CheckFormId

<< Click to Display Table of Contents >>

Navigation:  Classes > TIWSecurityOptions > Properties >

CheckFormId

When True, IntraWeb will add an additional hidden field (FormId) which is a random 128-bit value. Each form instance has its unique Id (i.e. two instances of the same form class have different id’s). IntraWeb will check this value before rendering (GET) or executing any action/updating any content during a POST request. This prevents several different potential attacks like Cross Site Request Forgery, or CSRF.

 

SIGNATURE=IWServerControllerBase.TIWSecurityOptions.CheckFormId

 

ETYPE=Property

 

Declaration:

Delphi:

published property CheckFormId: Boolean;

C++:

__published: __property bool CheckFormId;

 

Description: This is CheckFormId, a member of class TIWSecurityOptions.