在C＃代码中隐藏属性

Question

I have a Business class say User.cs:

  [Serializable]
    public class User
    {

        public int UserID { get; set; }
        public string UserName { get; set; }
        public int Password { get; set; }

    }

In my server side code I am writing the following code to serialize the user object in JSON format:

User user=SomeUserBLClass.GetUser(1);
Response.Write(new JavaScriptSerializer().Serialize(user));

My requirement is to hide the password being sent to client side ie I don't want the password field to come in json data. Can you help me fixing this?

Answer 1

You could add the [ScriptIgnore] attribute to Password .

[Serializable]
public class User
{

    public int UserID { get; set; }
    public string UserName { get; set; }

    [ScriptIgnore]
    public int Password {get; set;}
}

Answer 2

如何使用匿名类型和省略密码？

Response.Write(new JavaScriptSerializer().Serialize(new {UserId = user.UserId, UserName = user.UserName});

Answer 3

Exclude the Password field entirely from the user object, and only allow internal usage of the backend version within SomeUserBLClass via methods such as ValidateUser or ChangePassword.

You don't really want any version of the password exposed to the front layer in any form - there is always the chance that the display layer throws a wobbly and dumps data to the client in some form.

Remove it from the equation, and only allow transitional access to it, and it ceases being an issue.