Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 310
  • Last Modified:

Defining ViewState

This is not an exam or homework

The ASP.NET ViewState is a representation of the state of a page when it was last processed on the server. The
ViewState information is stored by default...


1  ...on the server in a Session variable that is unique for each page.
2  ...in a hidden form element as plain text.
3  ...in a hidden form element as a Base64 encoded string.
4  ...in a hidden form element that is encrypted so it cannot be tampered with.
0
cybernation989
Asked:
cybernation989
  • 2
  • 2
1 Solution
 
bungHocCommented:
In your previous question, you've already found a tutorial for RegEx. Why don't you try to red few lines of this page and figure out the answer for yourself:
http://www.w3schools.com/aspnet/aspnet_viewstate.asp
0
 
cybernation989Author Commented:
Oh sorry I should posted that here... thanks for beating me to it... According to the site the answer could be 3 or 4 but if you really wanted to test 3 out you can to decode it at http://www.motobit.com/util/base64-decoder-encoder.asp 

Since 3 doesnt work the the answer is number 4...

Thanks again BungHoc
0
 
bungHocCommented:
Well.. let's do a bit of reasoning here:
1. The view state of a page is, placed in a hidden form field named __VIEWSTATE
Answer 1 is out.

2. If you've taken a look at the page you'll see something like this: <input type="hidden" name="__VIEWSTATE"
value="dDwtNTI0ODU5MDE1Ozs+ZBCF2ryjMpeVgUrY2eTj79HNl4Q=" />
Answer 2 is out.

3. What is the purpose of ViewState? Does ViewState have any sensitive information? -- Don't think so.. However you can still encrypt it if you really want to (I don't remember with what need to look for it).
Answer 4 is out.

That leaves you with answer 3 is the correct one.
0
 
cybernation989Author Commented:
<--- Bows his head in shame

Like you have posted in the other topic
http://msdn2.microsoft.com/en-us/library/ms972976.aspx

"
Ideally the view state should not need to be encrypted, as it should never contain sensitive information. If needed, however, the LosFormatter does provide limited encryption support.
"

Thank you for correcting me I found http://www.pluralsight.com/blogs/fritz/archive/2004/06/03/408.aspx that goes more into the 64bit encoding
0
 
Infinite_RecursionCommented:
Is it me or is this starting to sound weird...!!!
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now