Microsoft KB Archive/933523

= When an Internet Security and Acceleration Server 2004 client performs an action that uses the HTTP POST method, the action may be performed multiple times =

Article ID: 933523

Article Last Modified on 12/4/2007

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server 2004 Standard Edition
 * Microsoft Internet Security and Acceleration Server 2004 Enterprise Edition

-



SYMPTOMS
When a Microsoft Internet Security and Acceleration (ISA) Server 2004 client performs an action that uses the HTTP POST method, the action may be performed multiple times. For example, if a user on an ISA Server 2004 client adds an item to a shopping cart by using a Web page form, the item may be added to the cart three times.



CAUSE
This problem occurs when the following rules are configured in ISA Server 2004 in the following order:
 * 1) A rule is configured that allows anonymous access to HTTP protocol, where at least one content type is selected in Selected content on the content tab.
 * 2) A rule is configured that allows All Authenticated Users access to the HTTP protocol and to all content types.



RESOLUTION
To resolve this problem, use one of the following methods.

Method 1: Install ISA Server 2004 Service Pack 3 (SP3)
This problem is fixed in ISA Server 2004 SP3.

For more information about how to obtain ISA Server 2004 SP3, click the following article number to view the article in the Microsoft Knowledge Base:

891024 How to obtain the latest ISA Server 2004 service pack

Method 2: Install the ISA Server 2004 hotfix package that is dated March 8, 2007
For more information about the ISA Server 2004 hotfix package that is dated March 8, 2007, click the following article number to view the article in the Microsoft Knowledge Base:

933524 Description of the ISA Server 2004 hotfix package that is dated March 8, 2007

After you install the hotfix package, the hotfix is turned off. To enable the hotfix, you must run the following script on the computer: const USE_FILE_EXTENSION_AS_CONTENT_TYPE_Default     = 0 const USE_FILE_EXTENSION_AS_CONTENT_TYPE_IfNotExist  = 1 const USE_FILE_EXTENSION_AS_CONTENT_TYPE_Always      = 2

Const SE_VPS_GUID = &quot;{143F5698-103B-12D4-FF34-1F34767DEabc}&quot; Const SE_VPS_NAME = &quot;UseFileExtensionAsContentType&quot; Const SE_VPS_VALUE = 1

Sub SetValue

' Create the root obect. Dim root ' The FPCLib.FPC root object Set root = CreateObject(&quot;FPC.Root&quot;)

'Declare the other objects needed. Dim array      ' An FPCArray object Dim VendorSets ' An FPCVendorParametersSets collection Dim VendorSet  ' An FPCVendorParametersSet object

' Get references to the array object ' and the network rules collection. Set array = root.GetContainingArray Set VendorSets = array.VendorParametersSets

On Error Resume Next Set VendorSet = VendorSets.Item( SE_VPS_GUID )

If Err.Number <> 0 Then Err.Clear

' Add the item Set VendorSet = VendorSets.Add( SE_VPS_GUID ) CheckError WScript.Echo &quot;New VendorSet added... &quot; & VendorSet.Name

Else WScript.Echo &quot;Existing VendorSet found... value- &quot; & VendorSet.Value(SE_VPS_NAME) End If

if VendorSet.Value(SE_VPS_NAME) <> SE_VPS_VALUE Then

Err.Clear VendorSet.Value(SE_VPS_NAME) = SE_VPS_VALUE

If Err.Number <> 0 Then CheckError Else VendorSets.Save false, true CheckError

If Err.Number = 0 Then WScript.Echo &quot;Done with &quot; & SE_VPS_NAME & &quot;, saved!&quot; End If       End If    Else WScript.Echo &quot;Done with &quot; & SE_VPS_NAME & &quot;, no change!&quot; End If

End Sub

Sub CheckError

If Err.Number <> 0 Then WScript.Echo &quot;An error occurred: 0x&quot; & Hex(Err.Number) & &quot; &quot; & Err.Description Err.Clear End If

End Sub

SetValue



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.

Keywords: kbbug kbfix kbprb atdownload kbexpertiseadvanced KB933523

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.