My problem with Server.URLEncod e as used here

[George Hester]

http://support.microsoft.com/default...b;en-us;301464

Look down at the MyPage.asp example. You will see that Microsoft does this:

'Costruct the URL for the current page
s = "http://"
s = s & Request.ServerV ariables("HTTP_ HOST")
s = s & Request.ServerV ariables("URL")
If Request.QuerySt ring.Count > 0 Then
s = s & "?" & Request.QuerySt ring
End If
'Redirect unauthorised users to the logon page
Response.Redire ct "Logon.asp?from =" & Server.URLEncod e(s)

This code has problems. If the URL contains a parameter which is an image like blondie.jpg then what is sent to the Logon page is NOT the URL that ostensibly was sent to the logon page. Not only does it look different obviously but it IS different.

If the URL accessed (mypage.asp) is like this:

http://www.mydomain.com/more.asp?image=blondie.jpg

Then what is sent to the logon page looks like this:

http://www.mydomain.com/logon.asp?fr...londie%252Ejpg

This is because the Request.ServerV ariables("URL") does a little bit of encoding It encodes . to %2E and therefore when we pass this into Server.URLEncod e it strips out the % and puts it as %25 and leaves the 2E alone. This then causes an error in JavaScript. Weirdly the image will still display. I don't know why but it does. If you access the image parameter in a <IMG src="<%=Request .QueryString("i mage")%>" ....

This is not good. Is there something like Request.ServerV ariables("URL") that leaves any and all characters alone in the URL so that Server.URLEncod e has something to work on that has not been contaminated; so that I don't have to workaround this issue. Or can someone tell me ALL the characters that Server.Variable s("URL") will escode so that I can fix this? Thanks.

--
George Hester
_______________ _______________ ___

[MikeT]

On Thu, 18 Nov 2004 23:02:07 -0500, "George Hester"
<he********@hot mail.com> wrote:

This code has problems. If the URL contains a parameter
which is an image like blondie.jpg then what is sent to the
Logon page is NOT the URL that ostensibly was sent to the
logon page. Not only does it look different obviously but
it IS different.

If the URL accessed (mypage.asp) is like this:

http://www.mydomain.com/more.asp?image=blondie.jpg

Then what is sent to the logon page looks like this:

http://www.mydomain.com/logon.asp?fr...londie%252Ejpg

This is because the Request.ServerV ariables("URL") does a
little bit of encoding It encodes . to %2E and therefore when
we pass this into Server.URLEncod e it strips out the % and puts
it as %25 and leaves the 2E alone. This then causes an error in
JavaScript.

OK, so simply unencode the URL before encoding it again. If your
script can't cope with encoded URLs it's going to break anyway
someday...

I'm not saying this is the best way to do it, but off the top of my
head:

const Hexconvert = "0123456789ABCD EF"

function firsttwoHextoAs cii(strHex)
dim dec
firsttwoHextoAs cii = ""
if len(strHex)>1 then
dec = 16 * instr(1,Hexconv ert,left(strHex ,1),1) + _
instr(1,Hexconv ert,mid(strHex, 2,1),1) - 17
if dec>0 and dec<256 then
firsttwoHextoAs cii = chr(dec)
end if
end if
end function

function URLunencode(str Encoded)
dim unencoded,part
if isnull(strEncod ed) or strEncoded="" then
URLunencode = ""
else
unencoded = split(replace(s trEncoded,"+"," "),"%")
for part = 1 to ubound(unencode d)
unencoded(part) = firsttwoHextoAs cii(unencoded(p art)) & _
mid(unencoded(p art),3)
next
URLunencode = join(unencoded, "")
end if
end function

[George Hester]

Thanks MikeT. I think I can integrate this in. Lot of work it seems to me to avoid this Request.ServerV ariables("URL") and Server.URLEncod e combination usage issue. I had put some work into getting images that had + in the name in fact any character that could safely be used in naming files in Windows Explorer.to work. I had it good. Then I noticed this issue came up. I ran into it before in little different way but I was able to work around what VBScript and ASP was doing. But this one I think you have helped better than I had. But I am back to the above issue. If the file is named say

blon %2E+.jpg

Then we are going to catch that in our\(your) function and kill the name of the file. I did have this working and without Replace. Looks like I am back to the drawing board. If only Request.ServerV ariables("URL") did NOT encoding at all I'd be a happy camper. The trouble is when we make a programming language with statements\func tions that do more, than one thing well, we end up with issues such as this. Request.ServerV ariables("URL) should do NOTHING to the URL and leave it up to Server.URLEncod e to take care of encoding issues. IMHO.

