Trouble shooting some errors

[jmestep]

I'm troubleshooting a site that has been getting weird errors, especially for one product.
Validation of viewstate MAC failed --- I put a machineKey into the web.config file.
System.Security.Cryptography.CryptographicException: Padding is invalid and cannot be removed. -- this one might have been a hacker- ip address was SE Asia.
The site also has their Able store embedded into a I frame on a site of theirs. Would this cause any problems, losing session data, Ajax not working?

Thanks

[AbleMods]

The site also has their Able store embedded into a I frame on a site of theirs. Would this cause any problems, losing session data, Ajax not working?

The entire AC7 store is embedded into an iframe tag??

Viewstate MAC errors can be about a million different things. The few I've run into were eliminated by disabling viewstate on the offending page. Not sure if I opened a door that I shouldn't have, but it did eliminate the problem.

I'm impressed the AJAX still works within the iframe

[jmestep]

Well, I'm not sure how well the Ajax works in the IFrame. I was just checking to see if that would be one of their problems. This is one of those things where you can spend hours troubleshooting, so I fixed a few things and am waiting to see if it breaks again.

[dadkind]

How/where do I disable the view state on a page? In the "@Page" directive?

-tomas

The site also has their Able store embedded into a I frame on a site of theirs. Would this cause any problems, losing session data, Ajax not working?

The entire AC7 store is embedded into an iframe tag??

Viewstate MAC errors can be about a million different things. The few I've run into were eliminated by disabling viewstate on the offending page. Not sure if I opened a door that I shouldn't have, but it did eliminate the problem.

I'm impressed the AJAX still works within the iframe

[AbleMods]

Yup, that's how I did it. I'm certainly no expert on viewstate though - do so at your own risk

[jmestep]

The problem this site was having ended up being a problem with Safari browser and Able has fixed that in build 11659.