My web server:
- Generates private and public, and a wallet address from the public key for a user website account
- Server can not connect to the outside (Can not connect to the Bitcoin network)
- Has a page that allows anyone to send money to the user account wallet address
What I need to do:
- The server needs to know when bitcoins were sent to the wallet address, and how many total bitcoins are at the wallet address
Note: I have sent testnet bitcoins to that wallet.
Everything works except 1 problem: The browser user can easily change the bitcoin amounts and trick the web server into thinking more bitcoin were sent.
My question is: What methods can I use on the webserver to verify that the transaction data was not changed by the browser user. The web server has the pub/priv key of the receiving wallet. The webserver has the "bx" libbitcoin-explorer program available and I could potentially install other software.
Can I use the commands in this diagram at all? https://github.com/libbitcoin/libbitcoin-explorer/wiki/Transaction-Commands