Tito Brasolin
wading in the water
Posts:21
 |
| 08-18-2009 02:29 AM |
|
I'm testing a new form created with Dynamic Forms 2.7 and it looks like unsafe characters aren't correctly handled...
Just before losing too much time, are there any limitations in the HTTP Post completion event? Or am I doing something wrong?
I'm using a TextBox which may contain "+", "&", "'" and so on (it's a kind of confirmation code which may contain *any* character...) |
|
|
|
|
David To
river guide
Posts:2719
|
| 08-18-2009 06:43 AM |
|
HI Tito, if you want to error trap for invalid / unsafe characters entered into a textbox field, you would need to set up regexx validation for that question. Also, what is set in your HTTP Post? If a user enters something like "&" in a textbox entry and you have that token as part of the HTTP post, wouldn't it assume that that's another token parameter when passed through HTTP post? I don't believe it's wise to have a "+" or a "&" as part of a response in a textbox field that will be passed to HTTP post. -- David |
|
|
|
|
Tito Brasolin
wading in the water
Posts:21
|
| 08-18-2009 10:15 PM |
|
Hi David, unfortunately validating the input is not an option... Consider a very common situation: LastName: D'Amato Company: AB&C Languages: C#,C++ Url: http://example.com/?q=something#here Dynamic Forms could provide me with a quick and clean solution to a little server-to-server communication problem I'm having, but I'm not sure all parameters are encoded before being concatenated (HttpUtility.UrlEncode like this http://aspnetresources.com/blog/enc...orms.aspx) In fact I'm pretty sure they're not, in my opinion a little patch is needed... |
|
|
|
|
Chad Nash
Posts:5260
|
| 08-23-2009 09:32 AM |
|
Tito,
Hi. Thanks, we are planning an upcoming patch within Dynamic Forms (should be 03.00.30) which will address this issue.
-Chad
|
|
|
|
|
Candace
river guide
Posts:2431
|
| 08-27-2009 08:34 AM |
|
Hi Tito,
We have the Dynamic Forms 3.00.30 for you to try. Please use the Contact Us form and request the patch and I'll send it to you by email. Thanks!
Candace |
|
|
|
|
Tito Brasolin
wading in the water
Posts:21
|
| 09-14-2010 02:22 AM |
|
I'm reopening a very old thread because URL encoding is an issue again... We are still using Dynamic Forms 03.00.10 (DNN 04.09.05) and possibly planning an upgrade to Dynamic Forms 3.4
Last year we solved our server-to-server communication problem without Dynamic Forms (unfortunately the patch did not work exactly as expected)
Am I missing something here or Dynamic Forms 3.4 (trial) is still flawed? It looks like it doesn't url-encode the values before replacing the placeholders in the form post event... |
|
|
|
|
Chad Nash
Posts:5260
|
| 10-15-2010 09:48 AM |
|
Hi Tito - The trial version still has this issue but the full patch doesn't. If you have a license to 3.4 I can send it over otherwise we will post a new trial in the next couple of weeks.
We do plan to go back to past versions and retrofit this issue as far back as the 3.1 release at this time but it will take a few weeks.
-Chad
|
|
|
|
|
Tito Brasolin
wading in the water
Posts:21
|
| 11-22-2010 12:34 AM |
|
Hi Chad, we bought and installed the latest DynamicForms and DynamicRegistration a few weeks ago and, as far as I can see, they are both very good. I've been busy on different tasks so maybe I'm missing something, but we can't see any recent patches for DynamicForms in our Snowcovered account, so I presume the patch we need hasn't been published yet? If so, have you planned a release for the near future? |
|
|
|
|
Chad Nash
Posts:5260
|
| 11-22-2010 10:44 AM |
|
Hi Tito - We were holding off on the patch because of some image field issues and then just recently some issues that came about with 5.6. I have committed to have this patch posted by this Friday though. I do have the .20 patch available for issues with this specific problem if you need a copy before then.
Thanks,
Chad
|
|
|
|
|
Tito Brasolin
wading in the water
Posts:21
|
| 12-12-2010 11:29 PM |
|
Chad, I just installed the patch you posted on November, 24 and everything went *almost* fine: "Could not load file or assembly 'Telerik.Web.UI, Version=2010.2.713.35, Culture=neutral, PublicKeyToken=121fae78165ba3d4' or one of its dependencies. The located assembly's manifest definition does not match the assembly reference. (Exception from HRESULT: 0x80131040)"
Overwriting Telerik.Web.UI.dll 2009.3.1103.20 (we're still using DNN 04.09.05) with the version coming with DNN 05.05.01 apparently solved the problem. However, it looks like the patch has everything we need, thank you. |
|
|
|
|
Tito Brasolin
wading in the water
Posts:21
|
| 12-13-2010 12:32 AM |
|
Chad, unfortunately we are experiencing an unwanted side effect... Telerik.Web.UI.dll 2009.3.1103.35 came from a third party newsletter module which stopped working after we upgraded to Telerik.Web.UI.dll 2010.2.713.35
Of course it shouldn't (we're contacting the developers) but in the meanwhile don't you think that the reference to Telerik.Web.UI.dll could simply be removed? Dynamic Forms should work flawlessly with DNN 4.9.5 and (as far as I know) the 4.5.9 distribution does not contain the Telerik.Web.UI.dll |
|
|
|
|
Tito Brasolin
wading in the water
Posts:21
|
|
Tito Brasolin
wading in the water
Posts:21
|
| 12-13-2010 11:41 PM |
|
I added two bindings:
It seems to work  (sorry for re-opening the thread) |
|
|
|
|