HomeHomeDotNetNuke Forg...DotNetNuke Forg...Module ForumsModule ForumsGalleryGallerydouble scape errordouble scape error
Previous
 
Next
New Post
2/22/2007 10:36 AM
 

When I click Edit, Add File, Add Albume or Maintenance I receive the error below.

Thanks for any help!

 

Server Error in Application "Default Web Site/DotNetNuke"


 

HTTP Error 404.11 - Not Found

 

Description: The request filtering module is configured to deny a request that contains a double escape sequence.

Error Code: 0x00000000

Notification: BeginRequest

Module: RequestFilteringModule

Requested URL: http://wks-phil:80/dotnetnuke/Gallery/tabid/54/ctl/AlbumEdit/mid/373/path/+/currentstrip/1/Default.aspx

Physical Path: C:\inetpub\wwwroot\DotNetNuke\Gallery\tabid\54\ctl\AlbumEdit\mid\373\path\+\currentstrip\1\Default.aspx

Logon User: Not yet determined

Logon Method: Not yet determined

Handler: PageHandlerFactory-ISAPI-2.0

Most likely causes:

  • The request contained a double escape sequence and request filtering is configured on the Web server to deny double escape sequences.

What you can try:

  • Verify the configuration/system.webServer/security/requestFiltering@allowDoubleEscaping setting in the applicationhost.config or web.confg file.

More Information...


Server Version Information: Internet Information Services 7.0.

This is a security feature. Do not change this feature unless the scope of the change is fully understood. You should take a network trace before changing this value to confirm that the request is not malicious. If double escape sequences are allowed by the server, modify the configuration/system.webServer/security/requestFiltering@allowDoubleEscaping setting. This could be caused by a malformed URL sent to the server by a malicious user.
 
New Post
3/23/2007 2:45 AM
 

I had the same problem and found this solution:

1. Locate the following directory:
%windir%\System32\inetsrv\config
2. Open the applicationHost.config file in a text editor such as Notepad.
3. In the applicationHost.config file, locate the following code:
<section name="requestFiltering" overrideModeDefault="Deny" />
4. Replace the code that you found in step 3 with the following code:
<section name="requestFiltering" overrideModeDefault="Allow"/>
5.
Open the web.config of your DotNetNuke installation in a text editor such as Notepad.
6.
Insert this code into the web.config after <configSections>
<configuration>
<configSections>
...

</configSections>
	<system.webServer>
		<security>
			<requestFiltering allowDoubleEscaping="True"/>
		</security>
	</system.webServer>
... </configuration>
   
 
  Now the gallery module should work

 
New Post
3/23/2007 3:07 PM
 

Wow, thanks for the fix.  I had thought maybe DNN wasn't gonna work out for me.  Guess I'll give it another try now.  Thanks!

 
New Post
3/24/2007 4:55 AM
 

IIS 7.0 management console may modify the web.config of dotnetnuke and add a section <system.webServer> to the end of the file.

In this case locate <system.webServer> and add only the following to this section:

<system.webServer>
...
 <security>
    <requestFiltering allowDoubleEscaping="True"/>
 </security>
<system.webServer>

 
New Post
3/26/2007 6:58 AM
 

Cool, that is likely it.  I'm testing on a Vista machine.  I look into it.

 

Thanks again!

 
Previous
 
Next
HomeHomeDotNetNuke Forg...DotNetNuke Forg...Module ForumsModule ForumsGalleryGallerydouble scape errordouble scape error


Forum Policy

These Discussion Forums are dedicated to the discussion of the DotNetNuke Web Application Framework.

For the benefit of the community and to protect the integrity of the project, please observe the following posting guidelines:

1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DotNetNuke.
2. Discussion or promotion of DotNetNuke product releases under a different brand name are strictly prohibited.
3. No Flaming or Trolling.
4. No Profanity, Racism, or Prejudice.
5. Site Moderators have the final word on approving/removing a thread or post or comment.
6. English language posting only, please.

Attend A Webinar
Free Demo Site
Download DotNetNuke Professional Edition Trial
Have Someone Contact Me
Have Someone Contact Me

Like Us on Facebook Join our Network on LinkedIn Follow DNN Corporate on Twitter Follow DNN on Twitter

Advertisers

DotNetNuke Scoop!

Sponsors

DotNetNuke Corporation

DotNetNuke Corp. is the steward of the DotNetNuke open source project, the most widely adopted Web Content Management Platform for building web sites and web applications on Microsoft .NET. Organizations use DotNetNuke to quickly develop and deploy interactive and dynamic web sites, intranets, extranets and web applications. The DotNetNuke platform is available in a free Community and subscription-based Professional and Enterprise Editions with an Elite Support option. DotNetNuke Corp. also operates the DotNetNuke Store where users purchase third party apps for the platform.