Re: Pulling the querystring off a 404 redirect

From: Ray at <%=sLocation%> [MVP] (%=sLocation%)
Date: 04/12/04


Date: Mon, 12 Apr 2004 16:18:26 -0400

I'm beginning to suspect that the behavior is different in IIS6 in WS2003.
Unfortunately, where I am, the only WS2003 servers don't have IIS on them,
and I can't install it. I think I'll have to install 2003 on my intranet
server tomorrow. ;]

Ray at work

"Ray at <%=sLocation%> [MVP]" <myfirstname at lane34 dot com> wrote in
message news:uAv83oMIEHA.716@TK2MSFTNGP12.phx.gbl...
> I'm sorry. When I was testing here, I was not going to
> http://site/page.asp?x=d. I was going to something more like:
> http://site/dir/?kjd=kjdf
>
> When you go to a non-existent page, you see the 404 url in the browser.
For
> a non-existant directory, the URL does not change. Why? I guess because
> this is what someone decided when creating IIS or IE or something! I
can't
> find any way to carry the querystring over as you've been trying to do...
>
> Ray at work
>
>
>
>
>
> "Scott McNair" <scott.mcnair@sfmco.takethispartout.com> wrote in message
> news:Xns94C994DF87B95sfmco@207.46.248.16...
>
> > Thanks Ray,
> >
> > Unfortunately it still doesn't work, since the querystring is getting
> > lost when it's getting redirected to the asp page, at least on my box.
> >
> > Here's an example of code I was using before, and what it returns for
> > the page I went to [http://localhost/blah.asp?abc=123]:
> >
> > The error # is <%=Split(Request.ServerVariables("QUERY_STRING"),";")
> > (0)%><br>
> > The bad page is <%=Split(Request.ServerVariables("QUERY_STRING"),";")
> > (1)%><br>
> >
> > It returns the following:
> >
> > The error # is 404
> > The bad page is http://localhost/blah.asp
> >
> > The address it shows in the address bar is
> > [http://localhost/Errors/Error.asp?404;http://localhost/blah.asp].
> >
> > I tried running your code, and it returns nothing (since the querystring
> > is being stripped on forwarding).
> >
> > Thanks,
> > Scott
>
>



Relevant Pages

  • Re: Microsoft Security Advisory MS 03-007
    ... > You say "IIS servers are actively being compromised already, ... -- permissions are checked on httpext.dll to see if Anonymous request using ... CONFIGURATIONS OF THE IIS LOCKDOWN TOOL DO LEAVE WEBDAV ...
    (Focus-Microsoft)
  • RE: Microsoft Security Advisory MS 03-007
    ... announcement covers IIS 5.1 but not IIS 6, ... > You say "IIS servers are actively being compromised already, ... -- permissions are checked on httpext.dll to see if Anonymous request ... CONFIGURATIONS OF THE IIS LOCKDOWN TOOL DO LEAVE WEBDAV ...
    (Bugtraq)
  • Re: Microsoft Security Advisory MS 03-007
    ... announcement covers IIS 5.1 but not IIS 6, ... > You say "IIS servers are actively being compromised already, ... -- permissions are checked on httpext.dll to see if Anonymous request ... CONFIGURATIONS OF THE IIS LOCKDOWN TOOL DO LEAVE WEBDAV ...
    (Bugtraq)
  • RE: Microsoft Security Advisory MS 03-007
    ... announcement covers IIS 5.1 but not IIS 6, ... > You say "IIS servers are actively being compromised already, ... through, and if it carried the exploit, compromise could occur. ... CONFIGURATIONS OF THE IIS LOCKDOWN TOOL DO LEAVE WEBDAV ...
    (Focus-Microsoft)
  • Re: Howto refresh IIS 6 Application pool identity credential info
    ... The Application Servers are load balanced clustered, ... HostHeader names in IIS, it has a CNAME in DNS referencing ... Only account A has access to database DB-A ...
    (microsoft.public.inetserver.iis.security)