Re: Form Post Submittals - Sporadic? Caused by new patch?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Robert Aldwinckle (robald_at_techemail.com)
Date: 02/18/04 

Date: Tue, 17 Feb 2004 21:01:01 -0500

> So im guessing IE is doing something wrong with cacheing
> the page.
> Also its only happened on SSL pages so far.

There is a known workaround for another symptom which may help.
Try enabling caching of encrypted pages. I.e. uncheck:
    Do not save encrypted pages to disk
(Options, Advanced tab, Security section)

Good luck

Robert Aldwinckle 

---
"iebug@Test.co.uk" <anonymous@discussions.microsoft.com> wrote in message
news:7f3601c3f283$0f412130$7d02280a@phx.gbl...
> all the scripts this is currently effecting are self
> calling forms, ie test.cgi has ACTION=test.cgi
>
> So im guessing IE is doing something wrong with cacheing
> the page.
> Also its only happened on SSL pages so far.
>
> Can anyone confirm the bug on a non SSL page, or
> on a page that submits to something else?
>
>
> >-----Original Message-----
> >Hi guys
> >
> >Just found you, amazed your so few. Spent the last three
> >weeks trying to troubleshoot this one. I was beginning to
> >think I was on my own with this frustrating problem (see
> >subject: "Form values not reaching action page") on this
> >newsgroup. There does appear to be growing evidence that
> >a serious flaw exists somewhere in the XP Pro/IE.6.
> >client browser setup. Will be looking out for you.
> >
> >I have my windows autoupdate permanently turned off to
> >prevent this type of scenario. I manualy update only when
> >I need to. For reference my browser version is:
> >6.0.2800.1106.XPSP1.020828-1920, update: SP1;Q810487.
> >As far as I am aware I have not recieved the recent patch
> >zeph refers to dated: Feb 2, 2004. The behaviour I get
> >is, never the less, similar to what you are experiencing.
> >Comments?
> >
> >Among the server side scripting technologies I note that
> >PHP & PERL have been tested. I can add ColdFusion MX to
> >the list. For my client/server details see above posting.
> >
> >I shall watch this space.
> >
> >Regards, Steve
> >
> >>-----Original Message-----
> >>A very similar thing started happening to me too when
> >using
> >>IE with the newest security patch, just released.
> >>
> >>Sporadically, and only when using SSL, *none* of the
> >data
> >>from my POST form gets passed to my perl5 cgi script
> >which
> >>is using the CGI.pm module methods to retrieve the
> >>data from the form.
> >>
> >>Pressing Browser Back button and resubmitting the form
> >>almost always works, but not always, like the previous
> >>person's experience described below.  Reloading the
> >>page usually makes it fail the first post or 2 after
> >>reloading, although from time to time it does work.
> >>
> >>It is very intermittent.
> >>
> >>Does anyone know what can be done about this problem.
> >>Please email me directly if so.
> >>
> >>Jim
> >>
> >>
> >>
> >>>-----Original Message-----
> >>>We are seeing the same problem on our live systems but
> >>have been
> >>>unable to reproduce it (so far) on a test box.  The
> >>problem occurs
> >>>using a simple POST form (no javascript, no URLs with
> >>user/password,
> >>>etc).  This error occurs sporadically.  Pressing the
> >>browser back
> >>>button and resubmitting the form almost always works
> >>(though I have
> >>>seen it fail twice in a row). This problem does not
> >occur
> >>with an
> >>>unpactched IE6 (that's the Feb 2, 2004 security
> >patch).
> >>The problem
> >>>also does not occur using other browsers.  We have seen
> >>the problem
> >>>occur with the patched IE client running on NT, 2000,
> >and
> >>XP.
> >>>
> >>>If you are seeing a similar problem please email me
> >with
> >>a description
> >>>of your configuration.
> >>>
> >>>- zeph
> >>>
> >>>
> >>>"cfinlay" <cwfsp@*NO-SPAMPLZ*hotmail.com> wrote in
> >>message news:<A4091CD1-2004-4EC4-A9B8-
> >>D417F7096A1B@microsoft.com>...
> >>>> After patching to the new cumulative security update,
> >>IE seems to
> >>>only sporadically post form information between pages.
> >>It doesn't
> >>>matter whether or not it's posting back to the PHP it's
> >>currently on
> >>>or to another one, as it just sometimes forgets the
> >>information as it
> >>>posts.  This has caused tons of problems in my
> >workplace
> >>where we rely
> >>>on form submittals to move and update information, and
> >if
> >>it doesn't
> >>>work, then we're stuck..
> >>>>
> >>>> Is this sort of thing intentional in the update?  Is
> >>there a way to fix it?  Has anyone else seen this
> >>behavior?  So far we're looking at 10 machines with the
> >>same problem!
> >>>>
> >>>> Thanks,
> >>>> -C
> >>>.
> >>>
> >>.
> >>
> >.
> >

Relevant Pages

  • Re: Web services & SSL
    ... SSL is still an excellent way of securing your transmissions even ... though you're not using a 'browser'. ... but SSL is great because it's tried and tested and takes place at ... My understanding is that when using HTTPS, ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: Problems with password sites in IE and MSN Messenger
    ... > Messenger or access sites which require me to enter a password such as ... You can try making sure that your browser is set to handle SSL. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: [PHP] security question
    ... > Security is not something one can just slap on to the site after one ... My web hoster support a shared SSL protocol, ... browser to the server, and data going back from server to browser, is ...
    (php.general)
  • Re: SSL - Man-in-the-Middle filtering
    ... it will warn the user if their *browser* doesn't trust the CA. SSL solutions like Bluecoat are used pretty widely to allow network administrators/security groups/compliance groups visibility into that traffic. ... Typically where SSL is being intercepted and re-signed by the appliance, a GPO push is down of the new CA to ensure users aren't constantly getting certificate warnings. ... with real-world attacks from CORE IMPACT. ...
    (Focus-IDS)
  • Re: Problem with Response.Redirect and Proxy Server
    ... Think think about it this way - a browser is literally ... It is a good piece of info to know that there is a reverse proxy. ... and it is logical to request that SSL be turned off. ... Not being proxy server informed, I have no idea if this is true. ...
    (microsoft.public.inetserver.iis)