asp.net core docker Part 19 Unintended updates in mvc

Text version of the video
http://csharp-video-tutorials.blogspo...

Slides
http://csharp-video-tutorials.blogspo...

All ADO .NET Text Articles
http://csharp-video-tutorials.blogspo...

All ADO .NET Slides
http://csharp-video-tutorials.blogspo...

All Dot Net and SQL Server Tutorials in English
https://www.youtube.com/user/kudvenka...

All Dot Net and SQL Server Tutorials in Arabic
https://www.youtube.com/c/KudvenkatAr...

In this video we will dsicuss, how, unintended updates can happen in mvc. Please watch Part 18, before proceeding. Let's understand this with an example.

At the moment, "Employee Edit" view can be used to change all of the following fields.
1. Name
2. Gender
3. City
4. DateOfBirth

Let's make "Name" non-editable. To achieve this
CHANGE THE FOLLOWING CODE IN EDIT.CSHTML
@Html.EditorFor(model =] model.Name)

TO
@Html.DisplayFor(model =] model.Name)
@Html.HiddenFor(model =] model.Name)

Run the application and edit an employee. Notice that, Name of the employee is no longer rendered using a textbox. At this point we may think, that it is impossible for the user to change the name of the employee using "Edit" view. That is not true. Because of the way we have written our code, tools like Fiddler can be used to very easily change any properties of the "Employee" object.

Fiddler can be downloaded from the following URL
http://fiddler2.com/get-fiddler

After you have downloaded and installed fiddler, run fiddler, and navigate to the following URL
http://localhost/MVCDemo/Employee/Edit/1

In fiddler, in web sessions window, select the url. Under the "Inspectors" tab you can see Request headers and response. We will discuss more about fiddler in a later video session.

Now click on "Save" button on "Edit" view. Notice that, under "Web Sessions" in fiddler another request is captured for the same URL - http://localhost/MVCDemo/Employee/Edit/1

Now, without using the browser, let' us see how to generate a post request using fiddler.
1. Click on "Composer" tab in fiddler
2. Drag and drop the following URL from "Web Sessions" window onto Composer window.
http://localhost/MVCDemo/Employee/Edit/1
3. In "Reques Body" under "Composer" tab, change "Name" of the employee to "XYZ"
4. Finally click "Execute" button on "Fiddler"

Now either query the database table, or navigate to "Index" view and notice that the employee name is changed to "XYZ".

In our next video, we will discuss preventing these type of un-intended updates.

asp.net core docker Part 19 Unintended updates in mvc
329 Likes	329 Dislikes
147,708 views views	524K followers
Education	Upload TimePublished on 20 May 2013

