开发者

form temparing Payment

I have a payment for开发者_运维技巧m which calculates payment on the selection of some items on the page and final amount to pay goes to payment gateway from an hidden field in the form. If user changes the amount by inspecting DOM, my form submits the changes amount and same goes to payment gateway. How can I secure my form for this temparing.

Thanks Umar


If you put the amount in the form you basically can't stop someone from manipulating it. You need to find a way to send the form data from the server side or your payment gateway provider should provide a way to validate the amount is correct through use of a hash or some other mechanism. You should ask your provider what options they offer to you along those lines.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