error deleting forum thread

This is the place to report bugs and get support. When posting in this forum, please always provide as much detail as possible.

Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum, do not report it as a bug.

This is the place to report bugs and get support

When posting in this forum, please try to provide as many relevant details as possible. Particularly the following:

  • What operating system were you running when the bug appeared?
  • What database platform is your site using?
  • What version of mojoPortal are you running?
  • What version of .NET do you use?
  • What steps are necessary to reproduce the issue? Compare expected results vs actual results.
Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum.
This thread is closed to new posts. You must sign in to post in the forums.
3/28/2020 4:42:02 PM
Ian Rogerson
Gravatar
Total Posts 60
View Posts

error deleting forum thread

Hi, I'm on version  2.7.0.0 MSSQL

If I try to edit a forum thread I get an error "A potentially dangerous Request.Path value was detected from the client" - it's impossible to delete the thread without hacking the database.

The edit URL looks like this, so I can imagine the browser might see it as a threat - 

http://(mydomain)/Forums/Controls/%3C%25=%20$%22%7BSiteRoot%7D/Forums/EditThread.aspx?thread={DataBinder.Eval(Container.DataItem,%22ThreadID%22)}&mid={ModuleId}&pageid={PageId.ToString()}%22%20%%3E

Here's the log entry:

2020-03-28 21:16:29,717 ERROR 212.159.117.250 - (null) - (null) - mojoPortal.Web.Global - 212.159.117.250 /Forums/Controls/<%= $"{SiteRoot}/Forums/EditThread.aspx?thread={DataBinder.Eval(Container.DataItem,%22ThreadID%22)}&mid={ModuleId}&pageid={PageId.ToString()}%22%20%%3E Referrer(http://www.maswell.org.uk/Forums/ForumView.aspx?pageid=236&f=46~1) useragent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36 
System.Web.HttpException (0x80004005): A potentially dangerous Request.Path value was detected from the client (<).
   at System.Web.HttpRequest.ValidateInputIfRequiredByConfig()
   at System.Web.HttpApplication.PipelineStepManager.ValidateHelper(HttpContext context)

 

I originally got the error with Chrome but also get it with Edge

Have you come across this - is there a workaround?

Thanks

Ian

You must sign in to post in the forums. This thread is closed to new posts.