Export (0) Print
Expand All
0 out of 4 rated this helpful - Rate this topic

Controller.TryUpdateModel(TModel) Method (TModel)

Updates the specified model instance using values from the controller's current value provider.

Namespace:  System.Web.Mvc
Assembly:  System.Web.Mvc (in System.Web.Mvc.dll)
member TryUpdateModel : 
        model:'TModel -> bool   when 'TModel : not struct

Type Parameters

TModel

The type of the model object.

Parameters

model
Type: TModel

The model instance to update.

Return Value

Type: System.Boolean
true if the update is successful; otherwise, false.
ExceptionCondition
ArgumentNullException

The model parameter or the ValueProvider property is a null reference (Nothing in Visual Basic).

You do not have to explicitly specify the generic parameter TModel. Instead, you can let the C# or Visual Basic type inference engine determine the generic parameter TModel by omitting it.

The TryUpdateModel method is like the UpdateModel method except that the TryUpdateModel method does not throw an InvalidOperationException exception if the updated model state is not valid.

Security noteSecurity Note

Use one of the TryUpdateModel methods that takes either a list of properties to include (a whitelist) or a list of properties to exclude (a blacklist). If no explicit whitelist or blacklist is passed, the TryUpdateModel method tries to update every public property in the model for which there is a corresponding value in the request. A malicious user could exploit this in order to update properties that you do not intend to provide access to.

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft. All rights reserved.