Any news ??????

DV

The post that one person made about preventing SQL injection was correct - the goal here was to prevent SQL Injection which was why the body of the feedback being submitted is cleansed before an attempt is made to save it to the database. 

Since this module could be used on public websites where users are not required to be logged in before they can submit feedback, it was felt that it would be neccessary to add this feature. I can make this an optional setting in the next release, however till that is released, I can recommend the following.

1) Download the source version of the feedback module and open it in VS 2005.
2) Open feedback.ascx.vb and scroll to line 275
3) Replace it with the following

Dim strBody  as String = txtBody.Text

4) Scroll down to line 299 and replace the following with 

oFeedback.Message = txtBody.Text


5) Recompile your project and deploy the new version of DotNetNuke.Modules.Feedback.dll into the bin folder of your website. 

This should allow you to use the feedback module without the cleansing of the feedback being submitted.


Sanjay