Home/ Questions/Q 3610040
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-18T21:42:10+00:00

I would like to create a web app similar to Stack Overflow in that

  • 0

I would like to create a web app similar to Stack Overflow in that the users will have different “point” levels and that their capabilities within the web app will be different based upon their point level.

Question: How can this best be implemented? How can it be implemented in a way that is un-hackable (i.e. accessing capabilities that should not be available)?

I figure there are two ways to do this: server-side and client-side. For the server-side solution, for each page request you check who the user is and have the CGI rewrite the page so that the client only gets a web page with the intended capabilities. For the client-side solution, the server gives the client the fully capable app and it is the client’s job to check the point level and to handicap the app appropriately.

It seems like the client-side solution would be easier on the server, (which is really important for my app), but more susceptible to someone hacking and using capabilities unwarranted by their point level.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    Say you want to restrict downvoting to those with over 125 points.

    In your server-side code (not client-side JavaScript):

    • You should show the downvote link only if the user has at least 125 points.
    • You will have to check whether the user has at least 125 points whenever he tries to downvote.

    The reason is that you cannot trust the client (for web applications, the web browser). Those interested in defeating such a lockout that only exists on the client side could easily do so using such software as Greasemonkey or Wireshark.

    • 0