Remote server returns (500) Internal Server Error,when posting xml

[Danny]

I am posting xml to a server and get the above error returned. The client
code is listed below, it works until say a "<" character is put in XmlData.
On the server page I try to pick up the XmlData with:
Response.Write( Request.Form["XMLData"]);

Client side code:

ASCIIEncoding encoding = new ASCIIEncoding() ;
string XmlString = "<TEST";
Stream requestStream = null;
string lcUrl = "http://localhost/test/receive.aspx";
HttpWebRequest IoHttp = (HttpWebRequest ) WebRequest.Crea te(lcUrl);
IoHttp.Method = "POST";
IoHttp.ContentT ype = "applicatio n/x-www-form-urlencoded";
byte [] body = encoding.GetByt es("Xml=" +
HttpUtility.Url Encode(XmlStrin g));
IoHttp.ContentL ength = body.Length;
try
{
requestStream = IoHttp.GetReque stStream();
requestStream.W rite(body, 0, body.Length);
HttpWebResponse loWebResponse = (HttpWebRespons e) IoHttp.GetRespo nse();

//Encoding enc = System.Text.Enc oding.GetEncodi ng(1252);

StreamReader loResponseStrea m =
new StreamReader(lo WebResponse.Get ResponseStream( ));

string lcHtml = loResponseStrea m.ReadToEnd();

Response.Write (lcHtml);

loWebResponse.C lose();
loResponseStrea m.Close();

}
catch (WebException webexception)
{

}

catch
{

}
finally
{
if (requestStream != null) requestStream.C lose();
}


Can anyone see the problem with this?

Thanks
Danny

[Joerg Jooss]

Danny wrote:

I am posting xml to a server and get the above error returned. The
client code is listed below, it works until say a "<" character is
put in XmlData. On the server page I try to pick up the XmlData
with: Response.Write( Request.Form["XMLData"]);

ASP.NET does not allow form data containing certain characters used in
injection attacks by default . You can disable this feature using the
page directive ValidateRequest ="false", but a better approach is to
post the XML "as is", and not as form data. See
http://tinyurl.com/b8al3 for a sample.

On the server-side, read the XML directly from Request.InputSt ream.

Cheers,
--
http://www.joergjooss.de
mailto:ne****** **@joergjooss.d e