Frontend security help

Hello,

I have profiles table which has points column when an authenticated user buy an item inside the app I need to subtract the item price from points and then add item id to users_items table. If has less points he can't get that item.

How could I do that from a security prospect? Because if I do it from frontend he could add it directly from POSTMan or any post request.


Thank you.
Was this page helpful?