Search 
You are here: Forums   
Latest PostsMinimize
RE: RSET?
by SteveT
on 08 Feb 2012 08:07 PM
Webmail problem with attachments.
by jshaffer@fslgroup.com
on 08 Feb 2012 02:26 PM
RSET?
by electricpet
on 08 Feb 2012 12:28 PM
RE: Hack attempts seem to be taking down POP3
by SteveT
on 05 Feb 2012 11:46 AM
RE: Hack attempts seem to be taking down POP3
by ub
on 04 Feb 2012 04:52 PM
RE: relaying denied errors
by SteveT
on 02 Feb 2012 10:29 AM
RE: relaying denied errors
by electricpet
on 02 Feb 2012 09:12 AM
RE: relaying denied errors
by SteveT
on 02 Feb 2012 12:57 AM
relaying denied errors
by electricpet
on 30 Jan 2012 10:47 AM
RE: Hack attempts seem to be taking down POP3
by ub
on 25 Jan 2012 07:56 PM
RE: Hack attempts seem to be taking down POP3
by TheOtherBob
on 25 Jan 2012 03:01 PM
RE: Hack attempts seem to be taking down POP3
by ub
on 24 Jan 2012 08:26 PM
RE: I have to migrate mailserver pro > mailserver.net
by vincewarde
on 18 Jan 2012 11:08 AM
I have to migrate mailserver pro > mailserver.net
by vincewarde
on 17 Jan 2012 08:20 PM
RE: How can I set up a DNS server - MySQL
by StephenRussell
on 13 Jan 2012 09:15 AM
RE: How can I set up a DNS server - MySQL
by SteveT
on 12 Jan 2012 01:58 PM
How can I set up a DNS server - MySQL
by StephenRussell
on 12 Jan 2012 05:18 AM
RE: IMAP / iPhone
by Eskissimo
on 06 Jan 2012 07:47 AM

ArGoStuff User to User Support Forums
Contacts page problem
Last Post 29 Apr 2011 03:00 PM by Commerce. 1 Replies.
Printer Friendly
Sort:
PrevPrev NextNext
You are not authorized to post a reply.
AuthorMessages
godhnUser is Offline
New Member
New Member
Send Private Message
Posts:11

--
18 Feb 2008 03:09 PM  

Hi again

Having a slight problem with the Contacts page.

It works if you click the button on the Inbox page, but when you click the Contacts button on the Write Mail page, because of the "From" field being filled out automatically, the following asp.net error occurs...

Server Error in '/' Application.

A potentially dangerous Request.Form value was detected from the client (fromTextBox="

Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. You can disable request validation by setting validateRequest=false in the Page directive or in theconfiguration section. However, it is strongly recommended that your application explicitly check all inputs in this case.

Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (fromTextBox="
Source Error:

<pre>[No relevant source lines]</pre>

Source File: c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\f50fb574\b02e3478\App_Web_nm2zzpoq.10.cs    Line: 0

Stack Trace:

<pre>[HttpRequestValidationException (0x80004005): A potentially dangerous Request.Form value was detected from the client (fromTextBox="<dan@beggarsbelief.o...").]
System.Web.HttpRequest.ValidateString(String s, String valueName, String collectionName) +3307682
System.Web.HttpRequest.ValidateNameValueCollection(NameValueCollection nvc, String collectionName) +108
System.Web.HttpRequest.get_Form() +119
System.Web.HttpRequest.get_HasForm() +3309630
System.Web.UI.Page.GetCollectionBasedOnMethod(Boolean dontReturnNull) +45
System.Web.UI.Page.DeterminePostBackMode() +65
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +7350
System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +213
System.Web.UI.Page.ProcessRequest() +86
System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) +18
System.Web.UI.Page.ProcessRequest(HttpContext context) +49
ASP.auth_contacts_aspx.ProcessRequest(HttpContext context) in c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\root\f50fb574\b02e3478\App_Web_nm2zzpoq.10.cs:0
System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +358
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean&amp;amp; completedSynchronously) +64
&lt;/pre>


Version Information: Microsoft .NET Framework Version:2.0.50727.1433; ASP.NET Version:2.0.50727.1433

Any help on this would be greatly appreciated.

