Web Wiz Support and Community Forums : Problem with urls containing | or [] https://forums.webwiz.net/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Mon, 13 Apr 2026 21:37:47 +0000 Wed, 11 Jan 2006 04:39:42 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.08 360 https://forums.webwiz.net/RSS_post_feed.asp?TID=17574 <![CDATA[Web Wiz Support and Community Forums]]> https://forums.webwiz.net/forum_images/web_wiz_forums.png https://forums.webwiz.net/ <![CDATA[Problem with urls containing | or [] : These lines already exist in functions_filters.asp....]]> https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post96797.html#96797 Author: JJLatWebWiz
Subject: 17574
Posted: 11 January 2006 at 4:39am

These lines already exist in functions_filters.asp.  Look for "function formatLink".  Inside this function, you will see the lines, but with empty double-quotes.  Replace the empty double-quotes with the appropriate escape code.

If you're going to let only administrators post links with these characters, then make it so the blnAdmin links use the escaped codes and regular users still use the empty double-quotes.  Those characters should technically be escaped in a URL anyway.
]]> Wed, 11 Jan 2006 04:39:42 +0000 https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post96797.html#96797 <![CDATA[Problem with urls containing | or [] : Hello, Where i have to add this...]]> https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post96707.html#96707 Author: Gando
Subject: 17574
Posted: 09 January 2006 at 11:23pm

Hello,

Where i have to add this code? I added functions_filters.asp inside but doesn't work? Confused  I want to use only this | character..
 
Thanx a lot..
 
 
If blnAdmin = false Then
strInputEntry = Replace(strInputEntry, "[", "%5B", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "]", "%5D", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "(", "%28", 1, -1, 1)
strInputEntry = Replace(strInputEntry, ")", "%29", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "{", "%7B", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "}", "%7D", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "<", "%3C", 1, -1, 1)
strInputEntry = Replace(strInputEntry, ">", "%3E", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "|", "%7C", 1, -1, 1)
End If
]]> Mon, 09 Jan 2006 23:23:50 +0000 https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post96707.html#96707 <![CDATA[Problem with urls containing | or [] : WOW ]]> https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post96175.html#96175 Author: graper
Subject: 17574
Posted: 31 December 2005 at 12:20am

WOW]]> Sat, 31 Dec 2005 00:20:53 +0000 https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post96175.html#96175 <![CDATA[Problem with urls containing | or [] : That&#039;s a useful bit of info....]]> https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post96097.html#96097 Author: dpyers
Subject: 17574
Posted: 30 December 2005 at 12:54am

That's a useful bit of info. Adding that code to my snippets.]]> Fri, 30 Dec 2005 00:54:22 +0000 https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post96097.html#96097 <![CDATA[Problem with urls containing | or [] : Now, I&#039;m not sure if you...]]> https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post96083.html#96083 Author: JJLatWebWiz
Subject: 17574
Posted: 29 December 2005 at 6:44pm

Now, I'm not sure if you should use the hash ASCII HTML Encoding or the URL Encoding escape codes.  I think, probably the latter.  So you should probably use this instead:

strInputEntry = Replace(strInputEntry, "[", "%5B", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "]", "%5D", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "(", "%28", 1, -1, 1)
strInputEntry = Replace(strInputEntry, ")", "%29", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "{", "%7B", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "}", "%7D", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "<", "%3C", 1, -1, 1)
strInputEntry = Replace(strInputEntry, ">", "%3E", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "|", "%7C", 1, -1, 1)

]]> Thu, 29 Dec 2005 18:44:02 +0000 https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post96083.html#96083 <![CDATA[Problem with urls containing | or [] : I believe (but I won&#039;t bet...]]> https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post96033.html#96033 Author: JJLatWebWiz
Subject: 17574
Posted: 28 December 2005 at 11:31pm

I believe (but I won't bet much money on it) that the vertical line, and square bracket characters are among the "national" characters that could have different meanings depending on the user's (or the host server's) selected national character variant 7 bit set.  As such, according to W3C, those characters should not be used in a URL.  They should be escaped.  Some simple changes to the the formatLink function in functions_filters.asp would probably do the trick.
 
Maybe make the following changes:
strInputEntry = Replace(strInputEntry, "[", "&#91;", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "]", "&#93;", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "(", "&#40;", 1, -1, 1)
strInputEntry = Replace(strInputEntry, ")", "&#41;", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "{", "&#123;", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "}", "&#125;", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "<", "&#60;", 1, -1, 1)
strInputEntry = Replace(strInputEntry, ">", "&#62;", 1, -1, 1)
strInputEntry = Replace(strInputEntry, "|", "&#124;", 1, -1, 1)

I haven't tested these suggestions in any way and I haven't analyzed their possible impact on security.  I haven't even verified the escape codes are exactly correct.  I THINK security will be uneffected and I'm pretty sure the codes are accurate.  But I don't accept any responsibility should anyone choose to test my theory.  If you have problems with it, I will gladly help via this forum.


Edited by JJLatWebWiz - 29 December 2005 at 6:44pm]]> Wed, 28 Dec 2005 23:31:36 +0000 https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post96033.html#96033 <![CDATA[Problem with urls containing | or [] : You could use code to detect if...]]> https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post95988.html#95988 Author: WebWiz-Bruce
Subject: 17574
Posted: 28 December 2005 at 2:05pm

You could use code to detect if it is the admin and then not apply the filters:-

If blnAdmin = false Then

    do code in here
End If
]]> Wed, 28 Dec 2005 14:05:44 +0000 https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post95988.html#95988 <![CDATA[Problem with urls containing | or [] : Is it possible to make some...]]> https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post95972.html#95972 Author: mantey
Subject: 17574
Posted: 27 December 2005 at 10:27pm

Is it possible to make some mod, letting only administrator to have special rights, so only administrators (or only one administrator) would be able to use special characters in URLs?

]]> Tue, 27 Dec 2005 22:27:22 +0000 https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post95972.html#95972 <![CDATA[Problem with urls containing | or [] : You could edit the filters file...]]> https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post95946.html#95946 Author: WebWiz-Bruce
Subject: 17574
Posted: 27 December 2005 at 1:29pm

You could edit the filters file in the functions directory and removethe part of the filter that filters out [ and ], but you leave asecurity whole that could mean your forum is hacked by an XSS hacker.]]> Tue, 27 Dec 2005 13:29:26 +0000 https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post95946.html#95946 <![CDATA[Problem with urls containing | or [] : So there is no way to get such...]]> https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post95931.html#95931 Author: mantey
Subject: 17574
Posted: 26 December 2005 at 11:14pm

So there is no way to get such URLs to work using wysiwyg, or is it?
 
Does anybody have any suggestion how to solve this problem?
]]> Mon, 26 Dec 2005 23:14:07 +0000 https://forums.webwiz.net/problem-with-urls-containing-or_topic17574_post95931.html#95931