-
Notifications
You must be signed in to change notification settings - Fork 13
Closed
Labels
help wantedExtra attention is neededExtra attention is neededquestionFurther information is requestedFurther information is requested
Description
Currently, The cookies that hold most of the data are easily edited by any user.
I had someone with 1000 points this morning which I had to delete, We need to either encrypt it from the server side or instead of setting the cookies in the front end we can do it server-side and set it to httpONLY which will be designed to be inaccessible to JavaScript, so they cannot be modified or accessed by client-side code so only API calls can edit it which will require a lot of code changes to the backend.
Opened to ideas
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
help wantedExtra attention is neededExtra attention is neededquestionFurther information is requestedFurther information is requested