Back

Server Side Checks without Cloud Functions?

  • 1
  • Self Hosted
  • Web
ORIZON
8 May, 2023, 09:58

I have a Next Js Website where the Signed in Users can Come and Post.

There are only Certain days in a week which we allow the Users to Post like "You can Only Post on Tuesday".

And It works Good. But I Tried to Send a POST Request with Postman/Insomnia to the Appwrite server with a Different Date and Different Time like Changed the Date to a Year Before and It thought that It is TRUE and Created it on the Day I sent It.

Can I run any Server Side Checks to Fix this? I can't run Cloud functions because I'm using Kubernetes and It doesn't support it.

Any Help Would be Appreciated.

TL;DR
The user is experiencing an issue where they are able to bypass server-side checks by changing the date and time in a POST request to an Appwrite server. They are looking for a solution to prevent this but cannot use cloud functions due to using Kubernetes. No screenshots or further details are provided.
ORIZON
8 May, 2023, 11:02

??

joeyouss
8 May, 2023, 16:00

Hi - I am not sure about why it thinks as true, do you have any screenshots so I can take a look?

ORIZON
8 May, 2023, 16:37

Hi,

ORIZON
8 May, 2023, 16:38

This is the POST request.

ORIZON
8 May, 2023, 16:38

Now I can change anything Like date & time

ORIZON
8 May, 2023, 16:38

And it uses the Date & Time which gets from this Request

Guille
8 May, 2023, 16:53

As I'm aware, currently there no other way to do that without cloud functions

ORIZON
8 May, 2023, 16:54

Oh.😭

Reply

Reply to this thread by joining our Discord

Reply on Discord

Need support?

Join our Discord

Get community support by joining our Discord server.

Join Discord

Get premium support

Join Appwrite Pro and get email support from our team.

Learn more