Forum DotNetNuke® Pro... Gallery Module ... double scape error

2/22/2007 9:36 AM

	Phil
3 posts

double scape error

When I click Edit, Add File, Add Albume or Maintenance I receive the error below.

Thanks for any help!

Server Error in Application "Default Web Site/DotNetNuke"

HTTP Error 404.11 - Not Found

Description: The request filtering module is configured to deny a request that contains a double escape sequence.

Error Code: 0x00000000

Notification: BeginRequest

Module: RequestFilteringModule

Requested URL: http://wks-phil:80/dotnetnuke/Gallery/tabid/54/ctl/AlbumEdit/mid/373/path/+/currentstrip/1/Default.aspx

Physical Path: C:\inetpub\wwwroot\DotNetNuke\Gallery\tabid\54\ctl\AlbumEdit\mid\373\path\+\currentstrip\1\Default.aspx

Logon User: Not yet determined

Logon Method: Not yet determined

Handler: PageHandlerFactory-ISAPI-2.0

Most likely causes:

The request contained a double escape sequence and request filtering is configured on the Web server to deny double escape sequences.

What you can try:

Verify the configuration/system.webServer/security/requestFiltering@allowDoubleEscaping setting in the applicationhost.config or web.confg file.

More Information...

Server Version Information: Internet Information Services 7.0.

This is a security feature. Do not change this feature unless the scope of the change is fully understood. You should take a network trace before changing this value to confirm that the request is not malicious. If double escape sequences are allowed by the server, modify the configuration/system.webServer/security/requestFiltering@allowDoubleEscaping setting. This could be caused by a malformed URL sent to the server by a malicious user.

3/23/2007 1:45 AM

	Siegfried Teufl
3 posts

Re: double scape error

I had the same problem and found this solution:

1. Locate the following directory:
%windir%\System32\inetsrv\config

2. Open the applicationHost.config file in a text editor such as Notepad.

3. In the applicationHost.config file, locate the following code:<section name="requestFiltering" overrideModeDefault="Deny" />

4. Replace the code that you found in step 3 with the following code:<section name="requestFiltering" overrideModeDefault="Allow"/>

5.
Open the web.config of your DotNetNuke installation in a text editor such as Notepad.

6.
Insert this code into the web.config after <configSections>

<configuration>
<configSections>
...

</configSections>

<system.webServer> <security> <requestFiltering allowDoubleEscaping="True"/> </security> </system.webServer>
... </configuration>

Now the gallery module should work

3/23/2007 2:07 PM

	Phil
3 posts

Re: double scape error

Wow, thanks for the fix. I had thought maybe DNN wasn't gonna work out for me. Guess I'll give it another try now. Thanks!

3/24/2007 3:55 AM

	Siegfried Teufl
3 posts

Re: double scape error

IIS 7.0 management console may modify the web.config of dotnetnuke and add a section <system.webServer> to the end of the file.

In this case locate <system.webServer> and add only the following to this section:

<system.webServer>
...
<security>
<requestFiltering allowDoubleEscaping="True"/>
</security>
<system.webServer>

3/26/2007 5:58 AM

	Phil
3 posts

Re: double scape error

Cool, that is likely it. I'm testing on a Vista machine. I look into it.

Thanks again!

Page 1 of 4

Forum

DotNetNuke® Pro...

Gallery Module ...

double scape error