The following ASP script will display "C:\WINNT\TEMP" on my server:

<%=Request("temp")%>

Is is a bug, or something by design?

The server is a Windows 2000 SP4 running IIS5.

Thanks in advance.

Lei

Lei Wu wrote:[color=blue]
> The following ASP script will display "C:\WINNT\TEMP" on my server:
>
> <%=Request("temp")%>
>
> Is is a bug, or something by design?
>
> The server is a Windows 2000 SP4 running IIS5.
>
> Thanks in advance.
>
> Lei[/color]
It is by design. When you don't specify the collection that contains the
variable whose value you want, it searches ALL the collections contained by
the Request object until it finds a variable of that name. That is why you
need to ALWAYS specify the collection you want to use:
<%=Request.querystring("temp")%>
or
<%=Request.Form("temp")%>
or
<%=Request.ServerVariables("temp")%>

HTH,
Bob Barrows

No, it's not a bug. It's returning the server variable TEMP. When you call
Request(something), the server doesn't know if you mean, request.form,
cookies, certificates, etc., so it looks through ALL the collections in this
order:

QueryString
Form
Cookies
ClientCertificate
ServerVariables

Always specify what you mean if you want expected results.

http://msdn.microsoft.com/library/de..._vbom_reqo.asp

Ray at work

"Lei Wu" <marathoner@sina.com> wrote in message
news:5929ac79.0308070552.44aaf92a@posting.google.c om...[color=blue]
> The following ASP script will display "C:\WINNT\TEMP" on my server:
>
> <%=Request("temp")%>
>
> Is is a bug, or something by design?
>
> The server is a Windows 2000 SP4 running IIS5.
>
> Thanks in advance.
>
> Lei[/color]

> The following ASP script will display "C:\WINNT\TEMP" on my server:[color=blue]
>
> <%=Request("temp")%>
>
> Is is a bug, or something by design?[/color]

No, this is not a bug.

Using request("") alone is both inefficient and dangerous. First, it will
search /all/ request.* collections until it finds a match. And, if you use
a name that exists in more than one collection, you might get invalid
data...

Use the actual collection you are referring to (e.g. .form, .querystring)
instead of the lazy request("").

In this case, it is actually using Request.ServerVariables.

See http://www.aspfaq.com/2111 for more information.

Actually i had the same problem before, but it was doing only one of my
servers and not on the other ones. why would it do it different - its the
exact same code???

Vivek

"Ray at <%=sLocation%>" <myfirstname at lane34 dot com> wrote in message
news:umPCIvOXDHA.652@tk2msftngp13.phx.gbl...[color=blue]
> No, it's not a bug. It's returning the server variable TEMP. When you[/color]
call[color=blue]
> Request(something), the server doesn't know if you mean, request.form,
> cookies, certificates, etc., so it looks through ALL the collections in[/color]
this[color=blue]
> order:
>
> QueryString
> Form
> Cookies
> ClientCertificate
> ServerVariables
>
> Always specify what you mean if you want expected results.
>
>[/color]
http://msdn.microsoft.com/library/de...us/iisref/htm/
ref_vbom_reqo.asp[color=blue]
>
> Ray at work
>
> "Lei Wu" <marathoner@sina.com> wrote in message
> news:5929ac79.0308070552.44aaf92a@posting.google.c om...[color=green]
> > The following ASP script will display "C:\WINNT\TEMP" on my server:
> >
> > <%=Request("temp")%>
> >
> > Is is a bug, or something by design?
> >
> > The server is a Windows 2000 SP4 running IIS5.
> >
> > Thanks in advance.
> >
> > Lei[/color]
>
>[/color]

> Actually i had the same problem before, but it was doing only one of my[color=blue]
> servers and not on the other ones. why would it do it different - its the
> exact same code???[/color]

Different versions of IIS, perhaps, process the request collections in a
different order. See
http://msdn.microsoft.com/library/en..._vbom_reqo.asp

very interesting, thanks Aaron

Vivek

"Aaron Bertrand - MVP" <aaron@TRASHaspfaq.com> wrote in message
news:#JjVX1OXDHA.2620@TK2MSFTNGP09.phx.gbl...[color=blue][color=green]
> > Actually i had the same problem before, but it was doing only one of my
> > servers and not on the other ones. why would it do it different - its[/color][/color]
the[color=blue][color=green]
> > exact same code???[/color]
>
> Different versions of IIS, perhaps, process the request collections in a
> different order. See
> http://msdn.microsoft.com/library/en..._vbom_reqo.asp
>
>[/color]