I was wondering how can i as a system developer ensure that systems virtual wallet are not tampered with? for example lets a assume that my application allows a user to deposit and widthdraw money, where the account balance is stored in a database. how do i make sure that the requsted amount of withdrawment is legit ?
a bad scenario would be, that someone somehow got access to my database and change their account balance. How do i ensure the integrity of the data in store?
As my application will be using mysql, then its really easy if someone gets access to my cpanel account or somehow access the mysql database, to alter my records and i will have no way to prove that it was altered.