在Chrome等浏览器中停止控制台javascript命令

Question

I have my website which has this issue. It could be hacked easily through javascript.If the hacker types this in his console he can easily add a user in my database and can signup without going through the stuff like checking password length , checking username length and so on ...

$.post("extra/includes/signup/register.inc2.php",{username:"user1234",email:"email@live.com",p:"here goes password"})

I want a code that could stop him from using console in my website. And if there is no way to do that then how to fix it by some other means ?

Answer 1

Disabling the console won't do. A hacker can always do the same request to your server as you do.

If it is something that isn't public you can protect it using a username and password, looking at the url it is a public script.

If you require a public register script the best way to protect against this kind of thing is to us a captcha (for example recaptcha . It makes it a lot harder to do a scripted attack on your register script.

Always validate the data server side, you can not trust the data you receive from your request because it can be easely manipulated.

Answer 2

You should not rely on client side form validations and it is total bad practice.Try to adapt framework like CI or Laravel . They have particular set of easy ways to validate the form inputs .