post back from saved page on the disk

[asp.net User]

Hello All,

I would like to prevent users from posting data through the saved page at
their disk.
Like a web page is saved to their c: drive and user opens it , change/remove
validation code and then submit.

This is not about clicking submit buttuon twice.

Any help on this?

[Anoj kumar]

check for HTTP_REFERER server variable.
it wont be available if the form was posted from locally
saved file.
"asp.net User" <as********@discussions.microsoft.com> wrote in message
news:E7**********************************@microsof t.com...

Hello All,

I would like to prevent users from posting data through the saved page at
their disk.
Like a web page is saved to their c: drive and user opens it , change/remove validation code and then submit.

This is not about clicking submit buttuon twice.

Any help on this?

[suresh_C#]

Hi,

It wont be available for first request eighter.

"Anoj kumar" wrote:

check for HTTP_REFERER server variable.
it wont be available if the form was posted from locally
saved file.
"asp.net User" <as********@discussions.microsoft.com> wrote in message
news:E7**********************************@microsof t.com...

Hello All,

I would like to prevent users from posting data through the saved page at
their disk.
Like a web page is saved to their c: drive and user opens it ,

change/remove

validation code and then submit.

This is not about clicking submit buttuon twice.

Any help on this?

[Oytun YILMAZ]

On Fri, 13 Aug 2004 12:55:55 +0530, Anoj kumar wrote:

check for HTTP_REFERER server variable.
it wont be available if the form was posted from locally
saved file.
"asp.net User" <as********@discussions.microsoft.com> wrote in message
news:E7**********************************@microsof t.com...

Hello All,

I would like to prevent users from posting data through the saved page at
their disk.
Like a web page is saved to their c: drive and user opens it ,

change/remove

validation code and then submit.

This is not about clicking submit buttuon twice.

Any help on this?

hi,
most firewalls block HTTP_REFERER info so a normal user may not be able to
access your page this way.

If validation is from ASP.NET validation control there is a better way. You
can use Page.Isvalid to perform the validation again in server side.

Could you tell more about your validation code ?

- Oytun YILMAZ

[Joerg Jooss]

asp.net User wrote:

Hello All,

I would like to prevent users from posting data through the saved
page at their disk.
Like a web page is saved to their c: drive and user opens it ,
change/remove validation code and then submit.

This is not about clicking submit buttuon twice.

Any help on this?

Don't ever rely on client-side validation for web apps. *Always* validate
everything on the server-side again.

Cheers,
--
Joerg Jooss
jo*********@gmx.net

[Joerg Jooss]

Anoj kumar wrote:

check for HTTP_REFERER server variable.
it wont be available if the form was posted from locally
saved file.

That is unpredictable. It takes just one proxy server and voilà -- you get a
Referer header. Never rely on the Referer header.

Cheers,
--
Joerg Jooss
jo*********@gmx.net

[suresh_C#]

Thanks for reply.

This is not only for validation, "validation" was just an example.

I just want to prevent user from sending data from their saved page.

I am looking for any config setting if available, like for viewstate
ASP.NET has given enableViewStateMac setting.

Thanks

"Joerg Jooss" wrote:

asp.net User wrote:

Hello All,

I would like to prevent users from posting data through the saved
page at their disk.
Like a web page is saved to their c: drive and user opens it ,
change/remove validation code and then submit.

This is not about clicking submit buttuon twice.

Any help on this?

Don't ever rely on client-side validation for web apps. *Always* validate
everything on the server-side again.

Cheers,
--
Joerg Jooss
jo*********@gmx.net

[Joerg Jooss]

suresh_C# wrote:

Thanks for reply.

This is not only for validation, "validation" was just an example.

I just want to prevent user from sending data from their saved page.

I am looking for any config setting if available, like for viewstate
ASP.NET has given enableViewStateMac setting.

OK -- but what is your motivation to do that? Also, does your application
require authentication or is ti used anonymously?
--
Joerg Jooss
jo*********@gmx.net

[Peter Morris]

Hi

This is not only for validation, "validation" was just an example.

You should always use the real situation when asking a question, otherwise
people will answer the question you asked rather than the question you
meant. :-)
--
Pete
====
Audio compression components, DIB graphics controls, FastStrings
http://www.droopyeyes.com

Read or write articles on just about anything
http://www.HowToDoThings.com