How can an Asp.Net web application be prevented from accepting Post to Get method conversion. More precisely, how can 'GET' requests be rejected where a 'POST' data is expected. I will greatly appreciate clarification on how this VULNERABI开发者_如何学GoLITY occurs and how it can be prevented. Thanks.
Generally speaking you can check for a POST by doing Page.IsPostBack in web forms: http://msdn.microsoft.com/en-us/library/system.web.ui.page.ispostback.aspx
If you're talking MVC, you generally just set the [HttpPost] attribute: http://msdn.microsoft.com/en-us/library/system.web.mvc.httppostattribute.aspx
精彩评论