Protecting web application data

A system for protecting Web application data between a Web application of a server and a client, the system comprising:

• a backing-up device, configured to back up a response created by the Web application;
• a modification device, configured to modify the response by adding capturing code wherein the capturing code is for capturing a user action, user data of the client, or combination thereof;
• a sending device, configured to send the modified response to the client;
• a receiving device, configured to receive a request submitted by the client and the user action, user data of the client, or combination thereof captured by the capturing code;
• a generation device, configured to generate a verifying request according to the user action, user data of the client, or combination thereof captured by the capturing code and the backup of the response;
• and
• a verification device, configured to verify the request submitted by the client according to the verifying request;
• wherein the sending device is further configured to send the verified request submitted by the client to the Web application of the server.

A non-transitory article of manufacture tangibly embodying a computer readable program containing executable program instructions which when executed, implements the steps of a method for protecting Web application data between a Web application of a server and a client, the method comprising:

• backing up a response created by the Web application for the client;
• modifying the response by adding capturing code for capturing a user action, user data of the client, or a combination thereof;
• sending the modified response to the client;
• receiving a request submitted by the client and the user action, user data of the client, or combination thereof captured by the capturing code;
• generating a verifying request according to the received user action, user data of the client, or combination thereof captured by the capturing code and the backup of the response;
• verifying the request submitted by the client according to the verifying request;
• and
• sending the verified request submitted by the client to the Web application of the server.