How do I prevent users from changing data using "Tamper Data"
906740Dec 21 2011 — edited Mar 12 2012Hello,
I created an application with SSP and successfully generated the &cs=xxxx in the URL.
When the user changes something in the URL, the page errored out as expected for URL Tampering.
However, one user used "Tamper Data" -- a Mozilla add-on -- to intercept the data, changed some paramater,
and was able to post/submit the form successfully, bypassing any checksum in the URL.
Any ideas on how I can preven this?
Sonia