Jump to content

Security / Business Logic

HostingMaster

By HostingMaster
in Bugs

 Share

Recommended Posts

HostingMaster Rookie

HostingMaster

Posted
Posted

When ordering a domain XXXX.com 

someone can easily change the hidden domain field ( Using  Chrome Inspect Element ) in the Config form to another domain name and extension and order the domain XXXX.io for the same price of XXXXX.com in LogicBoxes or any other registrar that supports both.

Is it possible to encrypt or make these hidden fields session only?

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing
×
×
  • Create New...