I just like to know that hacker / user can

Question

I just like to know that hacker / user can

bypass anything in server? for example if i have a controller like this:
IActionResult Test()
{
// this will check in database that user is admin or not.
var isAdmin = _user.IsAdmin(userID);

if (!isAdmin)
{
return NotFound();
}

//do something.
}

can user / hacker bypass that? in other word hacker can bypass that or hack will happen if i forgot to check that user is admin or not in some where?

0

17.03.2024

5 ответов

11 просмотров

Mr Thieves Автор вопроса

Sean ren
If hacker really wanna see it,he can try userID ag...

did you mean try to guss which userID is admin? if that you mean so it can't since that userID came from claim and claim is what user used to auth in website.

0

1 месяц назад

Sean ren

If this is a server, hacker can try root(administrator in Windows) password again and again.

0

1 месяц назад

Mr Thieves Автор вопроса

Sean ren
If this is a server, hacker can try root(administr...

hacker first should find server the try to hack it but still that is not my answer i am asking about security in my own project not server, firewal ad anything like that

0

1 месяц назад

Jass

Mr Thieves
hacker first should find server the try to hack it...

y not use action filter, and have claims set with role as admin at the user login itself

0

1 месяц назад

Sean ren · Accepted Answer

Sean ren

If hacker really wanna see it,he can try userID again and again,it will take a lot of time,but hacker can do it

0

1 месяц назад

Похожие чаты

I just like to know that hacker / user can

5 ответов

Похожие вопросы