INTRODUCTION Web is inherently stateless since the HTTP protocol is stateless. The Web server treats every HTTP page request as an independent request. By default, everything on a page is lost when you go to another page. Developers' skills are used to maintain the state of all or a portion of a Web page. In the past, cookies or the query string were often used to achieve this goal. A development platform like ASP.NET provides other ways to maintain state. One such method is storing information such as passwords in view state. This methods solves the problem of preserving the state but it’s a double edged sword, storing information like passwords in view state is not secure. In this article we would discuss how view state stores passwords, how its unsafe and how we can solve this problem. First we would try to understand what view state is and when/how it stores information. ViewState does not hold the controls, rather it holds the values of the form controls and their correspondin...
News & Reviews