How to Prevent Parameter Tampering

Question

lesponce 176

How can I prevent parameter tampering in my code below?

    var MyTest = await _context.MyTable.Where(x => x.ID == EmployeeID).ToListAsync();

Accepted answer

1 additional answer

Answer 1

Karen Payne MVP 35,586 Volunteer Moderator

You can create a class like the following

public class Integer  
{  
    public int Id { get; init; }  
    public Integer(int id)  
    {  
        Id = id;  
    }  
}

Pass it to a method which can use it but not alter Id property

Karen Payne MVP 35,586 Volunteer Moderator

Yes, and you can name the class and or property as you see fit e.g.

public class Integer
{
    public int EmployeeID { get; init; }
    public Integer(int employeeId)
    {
        EmployeeID = employeeId;
    }
}

Or

public class EmployeeData
{
    public int Id { get; init; }
    public EmployeeData(int employeeId)
    {
        Id = employeeId;
    }
}

lesponce 176 Reputation points

2022-01-11T01:28:51.413+00:00

Thanks for your help!

Answer 2

Tom Phillips 17,771

This is a .Net question.

.Net support is on stackoverflow. I suggest you post your question here: