Home/ Questions/Q 5984153
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-22T22:20:01+00:00

I have a string parameter I pass around using the querystring, I’ll call it:

  • 0

I have a string parameter I pass around using the querystring, I’ll call it: Request.QueryString[“x”]. If i manually enter a URL like: mypage.aspx?x=co%3Csub%3E2, asp.net doesn’t have the chance to get its hands on the value before throwing an error. Is there a way to safely allow this value to be pulled down and validated using my own logic WITHOUT turning validateinput off?

The problem is that we have custom error pages which send me an e-mail when they’re hit. Bots pummel our site, and on occasion, I’ll come into work and have 500 e-mails from errors like this waiting in my inbox. I’d like to do my own validation and display my own error message on the page they’re trying to access.

Thanks!

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I don’t think you can do that without turning validateinput off. Could you encode your querystring somehow so that ASP will validate it?

    • 0