News for hackers. Stuff that matters.

A comment on Purchasing a £30,000 numberplate for the price of a bus ticket.

Re:Purchasing a £30,000 numberplate for the price of a bus t... by kordless on Monday October 14, 2013 @04:26PM (#6549416)
The fact the hidden fields can be populated on a POST doesn't necessarily imply they are used on the backend. There's a plate ID field in there...which may or may not indicate there is a record for this transaction in a database.
[ Parent | on HN ]
Re:Purchasing a £30,000 numberplate for the price of a bus t... by mortice on Monday October 14, 2013 @05:21PM (#6549722)
The fact that the author was able to manipulate values 2 pages after the form he modified pretty strongly implies that those values were used on the backend, however.
[ Parent | on HN ]