• Toll-free  888-665-8637
  • International  +1 717-220-0012
Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error

Cush
#1 Posted : Wednesday, November 9, 2011 3:15:09 PM(UTC)
Cush

Rank: Member

Joined: 2/11/2010(UTC)
Posts: 27

I have been having problems in my bvcommerce content manager. <br style="font-family: Times New Roman;">Whenever I make a change in the content manager and click "save changes", I receive a: Server Error in '/' Application.<br style="font-family: Times New Roman;">I have 2 sites using bvcommerce and the other site is working fine (no issues). The sites have he same setup. <br style="font-family: Times New Roman;"><span style="font-family: Times New Roman;">
Can I copy certain files (aspx files and etc.) from the working site to the damaged site to attempt to fix this? <br style="font-family: Times New Roman;"><span style="font-family: Times New Roman;">
Thank you <br style="font-family: Times New Roman;"><br style="font-family: Times New Roman;">(read error below) What file is the 2nd sentence referring to??

Server Error in '/' Application.
A potentially dangerous Request.Form value was detected from the client (ctl00$MainContent$LongDescriptionField$ctl00$EditorField="...nosine..
&lt;p&gt;&lt;a href="/Supplem...").
Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. To allow pages to override application request validation settings, set the requestValidationMode attribute in the httpRuntime configuration section to requestValidationMode="2.0". Example: &lt;httpRuntime requestValidationMode="2.0" /&gt;. After setting this value, you can then disable request validation by setting validateRequest="false" in the Page directive or in the &lt;pages&gt; configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case. For more information, see http://go.microsoft.com/fwlink/?LinkId=153133.

Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (ctl00$MainContent$LongDescriptionField$ctl00$EditorField="...nosine..
&lt;p&gt;&lt;a href="/Supplem...").

Source Error:

The source code that generated this unhandled exception can only be shown when compiled in debug mode. To enable this, please follow one of the below steps, then request the URL:

1. Add a "Debug=true" directive at the top of the file that generated the error. Example:

&lt;%@ Page Language="C#" Debug="true" %&gt;

or:

2) Add the following section to the configuration file of your application:

&lt;configuration&gt;
&lt;system.web&gt;
&lt;compilation debug="true"/&gt;
&lt;/system.web&gt;
&lt;/configuration&gt;

Note that this second technique will cause all files within a given application to be compiled in debug mode. The first technique will cause only that particular file to be compiled in debug mode.

Important: Running applications in debug mode does incur a memory/performance overhead. You should make sure that an application has debugging disabled before deploying into production scenario.

Stack Trace:

[HttpRequestValidationException (0x80004005): A potentially dangerous Request.Form value was detected from the client (ctl00$MainContent$LongDescriptionField$ctl00$EditorField="...nosine..
&lt;p&gt;&lt;a href="/Supplem...").]
System.Web.HttpRequest.ValidateString(String value, String collectionKey, RequestValidationSource requestCollection) +8855748
System.Web.HttpRequest.ValidateNameValueCollection(NameValueCollection nvc, RequestValidationSource requestCollection) +122
System.Web.HttpRequest.get_Form() +150
System.Web.HttpRequest.get_HasForm() +9028559
System.Web.UI.Page.GetCollectionBasedOnMethod(Boolean dontReturnNull) +97
System.Web.UI.Page.DeterminePostBackMode() +69
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +8431
System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +253
System.Web.UI.Page.ProcessRequest() +78
System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) +21
System.Web.UI.Page.ProcessRequest(HttpContext context) +49
ASP.bvadmin_catalog_products_edit_aspx.ProcessRequest(HttpContext context) +4
System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +100
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean&amp; completedSynchronously) +75


Version Information: Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.0.30319.237
Aaron
#2 Posted : Wednesday, November 9, 2011 4:23:35 PM(UTC)
Aaron

Rank: Administration

Joined: 4/2/2004(UTC)
Posts: 2,393
United States
Location: Hummelstown, PA

Thanks: 6 times
Was thanked: 163 time(s) in 158 post(s)
It looks like you're trying to use HTML in a form field. The built-in security will not permit this unless you disable request validation. To do this add the following attribute to the Page directive (the first line in the ASPX page): ValidateRequest="false"
Aaron Sherrick
BV Commerce
Toll-free 888-665-8637 - Int'l +1 717-220-0012
Cush
#3 Posted : Wednesday, November 9, 2011 7:21:17 PM(UTC)
Cush

Rank: Member

Joined: 2/11/2010(UTC)
Posts: 27

I have had html in my "long description" field for years and have not had this problem.
Are you referring to the "long description" field as a form field?
Aaron
#4 Posted : Wednesday, November 9, 2011 8:14:21 PM(UTC)
Aaron

Rank: Administration

Joined: 4/2/2004(UTC)
Posts: 2,393
United States
Location: Hummelstown, PA

Thanks: 6 times
Was thanked: 163 time(s) in 158 post(s)
From the error it appears that the Long Description is the field in question. Try removing the content from that field and see if you can save it. Also, have you changed servers?
Aaron Sherrick
BV Commerce
Toll-free 888-665-8637 - Int'l +1 717-220-0012
Cush
#5 Posted : Wednesday, November 9, 2011 9:34:22 PM(UTC)
Cush

Rank: Member

Joined: 2/11/2010(UTC)
Posts: 27

I questioned the hosting company about this and they said nothing had been changed. I did have some problems back in August when I had some mods done to the site. The hosting company had to move the site to a different server. It was due to a asp.net 3.5 framework error.
Cush
#6 Posted : Thursday, November 10, 2011 8:49:19 PM(UTC)
Cush

Rank: Member

Joined: 2/11/2010(UTC)
Posts: 27

Just to clarify: I have had html code in the long description for years. The code is still in the long description and works when you view products on the site. Example: http://www.theradianthea...c-Beta-Glucan__2827.aspx

If I go into the content manager and go to this product and save it (without making any changes), I receive the similar Server Error in '/' Application error above. This just recently started soon after I had an issue loading www.theradianthealthapothecary.org/default.aspx.

What aspx file(s) should I look at to see if something was changed here?

I do not believe that this issue is due to html being in a form field because it has been this way for years. I still think it might be a server issue but do not know what to point out to tech.
Marcus
#7 Posted : Friday, November 11, 2011 9:23:22 AM(UTC)
Marcus

Rank: Member

Joined: 11/5/2003(UTC)
Posts: 1,786

The error message is directly related to HTML data or Javascript data being posted in a form. Is it possible that your hosting company changed security policies, upgraded the software or made some other change? Maybe even a Microsoft hot fix applied to the server could cause this?
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

©2024 Develisys. All rights reserved.
  • Toll-free  888-665-8637
  • International  +1 717-220-0012