Add this to the list of things every SharePoint developer should know (up there with disposing SPWebs and SPSites).

In general…

  1. Don’t update SharePoint objects on a GET request
  2. Call SPUtility.ValidateFormDigest() before anything on a POST request

Here are the two links to read:

Leave a Reply

In order to provide better answers to questions, please read the following before posting a comment:

  1. General question about SharePoint? Please ask a question at SharePoint StackExchange
  2. Comment or feedback specific to this post only? Please post a comment below