Click here to Skip to main content
15,861,125 members
Articles / Web Development / ASP.NET
Article

Beginner's Guide To View State

Rate me:
Please Sign up or sign in to vote.
4.82/5 (227 votes)
29 Nov 2008CPOL9 min read 685.4K   356   142
This article is a step by step guide to view state with details

Table of Contents

Introduction

First of all I want to thank Sean Ewington for his great initiative to write Beginner's Walk for Web Development article. I have decided to write some articles on state management There are a few article on Code project on State Management, basically on Session, Caching, Cookies, etc. Though all are very good article, still I have planned for write some article on state management. and I believe that should definitely helps to all the Beginners. And I have organized the content in a way that it would be helpful to not only beginners also to advance user also.

In this article, I will cover the fundamentals of State Management and Details of View State.

What is state management?

Web is Stateless. It means a new instance of the web page class is re-created each time the page is posted to the server. As we all know HTTP is a stateless protocol, its can't holds the client information on page. As for example , if we enter a text and client on submit button, text does not appear after post back , only because of page is recreated on its round trip.

User_S9_1.JPG

As given in above pages, page is recreated before its comes to clients and happened for each and every request. So it is a big issue to maintain the state of the page and information for a web application. That is the reason to start concept of State Management. To overcome this problem ASP.NET 2.0 Provides some features like View State, Cookies, Session, Application objects etc. to manage the state of page.

There are some few selection criteria to selected proper way to maintain the state, as there are many way to do that. Those criteria are:

  • How much information do you need to store?
  • Does the client accept persistent or in-memory cookies?
  • Do you want to store the information on the client or on the server?
  • Is the information sensitive?
  • What performance and bandwidth criteria do you have for your application?
  • What are the capabilities of the browsers and devices that you are targeting?
  • Do you need to store information per user?
  • How long do you need to store the information?
  • Do you have a Web farm (multiple servers), a Web garden (multiple processes on one machine), or a single process that serves the application?

So, when ever you start to think about state management, you should think about above criteria. based on that you can choose the best approaches for manages state for your web application.

Different types of state management?

There are two different types of state management:

  1. Client Side State Management
    • View State
    • Hidden Field
    • Cookies
    • Control State
  2. Server Side State Management
    • Session
    • Application Object
    • Caching
    • Database

Client Side state management does not use any server resource , it store information using client side option. Server Side state management use server side resource for store data. Selection of client side and server side state management should be based on your requirements and the selection criteria that are already given.

What is view state?

View State is one of the most important and useful client side state management mechanism. It can store the page value at the time of post back (Sending and Receiving information from Server) of your page. ASP.NET pages provide the ViewState property as a built-in structure for automatically storing values between multiple requests for the same page.

Example:

If you want to add one variable in View State,

 ViewState["Var"]=Count;

For Retrieving information from View State

string Test=ViewState["TestVal"];

Sometimes you may need to typecast ViewState Value to retreive. As I give an Example to strore and retreive object in view state  in the last of  this article.

Advantages of view state?

This are the main advantage of using View State:

  • Easy to implement
  • No server resources are required
  • Enhanced security features ,like it can be encoded and compressed.

Disadvantages of view state?

This are the main disadvantages of using View State:

  • It can be performance overhead if we are going to store larger amount of data , because it is associated with page only.
  • Its stored in a hidden filed in hashed format (which I have discussed later) still it can be easily trapped.
  • It does not have any support on mobile devices.

When we should use view state?

I already describe the criteria of selecting State management. A few point you should remember when you select view state for maintain your page state.

  • Size of data should be small , because data are bind with page controls , so for larger amount of data it can be cause of performance overhead.
  • Try to avoid storing secure data in view state

WhenViewState.PNG

When we should avoid view state?

You won't need view state for a control for following cases,

  • The control never change
  • The control is repopulated on every postback
  • The control is an input control and it changes only of user actions.

Where is view state stored?

View State stored the value of page controls as a string which is hashed and encoded in some hashing and encoding technology. It only contain information about page and its controls. Its does not have any interaction with server. It stays along with the page in the Client Browser. View State use Hidden field to store its information in a encoding format.

