cfaa
Is it illegal to modify url data?
<p>Say i did something like <a href="https://SomeSite.com/variableThing=**MyValue*" rel="nofollow noreferrer">https://SomeSite.com/variableThing=**MyValue*</a>*
instead of <a href="https://SomeSite.com/variableThing=**DefaultValue*" rel="nofollow noreferrer">https://SomeSite.com/variableThing=**DefaultValue*</a>*</p>
<p>Can I be held accountable for any errors that the variable generates on the server end.</p>
<p>The servers are probably owned by my local organization, and I have not agreed to any statements the software my organization is using.</p>

<h2>Awareness of consequences</h2>
<p>If you <em>knew</em> (or had reasons to suspect) that the server end implemented something like (whether intentionally, or by way of a bug/omission):</p>
<pre><code>if variableThing == **MyValue** {
    causeALotOfTrouble()
}
</code></pre>
<p>— then yes, you pretty much can be held accountable.</p>
<p>Otherwise highly unlikely. By default, it is reasonable to expect that servers handle/filter/sanitise user input properly no matter where the request comes from, so modifying a URL is merely <em>seeking</em> certain data from the server — which it is free to supply or deny.</p>
<p>For example, if <code>MyValue</code> is an SQL injection attempt, then yes. If it is trying to filter out the results by a certain criteria, then no.</p>
