Hello all!
I can use some wisdom on how to deal with this. My website's sign up page is getting pinged by someone or some bot every so often, throwing viewstate errors. This is really stupid because my sign up page doesn't use the view state field, and, when I check
the viewstate "data" being sent to my website, it is always different and contains complete garbage.
Server-side, my viewstate is hardened up (encrypted, user key being used, and on that page, stored in server cache, not the viewstate hidden field). Currently, I'm also throwing a generic oopsie page that says something went wrong, ."..contact customer support."
Is this the best way to respond?
This sort of thing is not new, I know, but, what I'm wondering is how should I respond to the bot and/or hacker-type? Is a generic error page the way to go? Or, do I not throw an error page and pretend all is OK, not let on that I know?
Or, should I do s ...
Go to the complete details ...