Microsoft KB Archive/152968

= FIX: Extra Invalid Characters in String Arguments =

Article ID: 152968

Article Last Modified on 11/21/2006

-

APPLIES TO


 * Microsoft Foundation Class Library 4.2, when used with:
 * Microsoft Visual C++ 4.1 Subscription

-



This article was previously published under Q152968



SYMPTOMS
When the POST method is used to send information from an HTML form to an MFC ISAPI DLL, the last parameter in the function handling command may have extra characters that are not part of the actual input. This will happen if the last parameter is a string.



CAUSE
When the POST method is used, the input from the IIS server may contain extra characters that are not part of the input. These extra characters are sent by a browser. The code in MFC does not handle this situation correctly and appends these extra characters to the last parameter of your function if it is a string.



RESOLUTION
The sample code in the More Information section below should work around the problem.



STATUS
Microsoft has confirmed this to be a bug in the Microsoft products listed at the beginning of this article. This bug was corrected in Visual C++ 32- bit Edition version 4.2.



Sample Code
Add the following prototype to the CHttpServer derived class: #if (_MFC_VER == 0x0410)

virtual int CallFunction(CHttpServerContext* pCtxt,          LPTSTR pszQuery, LPTSTR pszCommand);

#endif

and the following code to the .CPP file for the class:

#if (_MFC_VER == 0x0410)

// