Re: Add And Redirect

Think about what happens if I select 3 items worth $100 each, and then edit the url to ...cart.cgi?total=$0.01?

Examine what is said, not who speaks.

"Efficiency is intelligent laziness." -David Dunham
"When I'm working on a problem, I never think about beauty. I think only how to solve the problem. But when I have finished, if the solution is not beautiful, I know it is wrong." -Richard Buckminster Fuller

Comment on Re: Add And Redirect

Replies are listed 'Best First'.
Re: Re: Add And Redirect by Skeeve (Parson) on May 16, 2003 at 07:56 UTC
I did that (almost) once and it worked! A company gave users Points for doing something on their page and I earned 1800 Points worth about 9 Euro (IIRC) When I wanted the money they just allowed me to transfer it in 500Point-Steps, leaving 300Points (worth 1.50 Eur). I saved the source of the "transfer-page", simply added 1800 to the selection, submitted and 2 weks later I had my 9 Euro ;-) So to everyone dealing with user input: Always check on the server too.	[reply]

Replies are listed 'Best First'.

Re: Re: Add And Redirect
by Skeeve (Parson) on May 16, 2003 at 07:56 UTC

A company gave users Points for doing something on their page and I earned 1800 Points worth about 9 Euro (IIRC)

When I wanted the money they just allowed me to transfer it in 500Point-Steps, leaving 300Points (worth 1.50 Eur).

I saved the source of the "transfer-page", simply added 1800 to the selection, submitted and 2 weks later I had my 9 Euro ;-)

So to everyone dealing with user input: Always check on the server too.

[reply]