Example: “Hidden” Fields
Many shopping cart programs send the item price as a “hidden” field in the form.
When the user submits the form, these fields are returned to the server.
What if the user changes the field before submitting the form?
At least 11 such programs will believe such data. (ISS X-Force Alert 42, Feb 1, 2000)