Many people are aware that people can edit the html source code of a website using the inspect element function available on most browsers. This is pretty harmless since the edits just take place on the local machine, and not on the actual website. I’m worried about one security issue it might have though and I’m wondering if anyone knows the answer to it.
How might this function effect forms that are submitted. Fields can often be made hidden and store a value that is necessary to run a certain query. I’m wondering if people changed that value on the hidden field could that compromise the security of the site? Is there any security threat associated with this? I have a way to easily defend it, but I was just wondering if it was a flaw worth defending against.
Thanks for the help.
Yes, yes it is a huge security issue.
Never trust data provided by the user, which means, by proxy, by the web page submission.