douyingtai6662 2018-08-04 09:00
浏览 15
已采纳

laravel如何保护从刀片到控制器的传递数据

How can I secure data from being change if user used inspect element in chrome to change id, price..etc, I know I can't prevent users from using inspect element and do changes but I dont want these changes to have effect I used this in blade to pass data from button using ajax

<button id="Item_root" data-id="{{$product->product_id}}"  data-detailsfield="{{$product->product_details}}" data-titlefield="{{$product->product_title}}" data-pricefield="{{$product->product_price}}" data-photofield="{{ asset('images/' . $product->product_image) }}" class="Item_root Button_root">

and from inspect element user can see it like this:

    <button id="Item_root" data-id="19" data-detailsfield="Serves 6-8 People" data-titlefield="Package # 8U" data-pricefield="105.99" data-photofield="http://localhost/crisp/public/images/Chicken-Fajitas.jpg" class="Item_root Button_root">
   <div class="Item_image" style="background-image:url('http://localhost/crisp/public/images/Chicken-Fajitas.jpg');"></div>
   <div class="Item_itemContent">
      <div class="Item_topSection">
         <span class="Item_name styles_just-right styles_base styles_spacing-base">Package # 8U</span>
         <span class="Item_price styles_just-right styles_base styles_spacing-base styles_semibold">$105.99</span>
      </div>
      <div class="Item_description styles_small styles_base styles_spacing-base styles_line-default">Serves 6-8 People</div>
   </div>
</button>
  • 写回答

1条回答 默认 最新

  • douzao1119 2018-08-04 09:28
    关注

    To preventing change values by users in inspect element and send it again to controller, you should use CSRF_TOKEN in input fields,

    Take a look at here:

    In laravel 5.6

    <form method="POST" action="/profile">
       @csrf
    ...
    </form>
    

    And also Laravel has Validation for check all input type that you defined.

    Here is the documerntation :

    Laravel Validation

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 如何用Labview在myRIO上做LCD显示?(语言-开发语言)
  • ¥15 Vue3地图和异步函数使用
  • ¥15 C++ yoloV5改写遇到的问题
  • ¥20 win11修改中文用户名路径
  • ¥15 win2012磁盘空间不足,c盘正常,d盘无法写入
  • ¥15 用土力学知识进行土坡稳定性分析与挡土墙设计
  • ¥70 PlayWright在Java上连接CDP关联本地Chrome启动失败,貌似是Windows端口转发问题
  • ¥15 帮我写一个c++工程
  • ¥30 Eclipse官网打不开,官网首页进不去,显示无法访问此页面,求解决方法
  • ¥15 关于smbclient 库的使用