How we built Hamiltix.net for less than $1 a month on AWS

Re:How we built Hamiltix.net for less than $1 a month on AWS by stdclass on Friday March 02, 2018 @11:24AM (#16502832)

Everything that can be modified by the user is not suitable. The price must be stored on the server side, everything on the client side is subject to modification.

[ Parent | on HN ]

Re:How we built Hamiltix.net for less than $1 a month on AWS by badsectorlabs on Friday March 02, 2018 @03:55PM (#16505596)

The price is checked server side. You have to pass the price somehow to the client in order to display it. This is no different than any other ecommerce site, except that you can see it in a GET param.

I can "change the price" of anything on Amazon with dev tools, but that won't help me when I go to buy it. I appreciate the concern because amazingly this has been a real vulnerability on sites before (recently on a crypto exchange I think).

[ Parent | on HN ]

Re:How we built Hamiltix.net for less than $1 a month on AWS by gdamjan1 on Saturday March 03, 2018 @07:14AM (#16508956)

Storing it, or passing it by the user can be suitable if the data is signed

[ Parent | on HN ]