4 ms·
Should I not be able to send money to the same person twice in a row? Unless you add a single-use token to the form, your server doesn't know whether it was a m
by Toutouxc 3y ago
Should I not be able to send money to the same person twice in a row? Unless you add a single-use token to the form, your server doesn't know whether it was a misclick or a legitimate action. The client more or less knows.
- omoikane 3y agoThe form should indeed include single-use tokens to allow server-side filtering of duplicates. Related: https://en.wikipedia.org/wiki/Replay_attack https://en.wikipedia.org/wiki/Replay_attack