Skip to content

Encrypt or make it harder for users to mess with cookies #71

@Chris5613

Description

@Chris5613

Currently, The cookies that hold most of the data are easily edited by any user.

I had someone with 1000 points this morning which I had to delete, We need to either encrypt it from the server side or instead of setting the cookies in the front end we can do it server-side and set it to httpONLY which will be designed to be inaccessible to JavaScript, so they cannot be modified or accessed by client-side code so only API calls can edit it which will require a lot of code changes to the backend.

Opened to ideas

Metadata

Metadata

Assignees

Labels

help wantedExtra attention is neededquestionFurther information is requested

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions