产品使用及交流论坛

注册

 

QQ登录

只需一步,快速开始

发新话题 回复该主题

跪求管理员和高手帮忙-修改栏目管理内的设置时出错!! [复制链接]

1#
打开后台——栏目管理进入栏目管理然后点右边的“导航设置”然后进入自定义设置的时候,提交就会报错,跪求各位高手解决啊!!
  我已经下载好几个模板试过了,都存在这个问题,但是其他的模块管理全部正常;权限是完全控制,所以绝对不是权限问题

报错信息为:
Server Error in '/' Application.
--------------------------------------------------------------------------------

A potentially dangerous Request.Form value was detected from the client (Content="<script src="/includ...").
Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. To allow pages to override application request validation settings, set the requestValidationMode attribute in the httpRuntime configuration section to requestValidationMode="2.0". Example: <httpRuntime requestValidationMode="2.0" />. After setting this value, you can then disable request validation by setting validateRequest="false" in the Page directive or in the <pages> configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case. For more information, see http://go.microsoft.com/fwlink/?LinkId=153133.

Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (Content="<script src="/includ...").

Source Error:

The source code that generated this unhandled exception can only be shown when compiled in debug mode. To enable this, please follow one of the below steps, then request the URL:

1. Add a "Debug=true" directive at the top of the file that generated the error. Example:

  <%@ Page Language="C#" Debug="true" %>

or:

2) Add the following section to the configuration file of your application:

<configuration>
   <system.web>
       <compilation debug="true"/>
   </system.web>
</configuration>

Note that this second technique will cause all files within a given application to be compiled in debug mode. The first technique will cause only that particular file to be compiled in debug mode.

Important: Running applications in debug mode does incur a memory/performance overhead. You should make sure that an application has debugging disabled before deploying into production scenario.
1.jpg (, 下载次数:59)

jpg(2011/5/30 3:55:53 上传)

1.jpg

分享 转发
TOP
2#

把你自定义的内容也贴出来
TOP
3#

没有自定义,都是模板里面原来的内容,只是点进去修改而已!
TOP
4#

服务器安全设置过高了,禁止你提交到带<script脚本的内容
TOP
5#

版主,你做好事做到底啊,这个要怎么弄修改啊,我在线等
TOP
6#

检查你的web.config是否有下面这一段
    <pages validateRequest="false" enableEventValidation="false" enableViewStateMac="false" viewStateEncryptionMode="Never" />
其中validateRequest="false" 就表示.net可以提交任何功能。

如果有这一段你就得找主机商了,应该是服务器安全设置过高,服务器具体怎么设置我也不懂,我对服务器配置不是很熟
TOP
7#

我看了一下,是有这一段的,但是我是自己搭建的IIS空间,不是在的空间上空间啊
TOP
8#

已经解决了,跟大家分享一下,后来经检查是.NET版本的问题,把他改成2.0版本就可以了,我以前的是4.0
TOP
发新话题 回复该主题