Suppose you have written a simple code , to store a value of control:

C#
ViewState["Value"] = MyControl.Text;

Now, Run you application, In Browser, RighClick > View Source , You will get the following section of code

User_S1.jpg

Fig : View state stored in hidden field

Now , look at the value. looks likes a encrypted string, This is Base64 Encoded string, this is not a encoded string. So it can easily be decoded. Base64 makes a string suitable for HTTP transfer plus it makes it a little hard to read . Read More about Base64 Encoding . Any body can decode that string and read the original value. so be careful about that. There is a security lack of view state.

How to store object in view state?

We can store an object easily as we can store string or integer type variable. But what we need ? we need to convert it into stream of byte. because as I already said , view state store information in hidden filed in the page. So we need to use Serialization. If object which we are trying to store in view state ,are not serializable , then we will get a error message .

Just take as example,

C#
//Create a simple class and make it as Serializable
[Serializable]
public class student
{
    public int Roll;
    public string Name;
    public void AddStudent(int intRoll,int strName)
      {
        this.Roll=intRoll;
        this.Name=strName;
           }
}

Now we will try to store object of "Student" Class in a view state.

C#
 //Store Student Class in View State
student _objStudent = new student();
_objStudent.AddStudent(2, "Abhijit");
ViewState["StudentObject"] = _objStudent;

//Retrieve Student information view state
 student _objStudent;
_objStudent = (student)ViewState["StudentObject"]; 

How to trace your view state information?

If you want to trace your view state information, by just enable "Trace" option of Page Directive

User_S2.gif

Now Run your web application, You can view the details of View State Size along with control ID in Control Tree Section. Don't worry about "Render Size Byte" , this only the size of rendered control.

User_S3.jpg

Fig : View State Details

Enabling and Disabling View State

You can enable and disable View state for a single control as well as at page level also. To turnoff view state for a single control , set EnableViewState Property of that control to false. e.g.:

C#
TextBox1.EnableViewState =false;

To turnoff the view state of entire page, we need to set EnableViewState to false of Page Directive as shown bellow.

User_S4.gif

Even you disable view state for the entire page , you will see the hidden view state tag with a small amount of information, ASP.NET always store the controls hierarchy for the page at minimum , even if view state is disabled.

For enabling the same, you have to use the same property just set them as True

as for example, for a single control we can enabled view state in following way,

C#
TextBox1.EnableViewState =true;

and for a page level,

User_S5.gif

How to make view state secure?

As I already discuss View state information is stored in a hidden filed in a form of Base64 Encoding String, and it looks like:

User_S1.jpg

Fig : View state stored in hidden field

Many of ASP.NET Programmers assume that this is an Encrypted format, but I am saying it again, that this is not a encrypted string. It can be break easily. To make your view state secure, There are two option for that,

  • First, you can make sure that the view state information is tamper-proof by using "hash code". You can do this by adding "EnableViewStateMAC=true" with your page directive. MAC Stands for "Message Authentication Code"

User_S6.gif

A hash code , is a cryptographically strong checksum, which is calculated by ASP.NET and its added with the view state content and stored in hidden filed. At the time of next post back, the checksum data again verified , if there are some mismatch, Post back will be rejected. we can set this property to web.config file also.

  • Second option is to set ViewStateEncryptionMode="Always" with your page directives, which will encrypt the view state data. You can add this in following way

User_S7.gif

It ViewStateEncryptionMode has three different options to set:

  • Always
  • Auto
  • Never

Always, mean encrypt the view state always, Never means, Never encrypt the view state data and Auto Says , encrypt if any control request specially for encryption. For auto , control must call Page.RegisterRequiresViewStateEncryption() method for request encryption.

we can set the Setting for "EnableViewStateMAC" and ViewStateEncryptionMode" in web.config also.

User_S8.gif

Note : Try to avoid View State Encryption if not necessary , because it cause the performance issue.

Some Important Points

QuestionsAnswer
Client Side or Server Side ?Client Side
Use Server Resource ?No
Easy to implement ?Yes
Cause Performance Issue ?For heavy data and case of encryption & decryption
Support Encryption Decryption?Yes
Can store objects ?Yes, but you need to serialize the class.
TimeoutNo

That's all for view state. Hope you have enjoyed this article, please don't forget to give me your valuable suggestions. If anything need to update or changed please post your comments and please give me suggestion.

