preventing hacking

[timcadieux]

Hi folkz, we were told to make sure we had handled all hackable possibilies. I was told to check that any querysting requests were handled and to ensure that querystring % were also handled.

Using

	iRecordId = Request.QueryString("id")
		If IsNumeric(iRecordId) Then
			iRecordId = CLng(iRecordId)
		Else
			iRecordId = 0
		End If

I can can't seem to prevent an error when someone types id=%

??

 

[DotNetGnat]

use Regex() function.

-DNG

 

[DotNetGnat]

here is the link with more information...

http://www.rgagnon.com/jsdetails/js-0063.html

-DNG