7 ms·
Thats by design, you can’t trust the client, everything has to be checked server side.
by joking 2y ago
Thats by design, you can’t trust the client, everything has to be checked server side.
- Clent 2y agoI think you misunderstand what's being described. The server didn't check it, it accepted the modified hidden field. The server should have rejected the request.