This can be put into a utility class in your ASP.NET project and put onto the page with ScriptManager.RegisterStartupScript(). The script alters the ASP.NET __VIEWSTATE value which somehow validates requests; if you leave it out the popup wont work.