All geek questions in one place

How to stop the user from changing the sequence

How to protect a URL from a user changing one of param / value pairs?

Thank.

+3
source share
5 answers

You can add the HMAC hash to the query string using a secure random key stored only on the server, and then check the hash for each request.

+6
source

You can not.

You need to check them out. You must ensure that your page accepts only valid input for each of the parameters. "Valid" can mean many things, such as "Does the user have access to view this", etc.

+7
source

.

+2

You can not. This is by definition an external interface. If your security system depends on this, you should consider how to do it.

+1
source

Protecting it and preventing change are two different things. You cannot stop them from changing it, but you can protect / check.

0
source

Source: https://habr.com/ru/post/1769058/

More articles:


All Articles