Asp.net security issues

An ASP.. NET is used to set the enabled attribute of a button on the page to false Based on the permissions of the login user, to restrict some operations of the current user, the result is futile. Let's take a closer look at it.

When the enabled attribute of a button is set to false, access this page and return to the ClientCodeAs follows:

<Input type = "Submit" name = "btndelete" value = "delete" id = "btndelete"Disabled = "disabled"Style = "width: 60px;"/>

If you save this page andDisabled = "disabled"Delete this attribute and modify the form action.

You can use this button to open this page with IE.

You should pay attention to it in future development,