.NET Core第21天_FormTagHelper的使用_防止跨站请求设置方式

FormTagHelper : 为.net对html原生的封装，预设若没指定method则是采用get提交。

新建好FormController.cs

using Microsoft.AspNetCore.Mvc;
using Net5App6.Models;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;

namespace Net5App6.Controllers
{
    public class FormController : Controller
    {
        [HttpGet]
        public IActionResult Index()
        {
            return View();
        }

        [HttpPost]
        public IActionResult Add(FormViewModel model)
        {
            if (ModelState.IsValid)
            {
                string name = model.Name;
                int age = model.Age;
                string remark = model.Remark;
            }
            return View(model);
        }
    }
}

FormViewModel.cs

using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;

namespace Net5App6.Models
{
    public class FormViewModel
    {
        public int Id { get; set; }
        public string Name { get; set; }
        public int Age { get; set; }
        public string Remark { get; set; }
    }
}

Index.cshtml

@model FormViewModel
<form method="post" asp-controller="Form" asp-action="Add">
    <div>
        <label asp-for="Name"></label>
        <input type="text" asp-for="Name" />
    </div>
    <div>
        <label asp-for="Age"></label>
        <input type="text" asp-for="Age" />
    </div>
    <div>
        <label asp-for="Remark"></label>
        <textarea asp-for="Remark"></textarea>
    </div>
    <div>
        <input type="submit" value="提交" />
    </div>
</form>

防止跨站请求
预设情况FormTagHelper会在View上产生隐藏的请求用Token
但需要和HTTP Post的Action method上标注[ValidateAntiForgeryToken]才会生效，可以防止跨站请求伪造。

using Microsoft.AspNetCore.Mvc;
using Net5App6.Models;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;

namespace Net5App6.Controllers
{
    public class FormController : Controller
    {
        [HttpGet]
        public IActionResult Index()
        {
            return View();
        }

        [HttpPost]
        [ValidateAntiForgeryToken]
        public IActionResult Add(FormViewModel model)
        {
            if (ModelState.IsValid)
            {
                string name = model.Name;
                int age = model.Age;
                string remark = model.Remark;
            }
            return View(model);
        }
    }
}

自订路由命名 asp-route
通常若不想多写太多asp-controller 、asp-action等等属性，想要简写时候可以用这类功能，
但要注意路由名称name不能够有重覆，专案中要唯一。

这里扩充一个action method 名称Edit

using Microsoft.AspNetCore.Mvc;
using Net5App6.Models;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading.Tasks;

namespace Net5App6.Controllers
{
    public class FormController : Controller
    {
        [HttpGet]
        public IActionResult Index()
        {
            return View();
        }

        [HttpPost]
        [Route("/Form/EditData",Name ="R_E")]
        public IActionResult Edit(FormViewModel model)
        {
            return View(model);
        }

        [HttpPost]
        [ValidateAntiForgeryToken]
        public IActionResult Add(FormViewModel model)
        {
            if (ModelState.IsValid)
            {
                string name = model.Name;
                int age = model.Age;
                string remark = model.Remark;
            }
            return View(model);
        }
    }
}

Index.cshtml

@model FormViewModel
@*<form method="post" asp-controller="Form" asp-action="Add">*@
<form method="post" asp-route="R_E" >
    <div>
        <label asp-for="Name"></label>
        <input type="text" asp-for="Name" />
    </div>
    <div>
        <label asp-for="Age"></label>
        <input type="text" asp-for="Age" />
    </div>
    <div>
        <label asp-for="Remark"></label>
        <textarea asp-for="Remark"></textarea>
    </div>
    <div>
        <input type="submit" value="提交" />
    </div>
</form>