Disable Request Validation

stormage · September 11th, 2010, 08:48 PM

Hey all!
In page 315 (Chapter 9-Validating User Input) there is the following code:

Code:

if (Page.IsValid)
{
// OK to proceed
}

I don't understand when should this code be in the application?

One other thing if that's OK: I try to add the

Code:

ValidateRequest="False"

to the @Page directive, but still get the error page in the browser, when i enter HTML tag into a textbox, are there any other settings i should check?
By looking some in Google, i read that some other files should also be changed, such as web.config, any way, I'm not sure about it, so I'm asking here...

10x in advance people!

Imar · September 12th, 2010, 03:29 AM

Hi there,

You should use that as a wrapper around code that does something with the data such as saving it in the database, sending an e-mail and so on. When IsValid is true, it's safe to continue. When it isn't you could have no else block (e.g. just don't execute the action) and let ASP.NET rerender the page with validation controls. Alternatively, you could execute some other action in the else block, like a redirect, or show an additional message or whatever makes sense to do.

And yes, for .NET 4 you also need to set the requestValidationMode in web.config like this:

Code:

 
<system.web>
  <httpRuntime requestValidationMode="2.0"/>
  ...
</system.web>

Hope this helps,

Imar