Prevent change of hidden field

Posted by er-v on Stack Overflow See other posts from Stack Overflow or by er-v
Published on 2010-05-15T13:12:00Z Indexed on 2010/05/15 13:14 UTC
Read the original article Hit count: 352

What if I have ChangePassword form with hidden ID field of the user.

BadPerson knows id of GoodPerson. He opens Change Password form with FireBug, changes his Id to GoodPerson's Id, so password changes for GoodPerson.

Of course I can create some server logic that will prevent this, but I think there should be some out of the box solution, wich throws if hidden field been changed, wich I don't know.

Thank's in advance.

© Stack Overflow or respective owner

Related posts about asp.net-mvc

Related posts about asp.net-mvc-2