4 ms·
If you write web apps, you should be used to treating user input as hostile. You just need to write your application with a clear perimeter around user supplied
by eximius 8y ago
If you write web apps, you should be used to treating user input as hostile. You just need to write your application with a clear perimeter around user supplied input.
- needz 8y agoLet's say the web app is a game and it keeps track of your high score when you play it, if the high score is stored somewhere you have complete control over, what's to stop someone from modifying that score? Substitute high score for any variable a server tracks about a user that isn't explicitly supplied by that user.
- eximius 8y agoThe only way to prevent cheating in a game is to run the code on the server based on transmitted user actions. Even with a server side DB, they could lie about their results or hack the game to do better.