Print Page | Close Window

Strange automatic amends in links

Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=9176
Printed Date: 07 April 2026 at 4:55pm
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com


Topic: Strange automatic amends in links
Posted By: dudboy
Subject: Strange automatic amends in links
Date Posted: 23 January 2004 at 7:31am

I have someone posting a link on our site which requires capital letters in the link for it to work.

For some reason the forum changes this JOCONNELL100 to JOConNELL100 and prevents the link from working

See here

http://www.clubgti.com/forum/forum_posts.asp?TID=9393&PN=1&TPN=1 - http://www.clubgti.com/forum/forum_posts.asp?TID=9393&PN =1&TPN=1

Any ideas ?

Many thanks



-------------
www.clubgti.com
www.clubgti.com/forum



Replies:
Posted By: WebWiz-Bruce
Date Posted: 23 January 2004 at 8:29am
Probally the security filters removing anything that could be used to force malicious code into the forum.

You'll just have to work around it, by linking to a different image or changing the name.


-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting


Posted By: dudboy
Date Posted: 23 January 2004 at 8:49am

Originally posted by -boRg- -boRg- wrote:

Probally the security filters removing anything that could be used to force malicious code into the forum.

You'll just have to work around it, by linking to a different image or changing the name.

Does this mean that anyone with a name like conner if they use it in a link willnot work of is it just capitalls CONNER ?

Many thanks



-------------
www.clubgti.com
www.clubgti.com/forum


Posted By: WebWiz-Bruce
Date Posted: 23 January 2004 at 9:02am
Servers are not usually case sesitive when it comes to URL's infact this is the first time I've seen a server that uses case sesitive URL's, so usually it won't matter.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting


Posted By: WebWiz-Bruce
Date Posted: 23 January 2004 at 9:10am
Incase this happens again with case sesitive URL's change the formatLink function in the functions_filters.asp file to the following:-

'********************************************
'***          Format Links         *****
'********************************************

'Format links funtion
Private Function formatLink(ByVal strInputEntry)

    'Remove malisous charcters from links and images
    strInputEntry = Replace(strInputEntry, "document.cookie", ".", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "javascript:", "javascript ", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "vbscript:", "vbscript ", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "javascript :", "javascript ", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "vbscript :", "vbscript ", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "[", "", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "]", "", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "(", "", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, ")", "", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "{", "", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "}", "", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "<", "", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, ">", "", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "|", "", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "script", "&#115;cript", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "SCRIPT", "&#083;CRIPT", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "Script", "&#083;cript", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "script", "&#083;cript", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "object", "&#111;bject", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "OBJECT", "&#079;BJECT", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "Object", "&#079;bject", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "object", "&#079;bject", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "applet", "&#097;pplet", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "APPLET", "&#065;PPLET", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "Applet", "&#065;pplet", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "applet", "&#065;pplet", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "embed", "&#101;mbed", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "EMBED", "&#069;MBED", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "Embed", "&#069;mbed", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "embed", "&#069;mbed", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "document", "&#100;ocument", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "DOCUMENT", "&#068;OCUMENT", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "Document", "&#068;ocument", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "document", "&#068;ocument", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "cookie", "&#099;ookie", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "COOKIE", "&#067;OOKIE", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "Cookie", "&#067;ookie", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "cookie", "&#067;ookie", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "event", "&#101;vent", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "EVENT", "&#069;VENT", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "Event", "&#069;vent", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "event", "&#069;vent", 1, -1, 1)
    strInputEntry = Replace(strInputEntry, "on", "&#111;n", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "ON", "&#079;N", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "On", "&#079;n", 1, -1, 0)
    strInputEntry = Replace(strInputEntry, "on", "&#111;n", 1, -1, 1)

    'Return
    formatLink = strInputEntry
End Function



-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting


Posted By: dudboy
Date Posted: 23 January 2004 at 9:45am

Many thanks

That has fixed the problem his name now works.

Does this reduce any security that could cause problems ?



-------------
www.clubgti.com
www.clubgti.com/forum



Print Page | Close Window

Forum Software by Web Wiz Forums® version 12.08 - https://www.webwizforums.com
Copyright ©2001-2026 Web Wiz Ltd. - https://www.webwiz.net