I have a file on my website which users can download. After clicking the download button, then I show a div with user agreements and two buttons, "accept user agreement" and "decline user agreement".
If the user presses "accept user agreement" then I append the GET Parameter
&useragreement=1 to the download URL, otherwise
Then on the server side i check if
useragreement == 1 and if true, initiate the download, otherwise initiate a page reload.
However, a user could just manipulate the url and add
&useragreement=1 to download a file without even reading the user agreements.
A: Is it considered as cyber crime (hacking) to bypass the user agreement window like this?
B: How can I improve it?