ruderalos
  •  ruderalos
  • 53% (Neutral)
  • YAF Forumling Topic Starter
2011-06-20T22:47:15Z
After upgrading from 1.9.1.8 to latest release 1.9.5.5 RTW (which in itself was a challenge), forums are up and running. I am able to post new topics, edit old ones, update profiles, etc. However, trying to Save any of the configuration settings/changes from any of the Host Administration / Host Settings pages results in the following error listed below. Running on .NET 4.0, SQL Server 2005, IIS 6. Any ideas anyone? Thanks in advance for your help!



Server Error in '/' Application.
A potentially dangerous Request.Form value was detected from the client (forum$ctl03$AdPost="<div align="center">..." ).

Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. To allow pages to override application request validation settings, set the requestValidationMode attribute in the httpRuntime configuration section to requestValidationMode="2.0". Example: <httpRuntime requestValidationMode="2.0" />. After setting this value, you can then disable request validation by setting validateRequest="false" in the Page directive or in the <pages> configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case. For more information, see http://go.microsoft.com/fwlink/?LinkId=153133 .

Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (forum$ctl03$AdPost="<div align="center">..." ).

Source Error:

The source code that generated this unhandled exception can only be shown when compiled in debug mode. To enable this, please follow one of the below steps, then request the URL:

1. Add a "Debug=true" directive at the top of the file that generated the error. Example:

<%@ Page Language="C#" Debug="true" %>

or:

2) Add the following section to the configuration file of your application:

<configuration>
<system.web>
<compilation debug="true"/>
</system.web>
</configuration>

Note that this second technique will cause all files within a given application to be compiled in debug mode. The first technique will cause only that particular file to be compiled in debug mode.

Important: Running applications in debug mode does incur a memory/performance overhead. You should make sure that an application has debugging disabled before deploying into production scenario.

Stack Trace:

[HttpRequestValidationException (0x80004005): A potentially dangerous Request.Form value was detected from the client (forum$ctl03$AdPost="<div align="center">..." ).]
System.Web.HttpRequest.ValidateString(String value, String collectionKey, RequestValidationSource requestCollection) +8791012
System.Web.HttpRequest.ValidateNameValueCollection(NameValueCollection nvc, RequestValidationSource requestCollection) +122
System.Web.HttpRequest.get_Form() +150
System.Web.HttpRequest.get_HasForm() +8962943
System.Web.UI.Page.GetCollectionBasedOnMethod(Boolean dontReturnNull) +97
System.Web.UI.Page.DeterminePostBackMode() +69
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +8431
System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +253
System.Web.UI.Page.ProcessRequest() +78
System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) +21
System.Web.UI.Page.ProcessRequest(HttpContext context) +49
ASP.default_aspx.ProcessRequest(HttpContext context) +4
System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +100
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +75
Sponsor
logan
  •  logan
  • 100% (Exalted)
  • YAF Leader
2011-06-21T00:59:43Z
<httpRuntime requestValidationMode="2.0" />
Add to <system.web> section of web.config

http://forum.yetanotherf...-Request-Form-Value.aspx 
test
ruderalos
  •  ruderalos
  • 53% (Neutral)
  • YAF Forumling Topic Starter
2011-06-21T13:41:29Z
Thank you Logan (and Jaben!). That worked! 🙂

<httpRuntime requestValidationMode="2.0" />


[and in case anyone else runs across this issue, please use Logan's exact spelling of the line (and the Microsoft error message), including the closing backslash "/>" at the end of the line. Otherwise, you will receive yet another Server Application error. I only found this out after following Logan's link to the previous thread 11 months ago and used Jaben's answer "<httpRuntime requestValidationMode="2.0">", which did NOT include the closing backslash (sorry Jaben). Apparently, proper syntax matters. Who would of thought? :cheesy: ]
jpweber
2012-03-22T00:07:12Z
I had the exact same error when saving host settings. I downloaded YAF from the MS Web Platform Installer clean; it wasn't an upgrade.

Nevertheless, the solution worked perfectly, and m host settings are now being saved properly without errors.

Thank you for taking the time to help!

Jason Weber
USS Vision Inc.
http://www.ussvision.com 
Jason Weber
USS Vision YAF 
"Money is better than poverty, if only for financial reasons"

About Us

The YAF.NET is an open source .NET forum project. YAF.NET is supported by an team of international developers who are build community by building community software.

Powered by Resharper Donate with PayPal button

Project Twitter Updates

Copyright © YetAnotherForum.NET & Ingo Herbote. All rights reserved