Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
Export (0) Print
Expand All

Controller.TryUpdateModel(Of TModel) Method (TModel, IValueProvider)

Updates the specified model instance using values from the value provider.

Namespace:  System.Web.Mvc
Assembly:  System.Web.Mvc (in System.Web.Mvc.dll)

'Declaration
Protected Friend Function TryUpdateModel(Of TModel As Class) ( _
	model As TModel, _
	valueProvider As IValueProvider _
) As Boolean
'Usage
Dim model As TModel
Dim valueProvider As IValueProvider 
Dim returnValue As Boolean 

returnValue = Me.TryUpdateModel(model, _
	valueProvider)

Type Parameters

TModel

The type of the model object.

Parameters

model
Type: TModel

The model instance to update.

valueProvider
Type: System.Web.Mvc.IValueProvider

A dictionary of values that is used to update the model.

Return Value

Type: System.Boolean
true if the update is successful; otherwise, false.

The [Overload:System.Web.Mvc.Controller.TryUpdateModel``1] method is like the [Overload:System.Web.Mvc.Controller.UpdateModel``1] method except that the [Overload:System.Web.Mvc.Controller.TryUpdateModel``1] method does not throw an InvalidOperationException exception if the updated model state is not valid.

For more information model validation, see the entry Input Validation vs. Model Validation in ASP.NET MVC on Brad Wilson's blog.

Security noteSecurity Note

Use one of the [Overload:System.Web.Mvc.Controller.TryUpdateModel``1] methods that takes either a list of properties to include (a whitelist) or a list of properties to exclude (a blacklist). If no explicit whitelist or blacklist is passed, the [Overload:System.Web.Mvc.Controller.TryUpdateModel``1] method tries to update every public property in the model for which there is a corresponding value in the request. A malicious user could exploit this in order to update properties that you do not intend to provide access to.

Show:
© 2015 Microsoft