473,320 Members | 1,978 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

Is this a bug?

The following ASP script will display "C:\WINNT\TEMP" on my server:

<%=Request("temp")%>

Is is a bug, or something by design?

The server is a Windows 2000 SP4 running IIS5.

Thanks in advance.

Lei
Jul 19 '05 #1
6 1916
Lei Wu wrote:
The following ASP script will display "C:\WINNT\TEMP" on my server:

<%=Request("temp")%>

Is is a bug, or something by design?

The server is a Windows 2000 SP4 running IIS5.

Thanks in advance.

Lei

It is by design. When you don't specify the collection that contains the
variable whose value you want, it searches ALL the collections contained by
the Request object until it finds a variable of that name. That is why you
need to ALWAYS specify the collection you want to use:
<%=Request.querystring("temp")%>
or
<%=Request.Form("temp")%>
or
<%=Request.ServerVariables("temp")%>

HTH,
Bob Barrows
Jul 19 '05 #2
No, it's not a bug. It's returning the server variable TEMP. When you call
Request(something), the server doesn't know if you mean, request.form,
cookies, certificates, etc., so it looks through ALL the collections in this
order:

QueryString
Form
Cookies
ClientCertificate
ServerVariables

Always specify what you mean if you want expected results.

http://msdn.microsoft.com/library/de..._vbom_reqo.asp

Ray at work

"Lei Wu" <ma********@sina.com> wrote in message
news:59**************************@posting.google.c om...
The following ASP script will display "C:\WINNT\TEMP" on my server:

<%=Request("temp")%>

Is is a bug, or something by design?

The server is a Windows 2000 SP4 running IIS5.

Thanks in advance.

Lei

Jul 19 '05 #3
> The following ASP script will display "C:\WINNT\TEMP" on my server:

<%=Request("temp")%>

Is is a bug, or something by design?


No, this is not a bug.

Using request("") alone is both inefficient and dangerous. First, it will
search /all/ request.* collections until it finds a match. And, if you use
a name that exists in more than one collection, you might get invalid
data...

Use the actual collection you are referring to (e.g. .form, .querystring)
instead of the lazy request("").

In this case, it is actually using Request.ServerVariables.

See http://www.aspfaq.com/2111 for more information.

Jul 19 '05 #4
Actually i had the same problem before, but it was doing only one of my
servers and not on the other ones. why would it do it different - its the
exact same code???

Vivek

"Ray at <%=sLocation%>" <myfirstname at lane34 dot com> wrote in message
news:um*************@tk2msftngp13.phx.gbl...
No, it's not a bug. It's returning the server variable TEMP. When you call Request(something), the server doesn't know if you mean, request.form,
cookies, certificates, etc., so it looks through ALL the collections in this order:

QueryString
Form
Cookies
ClientCertificate
ServerVariables

Always specify what you mean if you want expected results.

http://msdn.microsoft.com/library/de...us/iisref/htm/
ref_vbom_reqo.asp
Ray at work

"Lei Wu" <ma********@sina.com> wrote in message
news:59**************************@posting.google.c om...
The following ASP script will display "C:\WINNT\TEMP" on my server:

<%=Request("temp")%>

Is is a bug, or something by design?

The server is a Windows 2000 SP4 running IIS5.

Thanks in advance.

Lei


Jul 19 '05 #5
> Actually i had the same problem before, but it was doing only one of my
servers and not on the other ones. why would it do it different - its the
exact same code???


Different versions of IIS, perhaps, process the request collections in a
different order. See
http://msdn.microsoft.com/library/en..._vbom_reqo.asp
Jul 19 '05 #6
very interesting, thanks Aaron

Vivek

"Aaron Bertrand - MVP" <aa***@TRASHaspfaq.com> wrote in message
news:#J**************@TK2MSFTNGP09.phx.gbl...
Actually i had the same problem before, but it was doing only one of my
servers and not on the other ones. why would it do it different - its the exact same code???


Different versions of IIS, perhaps, process the request collections in a
different order. See
http://msdn.microsoft.com/library/en..._vbom_reqo.asp

Jul 19 '05 #7

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

3
by: William C. White | last post by:
Does anyone know of a way to use PHP /w Authorize.net AIM without using cURL? Our website is hosted on a shared drive and the webhost company doesn't installed additional software (such as cURL)...
2
by: Albert Ahtenberg | last post by:
Hello, I don't know if it is only me but I was sure that header("Location:url") redirects the browser instantly to URL, or at least stops the execution of the code. But appearantely it continues...
3
by: James | last post by:
Hi, I have a form with 2 fields. 'A' 'B' The user completes one of the fields and the form is submitted. On the results page I want to run a query, but this will change subject to which...
0
by: Ollivier Robert | last post by:
Hello, I'm trying to link PHP with Oracle 9.2.0/OCI8 with gcc 3.2.3 on a Solaris9 system. The link succeeds but everytime I try to run php, I get a SEGV from inside the libcnltsh.so library. ...
1
by: Richard Galli | last post by:
I want viewers to compare state laws on a single subject. Imagine a three-column table with a drop-down box on the top. A viewer selects a state from the list, and that state's text fills the...
4
by: Albert Ahtenberg | last post by:
Hello, I have two questions. 1. When the user presses the back button and returns to a form he filled the form is reseted. How do I leave there the values he inserted? 2. When the...
1
by: inderjit S Gabrie | last post by:
Hi all Here is the scenerio ...is it possibly to do this... i am getting valid course dates output on to a web which i have designed ....all is okay so far , look at the following web url ...
2
by: Jack | last post by:
Hi All, What is the PHP equivilent of Oracle bind variables in a SQL statement, e.g. select x from y where z=:parameter Which in asp/jsp would be followed by some statements to bind a value...
3
by: Sandwick | last post by:
I am trying to change the size of a drawing so they are all 3x3. the script below is what i was trying to use to cut it in half ... I get errors. I can display the normal picture but not the...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: Vimpel783 | last post by:
Hello! Guys, I found this code on the Internet, but I need to modify it a little. It works well, the problem is this: Data is sent from only one cell, in this case B5, but it is necessary that data...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
0
by: ArrayDB | last post by:
The error message I've encountered is; ERROR:root:Error generating model response: exception: access violation writing 0x0000000000005140, which seems to be indicative of an access violation...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
0
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
1
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.