the asp.net application need all kind of security. unsecure forms may be influence by XSS [cross site scripting]

there is some way to solve these type of problem in MVC.

first sollution is that use <%= Html.AntiForgeryToken() %> for make secure from cross site scripting. it’s work by machine key in MVC. well you can valid them whenever you got respond from client. you can apply by this attribute on action you give the response behalf of form submission

[ValidateAntiForgeryToken]

you can secondly use authorize attribute where you can make own definition of authorize attribute in asp.net mvc for more info read david’s post

well I am use my own custom attribute who use a different type of authorization :- the who controller use a attribute I put their and the attribute I put their have a logic and logic check the cookie in request who make sure that request they got from user.