Tampering of ViewState

Question

Hi friends, I want to know that how can you detect if a ViewState has been tampered? How it will handle please explain?

Gohil Jayendrasinh · Answer

hi 1. Use Encryption of ViewState content 2. Use the EnableViewStateMac property To encrypt the contents of the ViewState, use the following in the machine.config file. EnableViewState will only Encode the value, that will not solve our problem where as EnableViewStateMac will do actual encryprtion. in web.config if it's helpful to you then please check Accepted Asnwers Thanks

Jignesh Trivedi · Answer

hi, The viewstate is signed with a machine key (default servers MAC). If your Application running on farm make sure to set the same machine key on all machines. You can add encrypted checksum in the ViewState, and check whether it is still correct after the postback. please refer http://msdn.microsoft.com/en-us/library/ms178199%28v=vs.85%29.aspx hope this help.

Senthilkumar · Answer

Hi, You can restrict the hackers to tampared the view state. You can set this EnableViewStateMac="true" attribute in the page directive or web.config file.

Tampering of ViewState

Answers (3)