February 25, 2011 at 9:50 am
I have a website that allows a user to paste a document, that is then loaded into an FTI Column within a SQL Server 2008 DB.
It works fine unless the document has embedded links, such as:
<http://img.icbddr.com/images/pixel.gif>
How do i configure my SQL Server DB to permit these embedded links within a pasted document?
Thanks
February 25, 2011 at 10:49 am
It doesn't look like a database issue. It seems more like an issue of the app sending the data to the DB.
Did you try to run the stored procedure that will insert the data into the target table (assuming you're using a sproc instead of a direct insert...) with the document parameter being just the embedded link you posted? What error message did you get? If none it's most probably the app causing the problem.
February 25, 2011 at 11:26 am
Yes this is an asp.net issue and nothing to do with the database at all. This is a precaution in .net to prevent certain types of injection attacks like xss (cross site scripting).
You can enable this per page as indicated in the error message but be warned this can be very dangerous in a public application like uploading a resume. There are some things you can do in javascript to simulate the HTMLEncode method but be careful here too because it is really easy to get around client side stuff like this. Here is a link to a site with some pretty good explanations.
_______________________________________________________________
Need help? Help us help you.
Read the article at http://www.sqlservercentral.com/articles/Best+Practices/61537/ for best practices on asking questions.
Need to split a string? Try Jeff Modens splitter http://www.sqlservercentral.com/articles/Tally+Table/72993/.
Cross Tabs and Pivots, Part 1 – Converting Rows to Columns - http://www.sqlservercentral.com/articles/T-SQL/63681/
Cross Tabs and Pivots, Part 2 - Dynamic Cross Tabs - http://www.sqlservercentral.com/articles/Crosstab/65048/
Understanding and Using APPLY (Part 1) - http://www.sqlservercentral.com/articles/APPLY/69953/
Understanding and Using APPLY (Part 2) - http://www.sqlservercentral.com/articles/APPLY/69954/
February 25, 2011 at 11:48 am
I am not using an SP, i am using
"InsertIntoDocuments(strFileExtension, fileName + strFileExtension, TextBoxResume.Text);".
I wonder if it is an IIS issue?
Thanks !
February 25, 2011 at 11:50 am
Thanks Sean!
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply
