Solved

Problem tryinq to validate confirmation page

Posted on 2013-06-28
7
228 Views
Last Modified: 2013-06-28
I have this page: http://roofgenius.com/test.asp where a user can enter a message
when submitted it sends the values to this page:
http://roofgenius.com/test2.asp
On this page the user can see the values they have entered and can either accept them or go back to the prior page and make corrections
http://roofgenius.com/test.asp Validates,but
http://roofgenius.com/test2.asp gives 8 errors all similar
Example:
 Line 184, Column 43: & did not start a character reference. (& probably should have been escaped as &.)

…  <a href="jmail.asp?name=Robert+Moore&email=Service%40roofgenius.com&comment=…
see attached example of errors
How can i correct this?
errors.jpg
0
Comment
Question by:isnoend2001
  • 4
  • 3
7 Comments
 
LVL 52

Expert Comment

by:Julian Hansen
ID: 39284755
You need to replace all instances of & in the url with &amp;
0
 
LVL 52

Expert Comment

by:Julian Hansen
ID: 39284773
So on your button links - when creating the button you need to look at

HttpUtility.HtmlEncode

Also - consider using sessions / cookies to store the form data for the back button that way you don't need to "remember" it on the button link back. You can just pull it from the session.
0
 

Author Comment

by:isnoend2001
ID: 39284898
Thanks  julianH,but i get this error

Microsoft VBScript compilation error '800a0401'

Expected end of statement

/test2.asp, line 125

response.write "Dear: " &amp; name &amp; ",<br />Thank you for sending us the following:"


i don't understand this: HttpUtility.HtmlEncode
also what if the user has cookies disabled
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 
LVL 52

Accepted Solution

by:
Julian Hansen earned 500 total points
ID: 39284946
response.write "Dear: " &amp; name &amp; ",<br />Thank you for sending us the following:"

No - not in your code - in your output when you create the links for the buttons you need to convert all the & to &amp; in the URL.

HtmlEncode will do this for you refer

http://msdn.microsoft.com/en-us/library/w3te6wfz.aspx

If people have cookies disabled then they will have problems accessing a lot of sites - just a suggestion - it is very common practice to use cookies / sessions to do what you are doing.
0
 

Author Comment

by:isnoend2001
ID: 39284967
not sure what you mean, but i will check
0
 

Author Closing Comment

by:isnoend2001
ID: 39285156
I have not fixed this issue, but have to run some errands and i like to stay involved.
I think this needs to be configured to use response.write(Server.HTMLEncode
on this code:

 <% name = request.querystring("name")
  response.write "Dear: "& name & ",<br />Thank you for sending us the following:"
  comment = request.querystring("comment")
  comment = Replace(comment, vbcrlf, "<br />")
   response.write "<br />" & comment & "<br /><br />If you have asked us to contact you, we will be using the following email address:<br>"

  email = request.querystring("email")
  response.write "<span class=""redbold""> Email : " & email & "</span><br /><br />"
   %>
0
 
LVL 52

Expert Comment

by:Julian Hansen
ID: 39285379
No - it is what comes after that - for the actual button.

Where you output this code
 <a href="jmail.asp?name=...

Open in new window

0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

SASS allows you to treat your CSS code in a more OOP way. Let's have a look on how you can structure your code in order for it to be easily maintained and reused.
Why do we like using grid based layouts in website design? Let's look at the live examples of websites and compare them to grid based WordPress themes.
In this Micro Tutorial viewers will learn how to create a CSS image sprite (In a later tutorial, viewers will learn how to use CSS and HTML to create a navigation menu using this sprite) Open a new Photoshop document with a width of (Icon width)x(N…
In this tutorial viewers will learn how to embed custom externally-hosted Google Fonts using the Google Font API in CSS Go to the Google Fonts website at google.com/fonts: Browse or search based on font properties or name to find a suitable font for…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now