I'm currently using the VB.net Edition of this book, and I have gotten the FileManager module working. :D

My problem is with the editor. I can click on the edit file icon, and all the files seem to open fine in the editor, but while in the editor, if I try and hit the Save or Back to File Manager buttons, I get this error... :(


Error
---------------------------------------------------------------------
An unexpected error has occurred on this page.The system administrators have been notified.

The error occurred in:
//localhost/Wrox/ThePhile/WebModules/FileManager/EditFile.aspx?File=/Wrox/ThePhile/Default.aspx

Error Message:
A potentially dangerous Request.Form value was detected from the client (FileContent="...scx" %>

Error Stack:System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (FileContent="...scx" %>
---------------------------------------------------------------------


Any ideas

I had the same problem once and added this <pages validateRequest> to the web.config file:

<pages validateRequest="false" />
</system.web>

After this change, all pages appear to work on 1.1

I had the exact same error when I first ran it after downloading framework 1.1 (after building with 1.0 libraries).

Anyone know if that fix leaves a security problem, or does the fix just address a backwards compatibility issue with the framework?

Any comments would be appreciated.

Thanks.

Well, it leaves a potential security hole ;)
That is, people can submit stuff to your server that they shouldn't. You could set the validateRequest to false, and then make sure you perform the validation yourself, replacing or rejecting unacceptable values.
Check out this page at www.asp.net for more info: http://www.asp.net/faq/RequestValidation.aspx

HtH,

Imar
---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.

Thanks Imar. That link helped me answer a related question. I already had the code to encode the HTML, but was still getting a compilation error because I didn't place the validateRequst correctly. ;0

Shea Ellison
Strategic Internet Consulting
Creating Measurable Value Through Your Internet Presence
Office Direct Line: 770-454-1190
Voicemail/Fax: 888-227-4979
www.strategic-internet.com

I found my answer in a link at the bottom of the next posting related to this search term "validateRequest". btw, I'm using the "Dynamic Websites w/ASP.NET Web Matrix book.

I also realized I had that giant sig file! Sorry people. I trimmed it down as you can see. ;)

Shea
www.strategic-internet.com