http://stephenwalther.com/archive/2009/01/21/asp-net-mvc-tip-46-ndash-donrsquot-use-delete-links-because.aspx
It's worth knowing, and this issue highlighted is in a similar vein to SQL injection in URL's.
The intended operation for the link I was creating was to update a database record, so the consequences of using a link are similar to that of a delete operation via a link. In the end, I opted to trigger a form submission via javascript:
@using (Html.BeginForm()) { <p> <a href="javascript:document.forms[0].submit()">Yes</a> | @Html.ActionLink("No", "Details", new { id = Model.Id }) </p> }
No comments:
Post a Comment