Pro ASP.NET 3.5 Server Controls and AJAX Components

Prev | Current Page 161 | Next

Rob Cameron and Dale Michalk

"Pro ASP.NET 3.5 Server Controls and AJAX Components"

The type="hidden"> tag can carry the additional state information as part of the
Naturally, the hidden form fields can be accessed in server-side code in the same way as
the text form fields were previously, by using either the Request.Form or Request.Params collection.
Hidden form variables do have some potential drawbacks:
??? As with URL query string variables, programmers must manually track changes to hidden
variables and emit values each time a page is rendered in order to maintain the user??™s
state within the application.
??? Although hidden fields are not immediately visible to the user, selecting View ??¤ Source
in the browser enables the user to see what information is available in hidden fields. In
most cases, this may not be an issue, but it is important to be cognizant of this and either
refrain from storing sensitive data or manually add an additional processing layer of
encryption to prevent exposure.

Pages:
149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173

E-Books for you

Rob Cameron and Dale Michalk

"Pro ASP.NET 3.5 Server Controls and AJAX Components"