Question: I have an ASP.net Web API that inserts data from the user after they purchase a product in a Xamarin Application I am currently developing. However, data can also be inserted by simply calling the URL on a web browser from a desktop computer, such as:

```
http://www.mywebapi.com/myfunc?username=bob&prod_enabled=true

```

I only want data inserted AFTER the product has been purchased in my app. In the C# code for the web API, I have:

```
public IActionResult myfunc(string username, string prod_enabled)
{
      // Assume credentials to connect to database are validated
      using (SqlConnection connection = new SqlConnection(builder.ConnectionString))
        {
            SqlCommand cmd = new SqlCommand(
                "INSERT INTO users (username, product_enabled) " +
                "VALUES('" + username + "', '" + prod_enabled + "')", connection);

            try
            {
                connection.Open();
                int i = cmd.ExecuteNonQuery();
                connection.Close();

                if (i == 1)
                    return Content("True");

                return Content("False");
            } 
            catch (FormatException)
            {
                connection.Close();
                return Content("False");
            }
        }
}

```

My guess is to include a 3rd parameter that validates some sort of token from the Xamarin app, is that correct? I really want to ensure that people don't use the API to fake product purchases. There needs to be some means of verification.

Thanks!

Answer: 
On VS Code you can go to:

settings > Extensions > Dart > DevTools > Dart:Open Dev Tools = never

That's it.
I found this on [this](https://github.com/flutter/flutter/issues/14984) thread and it worked for me.

open the `settings.json` file and add `"dart.openDevTools": "never"`