How to globally cancel post-back events for specific business logic?

[hantousha]

I would like to be able to display a page, but with all controls disabled. The idea is for a user to view a standard page, but not actually interact with the page. Disabling all UI-controls server side is simple enough, but my main concern is an "inventive" user attempting to manually post the form back with fake information. My question is two fold:[*]Will built in event validation catch the devious activities?[*]If event validation doesn't catch it, is there a way to globally throw away the postback event (e.g. the button click, not the full life cycle)