CHAPTER 12
SportsStore: Security & Finishing Touches
In the previous chapter, I added support for administering the SportsStore application, and it will not have escaped your attention that anyone could modify the product catalog if I deployed the application as it is. All they would need to know is that the administration features are available using the Admin/Index URL. In this chapter, I am going to show you how to prevent random people from using the administration functions by password-protecting access to the entire Admin controller. Once I have the security in place, I will complete the SportsStore app by adding support for product images. ...
Get Pro ASP.NET MVC 5, Fifth Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
