Click here to Skip to main content
14,303,603 members
   

ASP.NET

 
AnswerRe: Error bind data to html datatable with WebMethod and JavaScript (No data available in table) Pin
ZurdoDev27-Aug-19 1:06
professionalZurdoDev27-Aug-19 1:06 
SuggestionRe: Error bind data to html datatable with WebMethod and JavaScript (No data available in table) Pin
Richard Deeming27-Aug-19 3:00
mveRichard Deeming27-Aug-19 3:00 
QuestionHow to print from android web browser to Bluetooth thermal printer? Pin
enifsolutions21-Aug-19 18:44
memberenifsolutions21-Aug-19 18:44 
QuestionRe: How to print from android web browser to Bluetooth thermal printer? Pin
Richard MacCutchan21-Aug-19 22:20
protectorRichard MacCutchan21-Aug-19 22:20 
QuestionRazor Pages Navigation Pin
Mycroft Holmes19-Aug-19 15:26
memberMycroft Holmes19-Aug-19 15:26 
AnswerRe: Razor Pages Navigation Pin
F-ES Sitecore19-Aug-19 23:11
mveF-ES Sitecore19-Aug-19 23:11 
GeneralRe: Razor Pages Navigation Pin
Mycroft Holmes20-Aug-19 14:59
memberMycroft Holmes20-Aug-19 14:59 
AnswerRe: Razor Pages Navigation Pin
Richard Deeming20-Aug-19 1:59
mveRichard Deeming20-Aug-19 1:59 
To be exploited, an IDOR issue must be combined with an Access Control issue because it's the Access Control issue that "allow" the attacker to access to the object for which he have guessed the identifier through is enumeration attack.
So long as you have proper access controls in place, and return the same error for accounts that the current user doesn't have permission to access as for accounts which don't exist, there shouldn't be any problems.

Depending on what you're doing, you might be able to drop the querystring and deduce the record to display based on the currently logged-in user. Or you could replace the IDs with a Guid, which would be much harder to enumerate.



"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

GeneralRe: Razor Pages Navigation Pin
Mycroft Holmes20-Aug-19 15:01
memberMycroft Holmes20-Aug-19 15:01 
GeneralMessage Closed Pin
29-Aug-19 12:52
membervalycarrolito29-Aug-19 12:52 
QuestionHaving Issues to logging users to active directory through web form Pin
samflex15-Aug-19 4:40
membersamflex15-Aug-19 4:40 
AnswerRe: Having Issues to logging users to active directory through web form Pin
ZurdoDev15-Aug-19 7:46
professionalZurdoDev15-Aug-19 7:46 
GeneralRe: Having Issues to logging users to active directory through web form Pin
samflex16-Aug-19 3:50
membersamflex16-Aug-19 3:50 
GeneralRe: Having Issues to logging users to active directory through web form Pin
ZurdoDev16-Aug-19 3:53
professionalZurdoDev16-Aug-19 3:53 
AnswerRe: Having Issues to logging users to active directory through web form Pin
Nathan Minier16-Aug-19 8:29
professionalNathan Minier16-Aug-19 8:29 
QuestionHow to Import and Export Excel File in ASP.NET MVC? Pin
Member 1455824213-Aug-19 8:41
memberMember 1455824213-Aug-19 8:41 
AnswerRe: How to Import and Export Excel File in ASP.NET MVC? Pin
ZurdoDev13-Aug-19 10:00
professionalZurdoDev13-Aug-19 10:00 
AnswerRe: How to Import and Export Excel File in ASP.NET MVC? Pin
Vincent Maverick Durano13-Aug-19 11:17
mveVincent Maverick Durano13-Aug-19 11:17 
GeneralRe: How to Import and Export Excel File in ASP.NET MVC? Pin
Member 1455824214-Aug-19 8:49
memberMember 1455824214-Aug-19 8:49 
QuestionSending Email using ASP.NET(MVC) SMTP Pin
Anandkumar Prajapati11-Aug-19 18:54
professionalAnandkumar Prajapati11-Aug-19 18:54 
AnswerRe: Sending Email using ASP.NET(MVC) SMTP Pin
Richard MacCutchan11-Aug-19 21:25
protectorRichard MacCutchan11-Aug-19 21:25 
GeneralRe: Sending Email using ASP.NET(MVC) SMTP Pin
Anandkumar Prajapati20-Aug-19 21:13
professionalAnandkumar Prajapati20-Aug-19 21:13 
GeneralRe: Sending Email using ASP.NET(MVC) SMTP Pin
valycarrolito29-Aug-19 12:53
membervalycarrolito29-Aug-19 12:53 
QuestionWhy can't I Publish web site error warn ? Pin
Member 24584676-Aug-19 22:33
memberMember 24584676-Aug-19 22:33 
AnswerRe: Why can't I Publish web site error warn ? Pin
jkirkerx8-Aug-19 14:15
professionaljkirkerx8-Aug-19 14:15 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.