Passing html into a database field

[N_K]

Hi,

Im writing a control to send answers to FAQs to the database. Some of these answers may have html a links in them.

How should I treat these fields so that any characters harmful to the MSSQL database are converted but still parse as html when recalled later and sent to a page?

At the moment I get an error saying "A potentially dangerous Request.Form value was detected from the client " when I try to submit some text with a hyperlink in.

I'm using VB.Net.

Cheers,

NK

 

[Paszt]

Set the page's ValidateRequest property to false:

<%@ Page ... validateRequest="false" %>

And use Server.HtmlEncode, Server.HtmlDecode methods.

 

[Atanas Vanchev]

You can also use Server.HtmlEncode and Server.HtmlDecode to store the values. This way any harmful characters will be encoded as you have often seen in the url links.

 

[Paszt]

And use Server.HtmlEncode, Server.HtmlDecode methods.

You can also use Server.HtmlEncode and Server.HtmlDecode to store the values. This way any harmful characters will be encoded as you have often seen in the url links.

Just as I posted!

 

[Atanas Vanchev]

Hahaha,

Nevermind, I did not read your reply. My bad