undefined | Better HN

0 pointsjoking1y ago0 comments

Thats by design, you can’t trust the client, everything has to be checked server side.

0 comments

I think you misunderstand what's being described. The server didn't check it, it accepted the modified hidden field. The server should have rejected the request.

j / k navigate · click thread line to collapse

0 pointsjoking1y ago0 comments

Thats by design, you can’t trust the client, everything has to be checked server side.

0 comments

Clent1y ago

I think you misunderstand what's being described. The server didn't check it, it accepted the modified hidden field. The server should have rejected the request.

j / k navigate · click thread line to collapse