Is Request.IsLocal secure or can it be spoofed?

Question

I have a webpage which checks for an encrypted cookie on page load to determine user identity. However, when I\'m testing the page locally on my development box, I don\'t h

Answer 1

You should not put this code on a production server, for the reasons mentioned in the other answers.

However, you could do

#if DEBUG
    if (Request.IsLocal)
    {
        FormsAuthentication.SetAuthCookie("testUser", false);
    }
    else
    {
#endif
        FormsAuthentication.SetAuthCookie(/*EncryptedCookieValue*/, false);
#if DEBUG
    }
#endif

On your development box, run a Debug build. In production, deploy a Release build.