A potentially dangerous Request.Form value was detected from the client

[Jeff]

hi

..net 3.5

I get this error in my webpage when I'm trying to store some data in the
database:
A potentially dangerous Request.Form value was detected from the client

The data I'm sending to the server is this:
"admin wrote:
<QUOTE>kkløjøredirect</QUOTE>
hhhh"

If I remove <QUOTE> then it works fine.

any suggestions on how to solve this is greatly welcome. And another thing.
What I try to do here is creating a textbox where people can post comments
or reply to other people's comments. The text above is where I try to do a
reply to an already posted comment. But I feel this is not the best
approach. Maybe the user don't understand what <QUOTE> is. And the user
might delete the QUOTE thing.. Any suggetions on how to create such comment
system is greatly welcome. Maybe you got a link to an article about that
subject?

 

[Ben Amada]

I get this error in my webpage when I'm trying to store some data in the
database: A potentially dangerous Request.Form value was detected from
the client

http://www.google.com/search?source...G=Google+Search&aq=0&oq=potentially+dangerous

 

[Steve C. Orr [MCSD, MVP, CSM, ASP Insider]]

To fix this problem you could set the page's ValidateRequest property to
false. But beware that this could potentially open a security hole on the
page, allowing hackers to potentially enter malicious input.

To mitigate this risk you could use Microsoft's free Anti-Cross Site
Scripting Library:
http://msdn2.microsoft.com/en-us/security/aa973814.aspx

--
I hope this helps,
Steve C. Orr,
MCSD, MVP, CSM, ASPInsider
http://SteveOrr.net
http://iPhonePlaza.net