For the defense of Over-posting

over-posting Simply means that the user learns the backend data by guessing Model property name, submits a database field that should not be allowed to be changed when the data is updated or added, and writes maliciously submitted data to the database on the server side because there is no defense.

A defense against this vulnerability could use the 6 update the model as shown in the section, or you can use the Bind features in Action on the white list ( Include ) or blacklist ( Exclude ) is used as shown in the following fragment.

For the defense of Over-posting