PRB: "View State Is Invalid" Error Message When You Use Server.Transfer
This article was previously published under Q316920
Retired KB Content Disclaimer
This article was written about products for which Microsoft no longer offers support. Therefore, this article is offered "as is" and will no longer be updated.
When you use HttpServerUtility.Transfer("page name", true), you receive the following error message:
The View State is invalid for this page and might be corrupted
This problem occurs because the EnableViewStateMac attribute of the <pages> element is set to true by default. When this attribute is set to true, ASP.NET runs a message authentication check (MAC) on the view state of the page when the page is posted back from the client. This check determines if the view state of the page was modified on the client. For security purposes, it is recommended that you keep this attribute set to true.
When you call the Server.Transfer method and set the second parameter to true, you preserve the QueryString and the Form collections. One of the form fields is the hidden __VIEWSTATE form field, which holds the view state for the page. The view state message authentication check fails because the message authentication check only checks each page. Therefore, the view state from the page that calls Server.Transfer is not valid on the destination page.
View state is page scoped and is valid for that page only. View state should not be transferred across pages.
To resolve this problem, use one of the following methods.
Resolution 1Transfer values between pages to pass your server control values to the other pages. For more information, refer to the following MSDN documentation:
Passing Server Control Values Between PagesThis requires that you create public properties for each property of a control that you want to access from the destination page.
If you have many controls, and if you want to access the properties of these controls from another page, you can also declare those controls as public variables. For example:
Public Class Page1 Public WithEvents TextBox1 As System.Web.UI.WebControls.TextBox 'Insert your code here.End Class
Dim sourcePage As Page1 sourcePage = CType(Context.Handler, WebForm1) Response.Write(sourcePage.TextBox1.Text)
Resolution 2Do not pass the second parameter (which is false by default) when you call Server.Transfer. For example:
This code does not send the QueryString and the Form fields to the page that is called. When no data is transferred, ASP.NET does not run the message authentication check.
Steps to Reproduce the Behavior
- Create an .aspx page named WebForm1.aspx that transfers execution to another page. Add the following code to WebForm1.aspx:
<%@ Page language="vb" AutoEventWireup="true" %><html> <body> <form id="WebForm1" method="post" runat="server"> <asp:TextBox id="txtName" runat="server">Your Name</asp:TextBox><br> <asp:Button id="Button1" runat="server" Text="Submit" OnClick="Button1_Click"></asp:Button> </form> </body></html><script runat=server>Sub Button1_Click(sender As Object, e As System.EventArgs) Server.Transfer("WebForm2.aspx",true)End Sub</script>
- Create another .aspx page named WebForm2.aspx, and then add the following code:
<%@ Page language="vb" AutoEventWireup="true" %><html> <body> <form id="WebForm2" method="post" runat="server"> <asp:Label id="lblName" runat="server" >Web Form 2</asp:Label> </form> </body></html><script runat=server>Sub Page_Load(sender As Object, e As EventArgs)Dim thisPage As System.Web.UI.PageDim nameTextBox As TextBox thisPage = CType(Context.Handler, System.Web.UI.Page) nameTextBox = CType(thisPage.FindControl("txtName"), System.Web.UI.Control) lblName.Text = "Your name is '" & nameTextBox.Text & "'." End Sub</script>
- Open WebForm1.aspx in your browser, and then click Submit.
Article ID: 316920 - Last Review: 04/19/2007 01:51:46 - Revision: 3.2
Microsoft ASP.NET 1.0
- kbprb kbstate kbwebforms KB316920