Security of postbacks / button visibility

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

dontspammenow@yahoo.com - 02 Oct 2007 10:52 GMT

If I put a asp button on a page with a runat=server attribute and then
set it's visibility to FALSE, so that it doesn't display on the page,
but have a click event for the button in the code behind, is it
possible for someone to still write a javascript postback routine and
trigger the code behind's click event?

Reply to this Message

Jesse Houwing - 02 Oct 2007 14:10 GMT

Hello dontspammenow@yahoo.com,

> If I put a asp button on a page with a runat=server attribute and then
> set it's visibility to FALSE, so that it doesn't display on the page,
> but have a click event for the button in the code behind, is it
> possible for someone to still write a javascript postback routine and
> trigger the code behind's click event?

The security of these postbacks has been improved in ASP.NEt 2.0. Theoretically
it's possible though.
--
Jesse Houwing
jesse.houwing at sogeti.nl

Reply to this Message

Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...