This is a mirror of official site: http://jasper-net.blogspot.com/

How to make ViewState secure in ASP.NET ?

| Thursday, January 27, 2011
The ASP.NET ViewState is a client side state management.  ViewState is stored in hidden field with ID named __VIEWSTATE. Typically, stored ViewState information  looks as below:

image_thumb31.png?w=594&h=85

Now let us look at the value. It looks likes an encrypted string. This is nothing but Base64 Encoded string and it is not an encrypted string.  So it can be easily decoded.

The main reasons for making it Base64 encoding are as follows:

1.  Base64 makes a string suitable for HTTP transfer
2. It makes it a little harder to read .

But people often get confused that this is an encrypted string. Let us try to decode the string using ViewState Decoder (A nice tool created by Fritz Onion).

image_thumb32.png?w=667&h=347

Read more: Abhijit's World of .NET

Posted via email from Jasper-net

0 comments: