douyingtai6662 2018-08-04 09:00
浏览 15
已采纳

laravel如何保护从刀片到控制器的传递数据

How can I secure data from being change if user used inspect element in chrome to change id, price..etc, I know I can't prevent users from using inspect element and do changes but I dont want these changes to have effect I used this in blade to pass data from button using ajax

<button id="Item_root" data-id="{{$product->product_id}}"  data-detailsfield="{{$product->product_details}}" data-titlefield="{{$product->product_title}}" data-pricefield="{{$product->product_price}}" data-photofield="{{ asset('images/' . $product->product_image) }}" class="Item_root Button_root">

and from inspect element user can see it like this:

    <button id="Item_root" data-id="19" data-detailsfield="Serves 6-8 People" data-titlefield="Package # 8U" data-pricefield="105.99" data-photofield="http://localhost/crisp/public/images/Chicken-Fajitas.jpg" class="Item_root Button_root">
   <div class="Item_image" style="background-image:url('http://localhost/crisp/public/images/Chicken-Fajitas.jpg');"></div>
   <div class="Item_itemContent">
      <div class="Item_topSection">
         <span class="Item_name styles_just-right styles_base styles_spacing-base">Package # 8U</span>
         <span class="Item_price styles_just-right styles_base styles_spacing-base styles_semibold">$105.99</span>
      </div>
      <div class="Item_description styles_small styles_base styles_spacing-base styles_line-default">Serves 6-8 People</div>
   </div>
</button>
  • 写回答

1条回答 默认 最新

  • douzao1119 2018-08-04 09:28
    关注

    To preventing change values by users in inspect element and send it again to controller, you should use CSRF_TOKEN in input fields,

    Take a look at here:

    In laravel 5.6

    <form method="POST" action="/profile">
       @csrf
    ...
    </form>
    

    And also Laravel has Validation for check all input type that you defined.

    Here is the documerntation :

    Laravel Validation

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 如何让企业微信机器人实现消息汇总整合
  • ¥50 关于#ui#的问题:做yolov8的ui界面出现的问题
  • ¥15 如何用Python爬取各高校教师公开的教育和工作经历
  • ¥15 TLE9879QXA40 电机驱动
  • ¥20 对于工程问题的非线性数学模型进行线性化
  • ¥15 Mirare PLUS 进行密钥认证?(详解)
  • ¥15 物体双站RCS和其组成阵列后的双站RCS关系验证
  • ¥20 想用ollama做一个自己的AI数据库
  • ¥15 关于qualoth编辑及缝合服装领子的问题解决方案探寻
  • ¥15 请问怎么才能复现这样的图呀