Click here to Skip to main content
15,881,715 members
Home / Discussions / ASP.NET
   

ASP.NET

 
GeneralRe: When Rebuild this website warining this error ? Pin
Member 245846712-Sep-19 22:14
Member 245846712-Sep-19 22:14 
GeneralRe: When Rebuild this website warining this error ? Pin
Richard MacCutchan12-Sep-19 22:21
mveRichard MacCutchan12-Sep-19 22:21 
GeneralRe: When Rebuild this website warining this error ? Pin
Member 245846715-Sep-19 15:22
Member 245846715-Sep-19 15:22 
QuestionHow solve this error "ModuleNotFoundError: No module named 'requests' " by using pycharm Pin
thilipr11-Sep-19 2:38
thilipr11-Sep-19 2:38 
SuggestionRe: How solve this error "ModuleNotFoundError: No module named 'requests' " by using pycharm Pin
Richard Deeming11-Sep-19 23:39
mveRichard Deeming11-Sep-19 23:39 
AnswerRe: How solve this error "ModuleNotFoundError: No module named 'requests' " by using pycharm Pin
Richard MacCutchan12-Sep-19 0:19
mveRichard MacCutchan12-Sep-19 0:19 
QuestionRazor Pages Inconsistent Behaviour Pin
Mycroft Holmes7-Sep-19 13:49
professionalMycroft Holmes7-Sep-19 13:49 
AnswerRe: Razor Pages Inconsistent Behaviour - Resolved Pin
Mycroft Holmes7-Sep-19 13:51
professionalMycroft Holmes7-Sep-19 13:51 
QuestionWhen I have deployed My web application In IIS I am getting some extra words Pin
Nigam,Ashish30-Aug-19 2:40
Nigam,Ashish30-Aug-19 2:40 
AnswerRe: When I have deployed My web application In IIS I am getting some extra words Pin
Richard Deeming30-Aug-19 3:16
mveRichard Deeming30-Aug-19 3:16 
Questionhen I have deploy My web application In IIS I am getting some extra words Pin
Nigam,Ashish30-Aug-19 2:35
Nigam,Ashish30-Aug-19 2:35 
QuestionError bind data to html datatable with WebMethod and JavaScript (No data available in table) Pin
BERTHA Nelson26-Aug-19 17:39
BERTHA Nelson26-Aug-19 17:39 
AnswerRe: Error bind data to html datatable with WebMethod and JavaScript (No data available in table) Pin
ZurdoDev27-Aug-19 1:06
professionalZurdoDev27-Aug-19 1:06 
SuggestionRe: Error bind data to html datatable with WebMethod and JavaScript (No data available in table) Pin
Richard Deeming27-Aug-19 3:00
mveRichard Deeming27-Aug-19 3:00 
QuestionHow to print from android web browser to Bluetooth thermal printer? Pin
enifsolutions21-Aug-19 18:44
enifsolutions21-Aug-19 18:44 
QuestionRe: How to print from android web browser to Bluetooth thermal printer? Pin
Richard MacCutchan21-Aug-19 22:20
mveRichard MacCutchan21-Aug-19 22:20 
QuestionRazor Pages Navigation Pin
Mycroft Holmes19-Aug-19 15:26
professionalMycroft Holmes19-Aug-19 15:26 
AnswerRe: Razor Pages Navigation Pin
F-ES Sitecore19-Aug-19 23:11
professionalF-ES Sitecore19-Aug-19 23:11 
GeneralRe: Razor Pages Navigation Pin
Mycroft Holmes20-Aug-19 14:59
professionalMycroft Holmes20-Aug-19 14:59 
AnswerRe: Razor Pages Navigation Pin
Richard Deeming20-Aug-19 1:59
mveRichard Deeming20-Aug-19 1:59 
To be exploited, an IDOR issue must be combined with an Access Control issue because it's the Access Control issue that "allow" the attacker to access to the object for which he have guessed the identifier through is enumeration attack.
So long as you have proper access controls in place, and return the same error for accounts that the current user doesn't have permission to access as for accounts which don't exist, there shouldn't be any problems.

Depending on what you're doing, you might be able to drop the querystring and deduce the record to display based on the currently logged-in user. Or you could replace the IDs with a Guid, which would be much harder to enumerate.



"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

GeneralRe: Razor Pages Navigation Pin
Mycroft Holmes20-Aug-19 15:01
professionalMycroft Holmes20-Aug-19 15:01 
QuestionHaving Issues to logging users to active directory through web form Pin
samflex15-Aug-19 4:40
samflex15-Aug-19 4:40 
AnswerRe: Having Issues to logging users to active directory through web form Pin
ZurdoDev15-Aug-19 7:46
professionalZurdoDev15-Aug-19 7:46 
GeneralRe: Having Issues to logging users to active directory through web form Pin
samflex16-Aug-19 3:50
samflex16-Aug-19 3:50 
GeneralRe: Having Issues to logging users to active directory through web form Pin
ZurdoDev16-Aug-19 3:53
professionalZurdoDev16-Aug-19 3:53 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.