Prevent change of hidden field
Posted
by er-v
on Stack Overflow
See other posts from Stack Overflow
or by er-v
Published on 2010-05-15T13:12:00Z
Indexed on
2010/05/15
13:14 UTC
Read the original article
Hit count: 360
What if I have ChangePassword form with hidden ID field of the user.
BadPerson knows id of GoodPerson. He opens Change Password form with FireBug, changes his Id to GoodPerson's Id, so password changes for GoodPerson.
Of course I can create some server logic that will prevent this, but I think there should be some out of the box solution, wich throws if hidden field been changed, wich I don't know.
Thank's in advance.
© Stack Overflow or respective owner
