Thomas’ Developer Blog

February 5, 2009

Enable/Disable .Net controls (Security Tip)

Filed under: .Net Framework 3.5, Asp.Net Framework 2.0, security — sanzon @ 5:53 am

I was just browing around online and found a thread on asp.net’s forum talking about disabling a textbox for security reasons.

Now, I’m always anal when it comes to security, double checking everything sever side and never assuming the page generated on the clientside will be the way I intended it on the way back.

For those who have ever thought of doing this as a quick solution, I’m sorry, but you’re wrong. All disabling controls do is create a friendly user interface where a user knows ahead of time they can’t edit it.

In any browser, such as firefox, with firebug, you can just back the code and reenable it and then alter the text and submit the form. if you failed to double check for changed and access rights, the person will have just hacked your site. Something any kid can do! So don’t do it! Use it only to make your site more friendly AND NOT for security reasons.

Advertisements

23 Comments »

  1. First blog I read after wakeup from sleep today!

    ________________________
    Proven! How to cure Acne Naturally.Email to mike.wilson80@ymail.com for more information.

    Comment by Mike — March 4, 2009 @ 7:42 am

  2. Every weekend i used to visit this site,
    because i want enjoyment, for the reason that this this web site conations in fact fastidious funny material too.

    Comment by how to configure adsl 2 bsnl modem — August 24, 2014 @ 12:19 am

  3. I’m curious to find out what blog platform you’re working with?
    I’m having some small security problems with my latest website and I’d like to find something more risk-free.
    Do you have any suggestions?

    Comment by how to configure best cable dsl best comcast modem for — August 28, 2014 @ 8:10 pm

  4. Unquestionably consider that which you said. Your favorite reason seemed to be on the net the
    easiest thing to take into accout of. I say to
    you, I certainly get irked even as folks think about issues
    that they plainly do not recognise about. You controlled to hit
    the nail upon the highest as neatly as defined out the entire thing with no
    need side-effects , other people can take a signal. Will probably be again to get more.
    Thank you

    Comment by how to configure best buy motorola cable modem for — August 29, 2014 @ 4:46 am

  5. Hey there I am so excited I found your blog, I really found you
    by error, while I was researching on Aol for something else,
    Anyhow I am here now and would just like to say thank you for a fantastic post and a all round thrilling blog (I also love the theme/design),
    I don’t have time to go through it all at the minute but I
    have saved it and also added in your RSS feeds, so when I have time I will be back to read a great deal more, Please do
    keep up the superb b.

    Comment by how to configure best comcast how to configure modem linux — August 30, 2014 @ 3:29 pm

  6. No matter if some one searches for his necessary thing, thus he/she wishes
    to be available that in detail, thus that thing is
    maintained over here.

    Comment by how to configure best cable the what is the best modem — September 1, 2014 @ 10:55 pm

  7. Just want to say your article is as astonishing. The clarity in your post is simply nice
    and i could assume you are an expert on this subject. Well with your permission let me to grab
    your feed to keep up to date with forthcoming post.
    Thanks a million and please continue the
    gratifying work.

    Comment by how to configure streamyx billion modem — September 3, 2014 @ 7:37 am

  8. I don’t drop a comment, but I looked at some of the comments on this page Enable/Disable .Net controls (Security Tip) | Thomas’ Developer Blog.
    I do have 2 questions for you if you do not
    mind. Is it just me or do some of the remarks come across
    as if they are coming from brain dead individuals?
    :-P And, if you are writing at other social sites, I’d like to keep up
    with you. Could you post a list of every one of your shared pages like your Facebook
    page, twitter feed, or linkedin profile?

    Comment by how to configure best comcast best dsl modem for xbox live — September 11, 2014 @ 7:23 am

  9. Why people still make use of to read news papers when in this technological world everything is
    existing on net?

    Comment by how to configure best cable best do you need a modem for — September 11, 2014 @ 7:25 pm

  10. My relatives all the time say that I am wasting my time here at web, except I know I am getting know-how daily by reading such fastidious content.

    Comment by how to configure best buy wireless cable modem for — September 18, 2014 @ 4:07 pm

  11. It is not my first time to visit this site, i am visiting this website dailly and
    take nice facts from here daily.

    Comment by how to configure best cable how to configure modem h5001 — September 20, 2014 @ 8:20 am

  12. I’m not sure where you’re getting your info, but good topic.
    I needs to spend some time learning much more or understanding more.
    Thanks for great information I was looking for this information for my mission.

    Comment by how to configure best cable the best modem for xbox 360 — September 20, 2014 @ 10:39 am

  13. Greetings from Ohio! I’m bored to death at work so I decided to check out your website on my iphone during lunch break.

    I love the info you provide here and can’t wait to take a look when I get home.
    I’m shocked at how fast your blog loaded on my cell phone ..

    I’m not even using WIFI, just 3G .. Anyways, excellent site!

    Comment by how to configure arris best docsis 3 cable modem — September 21, 2014 @ 3:39 pm

  14. When someone writes an paragraph he/she keeps the thought of a user
    in his/her brain that how a user can know it.
    Therefore that’s why this piece of writing is amazing. Thanks!

    Comment by how to configure best cable how to configure modem for — September 23, 2014 @ 12:53 am

  15. I’m not that much of a internet reader to be honest but your sites really nice,
    keep it up! I’ll go ahead and bookmark your website to come back in the future.
    Many thanks

    Comment by how to configure best best comcast best modem for xbox live — September 23, 2014 @ 2:41 am

  16. Thanks for sharing your thoughts. I truly appreciate your efforts and
    I am waiting for your next post thanks once again.

    Comment by how to configure best best wireless best wireless cable modem — September 25, 2014 @ 12:52 am

  17. Hey there just wanted to give you a brief heads up and let you know a few of
    the pictures aren’t loading correctly. I’m not sure why but I think
    its a linking issue. I’ve tried it in two different internet
    browsers and both show the same results.

    Comment by how to configure best arris fastest cable modem for comcast — September 27, 2014 @ 4:14 pm

  18. Hi there it’s me, I am also visiting this web page regularly, this website is truly
    pleasant and the visitors are genuinely sharing good thoughts.

    Comment by how to configure best buy best wireless cable modem — September 28, 2014 @ 5:37 am

  19. After I initially commented I appear to have clicked the -Notify me when new comments are added-
    checkbox and from now on each time a comment is added I
    recieve 4 emails with the same comment. Is there an easy method you can remove me from that service?

    Appreciate it!

    Comment by how to configure best best best dsl modem for xbox — September 30, 2014 @ 6:15 pm

  20. Pretty element of content. I simply stumbled upon your web site and in accession capital to claim
    that I get in fact enjoyed account your weblog posts.
    Any way I will be subscribing on your feeds and even I success you get entry
    to consistently rapidly.

    Comment by how to configure tp link adsl modem for bsnl — September 30, 2014 @ 7:52 pm

  21. It’s remarkable in support of me to have a web site, which is useful in support of my know-how.

    thanks admin

    Comment by how to configure best best docsis 3 wireless cable modem for — September 30, 2014 @ 9:13 pm

  22. We are a bunch of volunteers and starting a brand new scheme in our community.
    Your web site provided us with useful info to work on.
    You have performed an impressive job and our entire group can be thankful to you.

    Comment by theory test uk — October 19, 2016 @ 3:20 pm

  23. This post will asaist the internet visitors for setting up new webpage
    or even a blog from start too end.

    Comment by green jobs — January 1, 2017 @ 2:12 am


RSS feed for comments on this post. TrackBack URI

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

Blog at WordPress.com.

%d bloggers like this: