So I made a game that isn't connected to the internet. But when the game ends, it opens up my website to send the users game scores to my website.
It will first go here...
then I used mysql_query to insert the userlevel into the db and it redirects the user to my real site.
But, this means that someone could easily figure out that link above and insert a level they really didn't earn.
I can't figure out how to make it so they can't insert there own information. Does anyone have any ideas?
The only thing I can think of to help prevent this is to make it so they can only access the update page once every hour or something, but that still doesn't completely fix it.