URL manipulation

…In this movie, we'll talk about protection against URL Manipulation.…URL Manipulation is always going to occur, and it may not even be malicious.…Curious users may try to change the URL string to see what else they can discover.…And it's very easy to do.…The URL's right there at the top of the browser.…The text is very easily editable, and they can just try things and see what comes up.…It can be used to reveal private information…or to try and get access to restricted actions.…So how do you protect against it?…Well, much of the way that you protect against URL Manipulation…is simply by being smart in the design of your application.…

For example, a user shouldn't be able to visit the last…step of the checkout process before they've entered their billing information.…So you'll need to design your code with those kinds of checks in place.…But, the simplest solution is, don't put private information…and restricted actions where the public can find it.…You want to protect private information…with something more robust like authentication.…