Prevent Decoding ?!?
Printed From: Web Wiz Forums
Category: General Discussion
Forum Name: Classic ASP Discussion
Forum Description: Discussion on Active Server Pages (Classic ASP).
URL: https://forums.webwiz.net/forum_posts.asp?TID=10231
Printed Date: 31 March 2026 at 5:51pm
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com
Topic: Prevent Decoding ?!?
Posted By: neotrix
Subject: Prevent Decoding ?!?
Date Posted: 30 April 2004 at 6:01am
|
Hello Sirs, I have come across a lil problem, and that is... I passed an Encoded (to their Hex Value) string to an asp file via the address bar... it was like... http://www.awazofasia.net.tc/test.asp?songlist=%59%6F%75%72%20%53%65%63%72%65%74%20%4D%65%73%73%61%67%65%20%69%73%20%54%68%69%73%21 - http://www.awazofasia.net.tc/test.asp?songlist= %59%6F%75%72%20%53%65%63%72%65%74%20%4D%65%73%73%61%67%65%20 %69%73%20%54%68%69%73%21 the test.asp simply had this [code]<% somevariable=Request("songlist") Response.Write(somevariable) %> but when i tested it.. it automatically decoded the encoded value. how can i do something as to make it *Not* decode the string value that i pass ?? is it possible ? ------------- http://www.muhammadbinyusrat.com/blog/" rel="nofollow - Say to the believing men.. |
Replies:
Posted By: neotrix
Date Posted: 30 April 2004 at 6:03am
Well Again you can see... even this forum decoded the encoded value to its Decoded meaning  i mean roll the mouse over the link and see the status.------------- http://www.muhammadbinyusrat.com/blog/" rel="nofollow - Say to the believing men.. |
Posted By: Semikolon
Date Posted: 30 April 2004 at 10:37am
|
if you don't want it to "decode" you have to encode all the percent signs too but what's the problem with the decoding? |
Posted By: dpyers
Date Posted: 30 April 2004 at 11:48am
|
It wouln't take buch for someone to figure out that the delimiters are encoded. If you are passing this with a GET, you need to look at using POST and/or encrypting the string before you encode it. http://www.4guysfromrolla.com/webtech/010100-1.shtml - http://www.4guysfromrolla.com/webtech/010100-1.shtml ------------- 
Lead me not into temptation... I know the short cut, follow me. |
Posted By: neotrix
Date Posted: 01 May 2004 at 8:33am
|
the problem is, that asp decodes it emself... i dont want it to decode that line.. can this be done ? ------------- http://www.muhammadbinyusrat.com/blog/" rel="nofollow - Say to the believing men.. |
Semikolon wrote:Posted By: Semikolon
Date Posted: 01 May 2004 at 4:32pm
|
it's not ASP that is decoding it.. it's the browser and there's nothing
you can do about it without replacing all the % signs with the
corresponding &#number; value, which will screw everything.. |