Print Page | Close Window

Prevent Decoding ?!?

Printed From: Web Wiz Forums
Category: General Discussion
Forum Name: Classic ASP Discussion
Forum Description: Discussion on Active Server Pages (Classic ASP).
URL: https://forums.webwiz.net/forum_posts.asp?TID=10231
Printed Date: 31 March 2026 at 5:51pm
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com


Topic: Prevent Decoding ?!?
Posted By: neotrix
Subject: Prevent Decoding ?!?
Date Posted: 30 April 2004 at 6:01am

Hello Sirs,

I have come across a lil problem, and that is... I passed an Encoded  (to their Hex Value) string to an asp file via the address bar...

it was like... http://www.awazofasia.net.tc/test.asp?songlist=%59%6F%75%72%20%53%65%63%72%65%74%20%4D%65%73%73%61%67%65%20%69%73%20%54%68%69%73%21 - http://www.awazofasia.net.tc/test.asp?songlist= %59%6F%75%72%20%53%65%63%72%65%74%20%4D%65%73%73%61%67%65%20 %69%73%20%54%68%69%73%21

the test.asp simply had this

[code]<%

somevariable=Request("songlist")

Response.Write(somevariable)

%>

but when i tested it.. it automatically decoded the encoded value. how can i do something as to make it *Not* decode the string value that i pass ??

is it possible ?



-------------
http://www.muhammadbinyusrat.com/blog/" rel="nofollow - Say to the believing men..



Replies:
Posted By: neotrix
Date Posted: 30 April 2004 at 6:03am
Well Again you can see... even this forum decoded the encoded value to its Decoded meaning i mean roll the mouse over the link and see the status.

-------------
http://www.muhammadbinyusrat.com/blog/" rel="nofollow - Say to the believing men..


Posted By: Semikolon
Date Posted: 30 April 2004 at 10:37am
if you don't want it to "decode" you have to encode all the percent signs too

but what's the problem with the decoding?


Posted By: dpyers
Date Posted: 30 April 2004 at 11:48am

It wouln't take buch for someone to figure out that the delimiters are encoded.

If you are passing this with a GET, you need to look at using POST and/or encrypting the string before you encode it.

http://www.4guysfromrolla.com/webtech/010100-1.shtml - http://www.4guysfromrolla.com/webtech/010100-1.shtml



-------------

Lead me not into temptation... I know the short cut, follow me.


Posted By: neotrix
Date Posted: 01 May 2004 at 8:33am

Originally posted by Semikolon Semikolon wrote:

if you don't want it to "decode" you have to encode all the percent signs too

but what's the problem with the decoding?

the problem is, that asp decodes it emself... i dont want it to decode that line.. can this be done ?



-------------
http://www.muhammadbinyusrat.com/blog/" rel="nofollow - Say to the believing men..


Posted By: Semikolon
Date Posted: 01 May 2004 at 4:32pm
it's not ASP that is decoding it.. it's the browser and there's nothing you can do about it without replacing all the % signs with the corresponding &#number; value, which will screw everything..



Print Page | Close Window

Forum Software by Web Wiz Forums® version 12.08 - https://www.webwizforums.com
Copyright ©2001-2026 Web Wiz Ltd. - https://www.webwiz.net