# Attack

**URL:** https://talk.remobjects.com/t/attack/24424
**Category:** Remoting SDK
**Created:** [March 19, 2021, 11:08am UTC](https://talk.remobjects.com/t/attack/24424 "2021-03-19T11:08:31Z")
**Posts on this page:** 1
**Showing post:** 6

<div class="post-metadata">

### Author: ![EvgenyK](https://talk.remobjects.com/user_avatar/talk.remobjects.com/evgenyk/32/16_2.png) [@EvgenyK](https://talk.remobjects.com/u/EvgenyK)
#### Post date: [March 22, 2021, 10:27am UTC](https://talk.remobjects.com/t/attack/24424/6 "2021-03-22T10:27:44Z")

</div>

Typical url is `http://host:port/path` .  
You can change `port` (8099 by default) and/or `path` (`bin` by default).  
also is possible to work w/o hardcoded `path`.  
in this case, you need to implement [OnCustomResponseEvent](https://docs.remotingsdk.com/API/Delphi/Classes/TROBaseHTTPServer/#OnCustomResponseEvent).

see more at [Using OnCustomResponseEvent in a ROSDK Server](https://talk.remobjects.com/t/using-oncustomresponseevent-in-a-rosdk-server/6767).

in this event you can check incoming stream and depending on some conditional, allow/disallow to process it.

for example, you can have conditional: envelope marker should be the same as `path`.  
you read from stream envelope marker and compare with `path`.

from [Message Envelopes: Wire Specification](https://docs.remotingsdk.com/Servers/Concepts/MessageEnvelopes/#wire-specification), you know:

> Each envelope will add the following preamble to messages as they are enveloped:
> 
> - 5 ASCII characters `ROENV` as a marker.
> - The envelope marker, as 1-byte binary length, followed by the UTF-8-encoded envelope name (maximum of 255 characters). The length bytes indicates the number of bytes, not UTF-8 characters.

so you can easily to implement this checking.

---

_[View the full topic](https://talk.remobjects.com/t/attack/24424)._