--
George Hester
_______________ _______________ ___
"MikeT" <ne**@chthonic. f9.co.uk> wrote in message news:6s******** *************** *********@4ax.c om...

On Thu, 18 Nov 2004 23:02:07 -0500, "George Hester"
<he********@hot mail.com> wrote:

This code has problems. If the URL contains a parameter
which is an image like blondie.jpg then what is sent to the
Logon page is NOT the URL that ostensibly was sent to the
logon page. Not only does it look different obviously but
it IS different.

If the URL accessed (mypage.asp) is like this:

http://www.mydomain.com/more.asp?image=blondie.jpg

Then what is sent to the logon page looks like this:

http://www.mydomain.com/logon.asp?fr...londie%252Ejpg

This is because the Request.ServerV ariables("URL") does a
little bit of encoding It encodes . to %2E and therefore when
we pass this into Server.URLEncod e it strips out the % and puts
it as %25 and leaves the 2E alone. This then causes an error in
JavaScript.

OK, so simply unencode the URL before encoding it again. If your
script can't cope with encoded URLs it's going to break anyway
someday...

I'm not saying this is the best way to do it, but off the top of my
head:

const Hexconvert = "0123456789ABCD EF"

function firsttwoHextoAs cii(strHex)
dim dec
firsttwoHextoAs cii = ""
if len(strHex)>1 then
dec = 16 * instr(1,Hexconv ert,left(strHex ,1),1) + _
instr(1,Hexconv ert,mid(strHex, 2,1),1) - 17
if dec>0 and dec<256 then
firsttwoHextoAs cii = chr(dec)
end if
end if
end function

function URLunencode(str Encoded)
dim unencoded,part
if isnull(strEncod ed) or strEncoded="" then
URLunencode = ""
else
unencoded = split(replace(s trEncoded,"+"," "),"%")
for part = 1 to ubound(unencode d)
unencoded(part) = firsttwoHextoAs cii(unencoded(p art)) & _
mid(unencoded(p art),3)
next
URLunencode = join(unencoded, "")
end if
end function

[George Hester]

Hi again MikeT. I didn't put your construction in the right place when I first tried to use it. What I was doing was encoding as that example showed. But then I used the same method again. It was in the second use of it that Server.URLEncod e was acting on something that already was encoded. I tried just removing the second encoding but I lost all my QueryStrings. Anyway I put your VBScript unencode in and it performed admirably. I just want to thank you again for a very nice piece of code.

--
George Hester
_______________ _______________ ___
"MikeT" <ne**@chthonic. f9.co.uk> wrote in message news:6s******** *************** *********@4ax.c om...

On Thu, 18 Nov 2004 23:02:07 -0500, "George Hester"
<he********@hot mail.com> wrote:

This code has problems. If the URL contains a parameter
which is an image like blondie.jpg then what is sent to the
Logon page is NOT the URL that ostensibly was sent to the
logon page. Not only does it look different obviously but
it IS different.

If the URL accessed (mypage.asp) is like this:

http://www.mydomain.com/more.asp?image=blondie.jpg

Then what is sent to the logon page looks like this:

http://www.mydomain.com/logon.asp?fr...londie%252Ejpg

This is because the Request.ServerV ariables("URL") does a
little bit of encoding It encodes . to %2E and therefore when
we pass this into Server.URLEncod e it strips out the % and puts
it as %25 and leaves the 2E alone. This then causes an error in
JavaScript.

OK, so simply unencode the URL before encoding it again. If your
script can't cope with encoded URLs it's going to break anyway
someday...

I'm not saying this is the best way to do it, but off the top of my
head:

const Hexconvert = "0123456789ABCD EF"

function firsttwoHextoAs cii(strHex)
dim dec
firsttwoHextoAs cii = ""
if len(strHex)>1 then
dec = 16 * instr(1,Hexconv ert,left(strHex ,1),1) + _
instr(1,Hexconv ert,mid(strHex, 2,1),1) - 17
if dec>0 and dec<256 then
firsttwoHextoAs cii = chr(dec)
end if
end if
end function

function URLunencode(str Encoded)
dim unencoded,part
if isnull(strEncod ed) or strEncoded="" then
URLunencode = ""
else
unencoded = split(replace(s trEncoded,"+"," "),"%")
for part = 1 to ubound(unencode d)
unencoded(part) = firsttwoHextoAs cii(unencoded(p art)) & _
mid(unencoded(p art),3)
next
URLunencode = join(unencoded, "")
end if
end function