the captcha to get temporary token.
  2. Add referrer check on.
  3. Limit amount of data anonymous users can view. For instance, first 50 products.

This way everyone who wants to steal your data first need to get anonymous temporary token by filling in the captcha and change referrer.