Disable action method from being called from the address bar

amp picture amp · May 22, 2013 · Viewed 10.4k times · Source

I have a method in my controller that I don't want to be called from the address bar in the browser...

Is there a way to do that? Maybe some kind of annotation, modification in the route configuration? Which are my options?

Answer

U.P picture U.P · May 22, 2013

If you are going to use this action only from within your controller or Views then you can use ChildActionOnly attribute.

If you want to access it using POST then you can use [HttpPost] attribute.

But if you wish to use it using GET (i.e. using AJAX call etc) and don't want users to access it using address bar then you can follow this tutorial to make your actions AJAX only.

Or, if you simply want a method that is not an Action at all (i.e. cannot be called using HTTP) then you can either make it private or use [NonAction] attribute