all groups > asp.net security > july 2005 >
You're in the

asp.net security

group:

Security question?


Security question? MilanB
7/22/2005 2:00:01 AM
asp.net security:
Application has a webform where user can edit/modify some information that
are stored in database.

When I show data to user, I must somewhere memorize ID of database record
that is currently edited.

Where to do that? So malicious users can not chage that ID (of current
edited record), and in that manner modify some other record, and not current
Re: Security question? Yunus Emre ALPÖZEN [MCSD.NET]
7/24/2005 12:00:00 AM
store it in viewstate and use viewstatemac


--
HTH

Thanks,
Yunus Emre ALPÖZEN
BSc, MCSD.NET

[quoted text, click to view]

Re: Security question? MilanB
7/24/2005 12:08:01 PM
Thanks!
AddThis Social Bookmark Button