Reference

History

Written on Saturday, 29th November, 2008

Small Correction on Monday December 2008

License

This article, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)


Written By
Technical Lead
India India
.NET Consultant | Former Microsoft MVP - ASP.NET | CodeProject MVP, Mentor, Insiders| Technology Evangelist | Author | Speaker | Geek | Blogger | Husband

Blog : http://abhijitjana.net
Web Site : http://dailydotnettips.com
Twitter : @AbhijitJana
My Kinect Book : Kinect for Windows SDK Programming Guide

Comments and Discussions

 
GeneralMy vote of 5 Pin
SureshTheGreat1125-Jan-18 1:07
SureshTheGreat1125-Jan-18 1:07 
QuestionGood article.Nice Explanation. Keep it up. Pin
Member 116093486-Oct-16 1:42
Member 116093486-Oct-16 1:42 
PraiseExcellent Description Pin
Arun Kalesh30-Mar-16 20:47
Arun Kalesh30-Mar-16 20:47 
GeneralMy vote of 5 Pin
Harishankar.R19-Nov-15 6:50
Harishankar.R19-Nov-15 6:50 
QuestionMy Vote 5 Pin
Dharmesh .S. Patil7-Jul-15 1:11
professionalDharmesh .S. Patil7-Jul-15 1:11 
QuestionExcellent Pin
Member 1134299210-Mar-15 19:33
Member 1134299210-Mar-15 19:33 
QuestionNice Article. Pin
k10ketan14-Jan-15 1:23
k10ketan14-Jan-15 1:23 
QuestionView State Pin
Pankaj Kumar Choudhary25-Oct-14 6:14
Pankaj Kumar Choudhary25-Oct-14 6:14 
AnswerRe: View State Pin
Anil Vittal26-Oct-14 8:22
professionalAnil Vittal26-Oct-14 8:22 
QuestionSimple and Useful Pin
rashidvvmo21-Oct-14 0:32
rashidvvmo21-Oct-14 0:32 
GeneralExcellent Pin
sanjeevka081-Aug-14 0:27
sanjeevka081-Aug-14 0:27 
QuestionA Must have article... Pin
pirateworks17-Mar-14 8:35
pirateworks17-Mar-14 8:35 
QuestionGreat! Pin
chikku_200318-Feb-14 4:35
chikku_200318-Feb-14 4:35 
GeneralMy vote of 5 Pin
Member 1055722412-Feb-14 18:02
Member 1055722412-Feb-14 18:02 
Questionarticle : Pin
Rumpi Guha11-Nov-13 0:53
Rumpi Guha11-Nov-13 0:53 
Questionnice article Pin
Member 1038800910-Nov-13 22:36
Member 1038800910-Nov-13 22:36 
Questionthanks for good article Pin
Atul Kumar Singh221-Oct-13 18:14
Atul Kumar Singh221-Oct-13 18:14 
GeneralMy vote of 5 Pin
Shivarajbk21-Jul-13 23:02
Shivarajbk21-Jul-13 23:02 
QuestionDecode Site Name Pin
pramodkumarw24-Jun-13 11:57
pramodkumarw24-Jun-13 11:57 
GeneralMy vote of 5 Pin
fardin_esmi6-Jun-13 4:49
fardin_esmi6-Jun-13 4:49 
QuestionComment Pin
tarun _sharma14-Apr-13 20:12
tarun _sharma14-Apr-13 20:12 
GeneralMy vote of 5 Pin
Member 83913762-Apr-13 2:47
Member 83913762-Apr-13 2:47 
GeneralMy vote of 5 Pin
abhi3eee1-Apr-13 19:02
abhi3eee1-Apr-13 19:02 
GeneralMy vote of 5 Pin
abhi99314-Mar-13 7:20
abhi99314-Mar-13 7:20 
QuestionGood article Pin
Sampath Sridhar7-Mar-13 16:34
Sampath Sridhar7-Mar-13 16:34 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.