RE: 2 servers, 1 website, security issue

Hi Walter,

Sorry I confused you - probably something to do with the fact that I'm
confused!

Unfortunately, I can't get access to that setup again until tomorrow, but
you're probably right regarding the %20, so the path would be..

"%2fmyshare%2fsaved%2fthis%20is%20my%20file.ext"

Assuming that's the case, and "/myshare/" exists as a virtual directory on
my website, with the saved directory and a file called "this is my file.ext"
- it's giving me an 500 error whenever I try and access the files.

The filename it's looking for is pulled from the sql database, and the path
info is stored in appsettings, so my page loads an IFrame with the url..

IFrame.Attributes.Add("src", AppSettings["contractPath"].ToString() +
data("filename"));

I'll have a look tomorrow and keep you posted.

Cheers



Dan



"Walter Wang [MSFT]" wrote:

Hi Dan,

I'm not sure if I fully understand your question. However, isn't space
should be represented by %20 in URL? The %2f is '/'. Where did you get the
generated URL "/myshare/saved/this%2fis%2fmy%2ffile.ext"?


Regards,
Walter Wang (wawang@xxxxxxxxxxxxxxxxxxxx, remove 'online.')
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.


.

Relevant Pages

  • Re: Database drop list redirection
    ... I found a diffent way to do it and it works. ... I've setup the onchange ... >> Hi Ian, ... > change a table on that page then target an Iframe as the ...
    (microsoft.public.frontpage.programming)
  • Setup for Word-Addin (C#)
    ... On Machines having only the .net Framework installed, ... plugin isn't loaded. ... First I tried to include the office.dll in the setup project. ... loads but the function called by a button, ...
    (microsoft.public.office.developer.com.add_ins)
  • Re: Application EXE Error
    ... SP> called "setup" configures the system and loads the menu), ... SP> .exe file displays the menu for about half a second and the application ... Eric den Doop ...
    (microsoft.public.fox.programmer.exchange)
  • Re: [Full-disclosure] WRT54G directory trasversial vulnerability
    ... S> It loads the page after action ... S> http://192.168.1.1/apply.cgi?action=../ returns the setup page ... Charter: http://lists.grok.org.uk/full-disclosure-charter.html ... Hosted and sponsored by Secunia - http://secunia.com/ ...
    (Full-Disclosure)
  • New server setup
    ... I've setup a few servers but not experienced this before. ... Celeron, 512 meg memory. ... After the CD loads into memory, ...
    (microsoft.public.windows.server.general)