Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeGetting StartedGetting StartedInstalling DNN ...Installing DNN ...Request Validation ErrorRequest Validation Error
Previous
 
Next
New Post
5/14/2011 12:48 AM
 
Hi,

I'm relatively new to dnn and have a start up problem and I'll try and make a long story short. Started with with MS web platform installer and installed Web Matrix and dnn ce 5.6.1. No problem - created a fairly simple 4 page web site. Then tried to publish to 3Essentials and had problems. The pointed out the issue was with web matrix, it had created a compact flat file database instead of an SQL 2008 R2 express database. I didn't have the tools to create a .bak, but the site was simple enough to recreate on their web site. They backed everything up for me and I downloaded it to my local environment. In the meantime, I downloaded SQL 2008 R2 express and visual stuio express. Took me a couple of tries, but I got the database restored and the site running on my local server. So everything was great. Now I want to create a new site from scratch.

I created a new directory, NewSiteDir,  for the site and copied the dnn ce 5.6.1 install files to the directory. I then created a new database, NewDB using SQL Management Studio. I set the owner as ServerID\Me (my administrative user). I then brought up Visual Web Studio and opened the website using the NewWebDir. I got a message that the site was using an old 2.0 version of APS.NET and do I want to make it version 4.0. If I say no, when I try and view in browser the dnn install screens seem to lose all formatting and I get a lot of different errors and cannot make a successful install. I then deleted the site and reinstalled and said yes to 4.0. I then clicked view in brower and the dnn install screen came up in the proper format with all three options available (Auto, Typical and Custom). I selected typical and then passed the security checks. At the database screen, I selected SQL 2005/2008 Database (the right radio button), specified the server as .\SQLExpress and NewDB as the database name. I checked integrated security and run as dbowner. It took a bit, but it ran to completion and said everything was successful. I created the admin and host users and clicked Start to build Web Page and the home page came up. I was able to login, However if I try to add an extension or create a new page I get a Request Validation Error. The message says:

Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. To allow pages to override application request validation settings, set the requestValidationMode attribute in the httpRuntime configuration section to requestValidationMode="2.0". Example: . After setting this value, you can then disable request validation by setting validateRequest="false" in the Page directive or in the configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case. For more information, see http://go.microsoft.com/fwlink/?LinkId=153133.

Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.QueryString value was detected from the client (error="...$SkinLst="
Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

[HttpRequestValidationException (0x80004005): A potentially dangerous Request.QueryString 
value was detected from the client (error="...$SkinLst="
            

Per the message, I changed the httpRunTime section of web.config to include requestValidationMode="2.0" and that solved the problem.

My questions: the research I've done says this setting is risky. The web config file for my other web site does not contain it. Why did I get this error and is there something else that should be changed? Should I be concerned about leaving this value at 2.0?

I'm still getting errors when I make  a change to a page (I get message saying there are errors and asking if I want to debug it) which are easy to get around for now, but obviously something is not quite right. Any ideas about what is wrong?

Thanks for taking the time to read through this.

Cheers,
Larry
 
Previous
 
Next
HomeHomeGetting StartedGetting StartedInstalling DNN ...Installing DNN ...Request Validation ErrorRequest Validation Error


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out