Export (0) Print
Expand All
This topic has not yet been rated - Rate this topic

Controller.UpdateModel<TModel> Method (TModel, String[])

Updates the specified model instance using values from the controller object's current value provider.

Namespace:  System.Web.Mvc
Assembly:  System.Web.Mvc (in System.Web.Mvc.dll)
protected internal void UpdateModel<TModel>(
	TModel model,
	string[] includeProperties
)
where TModel : class

Type Parameters

TModel

The type of the model object.

Parameters

model
Type: TModel
The model instance to update.
includeProperties
Type: System.String[]
A list of properties of the model to update.

You do not have to explicitly specify the generic parameter TModel. Instead, you can let the C# or Visual Basic type inference engine determine the generic parameter TModel by omitting the generic parameter. The UpdateModel() method is like the TryUpdateModel() method except that the UpdateModel() method throws an InvalidOperationException exception when the updated model state is not valid.

Security noteSecurity Note

You should use one of the UpdateModel() methods that take either a list of included properties (a white list) or a list of excluded properties (a black list). If no explicit white list or black list is passed, the UpdateModel() method tries to update every public property of your model for which there is a corresponding value in the request. A malicious user could exploit this in order to update properties that you do not intend to provide access to.

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

Show:
© 2014 Microsoft. All rights reserved.