How do I prevent users from changing id from url

Question

0.00/5 (No votes)

See more:

Hi Guys

I am passing id to my ActionResult, I then notice that I can change the id from the browser and move to another record and modify that record with out logging in and access it. Is there a way I can avoid that? maybe when I change that id it redirects to the login page rather?

What I have tried:

Tried to do some lil googling but with no win, then I was thinking of maybe passing a fake or temporary Id and use it rather to find that record but not sure if that will help.

Posted 21-Jun-16 22:21pm

Anele Ngqandu

Updated 21-Jun-16 23:43pm

Add a Solution

Comments

Kornfeld Eliyahu Peter 22-Jun-16 4:23am

Put your action behind login...

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

F-ES Sitecore · Accepted Answer · 2016-06-21T23:43:00

Solution 1

You can't stop people amending the url, as said you either need authentication or use ids that you can't guess, like GUIDs rather than sequential numbers, but implementing a log-in is the most secure way.

Things you shouldn't spend time doing | The ASP.NET Forums[^]

Posted 21-Jun-16 23:43pm

F-ES Sitecore

Comments

Anele Ngqandu 22-Jun-16 8:34am

Mmmh, ok ok its acceptable, thank you kindly.