ASP.NET MVC data validation not working

Question

Here is the model class which has properties set as required

using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.ComponentModel.DataAnnotations;
using System.Linq;
using System.Text;
using System.Web;

namespace ArcheWeb_nuovo.Models
{
    public class Utente : InformazioniGenerali
    {

        public int ID_utente { get; set; }
        [Required]
        public string Nome { get; set; }
        [Required]
        public string Cognome { get; set; }
        [Required]
        public string Username { get; set; }
        [Required]
        public string Email { get; set; }
        [Required]
        public string CID { get; set; }
        [Required]
        public bool IsLocked { get; set; }
        [Required]
        public string Password
        {
            get
            {
                string caratteri = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
                int lunghezza = 20;

                Random rnd = new Random();
                StringBuilder pw = new StringBuilder(lunghezza);
                for (int i = 0; i < lunghezza; i++)
                {
                    pw.Append(caratteri[rnd.Next(caratteri.Length)]);
                }
                string password = pw.ToString();
                return password;

            }
        }
        public string Visualizzazione
        {
            get
            {
                return Cognome.ToUpper() + " " + Nome;
            }
        }




    }
}

as you can see i marked the properties as Required and yet when i press the submit button in my view it throws an exception because, obviously, the data is empty(the data is empty because i'm testing the data validation) . Instead i want it to prevent the user to proceed. What am i doing wrong? Here is the HttpPost from the controller

[HttpPost]
        public ActionResult Create(Utente utente)
        {


            //impostazione parametri della connessione SQL
            using (SqlConnection sqlCon = new SqlConnection(ConnessioneDB.STRINGA_CONNESSIONE))
            {

                try
                {

                    //Aperura connessione
                    sqlCon.Open();
                    //assegnazione della query d'inserimento dati in una variabile
                    string query = "INSERT INTO users(nome, cognome, username, email, CID, azienda, visualizzazione, password) VALUES(@nome, @cognome, @username, @email, @CID, @azienda, @visualizzazione, @password)";
                    //impostazione del comando sqlCmd
                    SqlCommand sqlCmd = new SqlCommand(query, sqlCon);
                    //si utilizza una query parametrizzata per evitare attacchi di SQL Injection
                    sqlCmd.Parameters.AddWithValue("@nome", utente.Nome);
                    sqlCmd.Parameters.AddWithValue("@cognome", utente.Cognome);
                    sqlCmd.Parameters.AddWithValue("@username", utente.Email);
                    sqlCmd.Parameters.AddWithValue("@email", utente.Email);
                    sqlCmd.Parameters.AddWithValue("@CID", utente.CID);
                    sqlCmd.Parameters.AddWithValue("@azienda", utente.Azienda);
                    sqlCmd.Parameters.AddWithValue("@visualizzazione", utente.Visualizzazione);
                    sqlCmd.Parameters.AddWithValue("@password", utente.Password);
                    //si fa partire la query
                    sqlCmd.ExecuteNonQuery();
                }
                catch(Exception e)
                {
                    ViewBag.errore = e.Message;
                    return View("Errore");
                }
            }
            return RedirectToAction("Successo");

        }

Please share the code for your controller (or at least the HttpPost action). Also, what exception is being thrown? — SpruceMoose
– SpruceMoose, Commented Jan 25, 2018 at 21:29
Have you even implemented client side validation? And you always include if (!ModelState.IsValid) { return View(utente) } in the controller method to check if the model is invalid, and return it so that the user can correct errors. — user3559349
– user3559349, Commented Jan 25, 2018 at 21:41

npearson · Accepted Answer · 2018-01-25 21:46:35Z

1

Before doing anything with your model, you have to proactively check if it passed validation. And like @StephenMuecke and @CalC said, you need to return it to the client if it does not.

[HttpPost]
public ActionResult Create(Utente utente)
{
    if (!ModelState.IsValid) {
        return View(utente);
    }
    // save your model      
}

edited Jan 25, 2018 at 21:46

answered Jan 25, 2018 at 21:41

npearson

7024 silver badges17 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

SpruceMoose Over a year ago

Also note that if the ModelState is not valid, you need to return View(model) to display the validation errors

Edi Lipovac Over a year ago

that did the trick, thanks! also thanks to @mason for the article :)

Kevin. J Russell · Accepted Answer · 2018-01-25 21:39:00Z

0

Exceptions are not how the Required attribute is supposed to work, so you most likely have another, potentially unrelated error in your program. Check the error message to see which function is throwing the error.

You may also want to add specific error messages to your Required attributes. You can read more about them in the answer to this question.

answered Jan 25, 2018 at 21:39

Kevin. J Russell

11 silver badge2 bronze badges

1 Comment

Edi Lipovac Over a year ago

the exceptions are thrown becuase i'm purposefully leaving the the data empty in order to test the data validation! There is no error in my code

user9229907 · Accepted Answer · 2018-01-25 22:16:07Z

0

The password property has the [required] attribute, but it has no setter. You should either add a setter or remove the required attribute.

[Required()]
public string Password {get; set;}

answered Jan 25, 2018 at 22:16

user9229907

462 bronze badges

1 Comment

Enrico Over a year ago

What is the property is readonly or has no setters. Any way to get the required property to work?

Collectives™ on Stack Overflow

ASP.NET MVC data validation not working

3 Answers 3

2 Comments

1 Comment

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

2 Comments

1 Comment

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related