ASP.NET MVC 2 Validate SelectList

Question

Let's say I have the following selectlist (Countries) in a ViewModel:

//..
private static string[] _countries = new[] {
"USA",
"Canada",
"Japan"
};
//...
SelectList Countries = new SelectList(_countries, dinner.Country);
//...

And I render a dropdown list in the following fashion:

<%: Html.DropDownListFor(m => m.Dinner.Country, Model.Countries) %>

I noticed that using firebug, I can inject my own values into the DropDownList and that value may be inserted into the database.

What is the best way to validate that there are no injected values (preferably a DRY method)?

MJ Richardson · Accepted Answer · 2010-08-14 06:30:50Z

1

I would recommend taking advantage of DataAnnotations and create your own custom validation attribute.

This provides a way to encapsulate your validation logic (satisfying your DRY requirement), and will be applied server-side (preventing html manipulations like the one you described).

answered Aug 14, 2010 at 6:30

MJ Richardson

1,44112 silver badges31 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

knpwrs Over a year ago

Thanks, this is the kind of answer I was looking for. MVC 2 specific (annotations) rather than general (boolean methods).

Kelsey · Accepted Answer · 2010-08-14 01:31:44Z

1

You should always validate your data server side anyways before inserting in the DB. If you had a key constraint it wouldn't be such an issue because the update or insert would fail. In this case though you should have a server side business rule to validate your object before doing the SQL call.

Since your building a list from a static list of items, the list should be available to your business layer so that you can compare against it to make sure that the value contained in your model is valid. You can add a method to your object such as IsValid or something that would do a quick validation and check that the values do exist for these hard coded selections.

answered Aug 14, 2010 at 1:31

Kelsey

47.8k16 gold badges128 silver badges162 bronze badges

Collectives™ on Stack Overflow

ASP.NET MVC 2 Validate SelectList

2 Answers 2

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related