Related keywords

wcf vs web api,ado.net core,sql server management studio,webkinz,webadvisor,craigslist nj,wcf one piece,asp.net core 3,ajax players,weber grill parts,webtoon,tutorials by hugo,csharp corner,mvc design pattern,asp.net machine account,servers for minecraft,asp.net core dependency injection,ado.net tutorial,model t,model s,services angular,ajax ontario,controller spring,asp.net mvc tutorial,asp.net cos'è,csharp assembly,tutorialspoint python,sql join,services briefcase,asp.net core web api,data entry,ajax jquery,wccftech,craigslist ny,data warehouse,asp.net zero,csharp foreach,server memes,sql date format,services online,chase,controller pioneer,controller php,model cars,serverless architecture,server resume,data science,wcf c#,server books,tutorialspoint javascript,mvcc connect,ado.net mysql,services technologies gps,data scientist,controller pak n64,ajax deadpool,server jobs,modeling agencies,model x,cvs,website,model y,mvc tutorial,costco hours,controlleradvice,controller angularjs,wcf service application,controller ableton,tutorialspoint spring,serverless,contrôleur dj,wcf soap,wcf cat,cool math games,wcf test client,model o mouse,services & training hse colombia sas,servicestack,citibank,asp.net core identity,sql union,ajax parking,sql database,asp.net core logging,mvconnect,cunyfirst,asp.net guida,wcf nba,csharp download,wcfi foundation,csharp online,wcf authentication,tutorials near me,model s tesla,http://asp.net,server 2019,chernobyl,ado.net descargar,web of dreams,serverminer,ajax cleaner,model t ford,ado.net visual studio 2019,webassign,ado.net vs entity framework,data star trek,data lake,ado.net visual studio 2017,csharp list,sql like,asp.net mvc,asp.net core tutorial,sqlite,wcfm,ajax roster,mvc architecture,http://ado.net,modelo negra,asp.net core mvc,ajax soccer,server hosting,data scientist salary,controller ps4,wcfi,ajax dish soap,controller ps4 pc,capital one,server rack,tutorialspoint html,data mining,csharp interface,craigslist,webroot,tutorialspoint reactjs,ajax request,wcf dragon ball,asp.net core 2.2,tutorialspoint python 3,sql developer,webster,services transmission company sas,sql group by,asp.net core signalr,services manager,mvc framework,ajax paving,mvc near me,data analysis,tutorialspoint spring boot,mvc map,csharp online compiler,asp.net download,sql between,modeling clay,data analyst salary,ado.net c# pdf,services tag dell,wcf 2019 nba,csharp switch,ado.net ventajas y desventajas,csharpstar,wcf tutorial,modeling,tutorialspoint,controller for all,controller pro switch,ajax meaning,csharp-video-tutorials.blogspot,tutorials dojo,central park 5,csharp string format,ado.net c#,asp.net core github,controller chaos,server status,ajax fc,server jobs nyc,asp.net core swagger,sql formatter,credit karma,services group,server error in '/' application,data entry jobs,services windows,asp.net core 3.0,http://controller.access.network,sql injection,tutorialspoint c#,wcf ria services,calculator,ado.net entity data model,sql insert,data analytics,tutorialspoint tableau,services google play apk,model engine kits,sqlyog,asp.net core 3 release date,sql server,server job description,tutorials by a,servicenow,webcam,mvc hours,webmd symptom,controllership,csharp array,csharp enum,ajax call,asp.net core 2. guida completa per lo sviluppatore,asp.net core,server pro,controller firmware revision 2.10.00 embedded media manager failed media attach,server status ffxiv,model x tesla,cheap flights,webcrims,asp.net core hosting,services sas,model a ford,tutorialspoint java,modells,tutorialspoint java compiler,datadog,webmd,csharp to json,college football,ado.net dataset,csharp dictionary,cnn,website builder,tutorialspoint sql,asp.net web api,server side rendering,weber grills,sql server 2017,tutorialspoint spark,mvc nj,data breach,ado.net oracle,asp.net core download,csharp to vb.net,webster bank,webstaurant,datacamp,tutorialsystems,ajax post,services fms publish announcement,services.msc no abre,modelo abv,ajax jersey,csharp operator,asp.net core razor pages,server duties,asp.net core environment variables,csharp random,century 21,controller midi,services consultores,services consulting,mvcsd,services.msc,mvcsc,ado.net pdf,asp.net core configuration,ajax marvel,sql update,asp.net tutorial,mvc medical,ado.net entity data model visual studio 2019,wcfs international curriculum,mvc2,controller switch,ado.net entity data model visual studio 2017,chase online,wcf api,costco,server jobs near me,webex,sql meaning,sql tutorial,sql commands,controller area network,data universe,ado.net entity framework,ajax tavern,controller symfony,tutorialsteacher,ajax javascript,database,services desk,data visualization,model 3,ajax greek,csharp tutorial,mvc pattern,ado.net sql server,ado.net connection,asp.net identity,mvcu,databricks,modelo beer,asp.net core middleware,data analyst,modelo especial,wcf web service,mvc webadvisor,web store,mvcc,webmail,mvci,mvctc,