PHP - 不可编辑的输入

Question

I have a form:

<input type="text" value="3X732" readonly/>

Well, the user can use a program to edit the input value and then, break the system.

How can I prevent this? I can use anything, except scripts.

Ow an the value is dynamic, so I can't do something like $code = "3X732";

Answer 1

You should use $_SESSION to pass important data instead of html, never trust the user.