samedi 4 janvier 2020

Persisting data that shouldn't be changed to the client and back to the server

Suppose I send a form to the client to fill in, and attach the form's ID inside that < form ... > tag. I want to prevent the user from changing that ID field.

Is there some conventianal way to achieve this in MVC 4/5, or do I need to manually encrypt this data using a crypto provider? I don't suppose there is any other way to guarantee field integrity besides encrypting it.

I don't want to use Session for this, nor do I want to query the database if the user is authorized to access that form.




Aucun commentaire:

Enregistrer un commentaire