The amount and the item_id of bid is sent via the URL parameter in a bidding website, a user A sends same link to another user B with the manipulated parameter values, after clicking it the other user B finds out later that a bid has been placed on his behalf.