I am trying to make a previous form more secure by making it so the user can't edit hidden form fields before submitting. Previously we had a webform that looks like the following:
<form method="post" action="someaction.php" runat="server">
<input type="hidden" value='value1' name="attr1">
<input type="hidden" value='value2' name="attr2">
<input type="hidden" value='value3' name="attr3">
</form>
Obviously this is not secure as anyone can either view source or use the browser to edit any of these elements before the form is submitted. These are variables I would like to set and not change and also completely hide from the user before submitting the
form. Is this possible? I have tried to make the inputs runat=server but this obviously hides from client side and then the values can not be read for the php form submit. ...
Go to the complete details ...