Can some users still send callbackquery data , to

a bot , even if the bot never sent an inline message ?

7 ответов

24 просмотра

Yes, in theory that can happen. E.g. for custom clients

With moded clients anyone can send you any kind of data. You have to filter and process callback data with caution.

𝘼𝙗𝙙𝙤-🧢 Автор вопроса
Fabian Pastor
With moded clients anyone can send you any kind of...

I think this is a real security issues if i'm working with user_id also .. since a callbackquery can be constructed with custom data right ? ( ie : using different user_id than the actual one .

𝘼𝙗𝙙𝙤 🧢
I think this is a real security issues if i'm work...

only the data on the callbackquery is susceptible from user modification. User id, chat id and the other properties can't be changed.

Похожие вопросы

Карта сайта