Cheers

 

Dan

CommerceUser is Offline
New Member
New Member
Send Private Message
Posts:1

--
29 Apr 2011 03:00 PM  
As it looks like you have .NET Framework 2.0 working on your server, I'm not sure of the problem you may be experiencing.

I am guessing the cause stems from validaterequest processing going on which will choke when it sees the < and > in the email address. The code I have includes the ValidateRequest="false" for the compose page, if yours does not, perhaps that is the problem.

That said, I did run into an interesting problem with .NET Framework 4.0. It turns out the very same message you experienced will also appear when you use the ArGoSoft Web Interface in .NET 4.0 - you can solve it (at least I did) by editing the WEB.CONFIG file to include: 

    [system.web]
... the other stuff already here 
          [httpRuntime requestValidationMode="2.0" /]
    [/system.web]
 
(replace the [ and ] characters with the < and > characters)

For reference, I saw information on this from a post here:

http://jefferytay.wordpress.com/201...e-to-fail/

titled: ASP.NET 4 Breaking Changes #1: requestValidationMode cause ValidateRequest=False to fail

which offers details as to why I suggested adding the line above to the WEB.CONFIG file when using .NET 4.0.

Caveat Emptor - If you add the line to your WEB.CONFIG file and then later decide to downgrade your web site back to .NET 2.0, you will then need to remove the line, as it will cause a parser error under .NET 2.0

Good luck,

Commerce
You are not authorized to post a reply.

Active Forums 4.2
DonationsMinimize

Find our site useful? Make a donation to show your support

Donate

logo_ccMC.giflogo_ccVisa.giflogo_ccDiscover.giflogo_ccAmex.gif

ArGoStuff Supporters

 


News from ArGoSoftMinimize
1 2 3 4 5 6


Mail Server v1.0.8.3
  • Added support of STARTTLS (STLS) command for SMTP, POP3, IMAP, and SMTP relay and delivery, which will allow secure, fully encrypted connections, when possible;
11/6/2011 1:10:34 PM
Mail Server v1.0.8.2
  • Optimized delivery speed. In earlier versions each "tick" which was checking whether messages were in the outbox queue, was picking up only one message at a time. Now it will attempt to pick MaximumAllowedThreads-ActiveDelivery threads messages, which should considerably increase deliver speed;
  • Optimized SEARCH and STATUS IMAP commands. They appear to be used very extensively by Android, and (not that extensively, but still) by iPhone. Now users who use mobile phones to access their IMAP accounts will see considerable improvement;
  • Optimized STORE IMAP command. Before storing of IMAP flags was occuring one message at a time, which seemed to be fine with SQL server, but proved to be slow for SQLite... Now it happens with single SQL call.
10/8/2011 7:59:35 PM
ArGoSoft Mail Server v1.0.8.1
  • Fixed a bug: when using IMAP via Firefox with "When I delete a message, move it to Trash folder" option, marking messages in the trash folder was causing high CPU usage, and was taking some time, making the server pretty much non-responsive. The problem was happening only when using SQLite.
6/6/2011 9:33:36 PM
ArGoSoft Mail Server v1.0.8.0
  • Fixed a problem with web interface - was showing only first page of messages, and would not switch to other pages; In order to fix the web interface, mail server itself has to be updated;
  • When installint initially, was still using SQLite, even when SQL was requested;
  • There was a problem with switching from SQLite database engine to SQL server database engine: the SQL database was not being created;
5/23/2011 5:53:55 PM
ArGoSoft Mail Server .NET v1.0.7.9
  • The server no longer requires Microsoft SQL Server. If SQL server is not found, it will use SQLite engine, which does not require separate installation. If SQL server is found, then user will be prompted whether he wants to use it;
  • Made other improvements, such as, now mailbox rebuild indexes orphaned records, rather then deleting them, also added an opotion to increment UIDL validity of folder (both on the Mailbox viewer box);
  • Made minor improvements on web interface;
4/26/2011 9:47:25 PM


1 2 3 4 5 6

Protect Your Computer today withGet AVG Today


Home:ArGoStuff:Forums:Articles:Cyber Security Tips:FAQ:Downloads:Links
Copyright 2006-2011 by ArGoStuff Terms Of UsePrivacy Statement