thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

Parameter Tampering

Modifying request parameters such as prices, quantities, IDs or hidden fields to change application behavior.

Definition

Because users control everything sent from the client, any value used for security or business decisions must be validated or recomputed on the server. Integrity protection (server-side state or HMAC-signed values) prevents tampering.

Example

Changing a hidden price field from 199.99 to 0.01 at checkout.

Exam tip

The fix is server-side validation and server-held state, never hidden fields.

Related terms