The value passed from the checksum of the foreground is unreliable

 

It needs to be checked in the foreground, and when the user's input is invalid, the user is reminded in time to modify the input.

 

It is not enough to perform verification only by the foreground. The background also needs to perform business verification to prevent users from tampering with the values ​​of the input parameters, bypassing the verification logic preset in the foreground, or passing in illegal values.

 

================

As follows, the logic of checking the length of the input parameter can bypass the check (length>=6) by modifying the value of the input parameter in the console, and then change the value back to the previous value after the check is performed. span

 

 

 

 keep in mind:

 

Any value passed from the foreground to the background can be manually modified by the user (JS, fiddler, charles)