如何保护我的html元素值？

Question

I am developing an eCommerce website where user can select main product and also some extra accessories as per product.Also calculating total price (main product + accessories) to show it to user.

For now i am storing product price,individual accessories price and total price in hidden html input tag but it is easily accessible from inspect window.

How do i make it more secure?

Answer 1

The value stored on the page or inside a cookie should be just for the users view, it shouldn't be used for backend validation since anything stored on the users machine could potentially be changed by the user.

As others have stated, you should be validating the price with your backend software at checkout.

Answer 2

Hi there is one rule nothing in client side is secure. So once you will display something to user than this is not secure. If you have something that has to be secure (some client ids certificate, tokens ... ) You have to handle this on backend.

You can just hide this information, but on backend you have to always validate inputs. User can do fake request, change values etc.

Answer 3

而不是存储产品价格 ，您应该存储产品ID，然后在后端获取用户选择的特定ID的价格，进行总和或任何其他需要进行的计算并将其保存在数据库中。

Answer 4

For Securing Hidden you can also apply encryption and hashing to hidden input fields,

• Hash the original value
• Encrypt the original value
• Send the encrypted value along with the hash digest
• Upon receiving back the data, decrypt the encryption, hash the result and compare it to the received hash digest to ensure the value remained unchanged

Reference From : Securing HTML hidden input fields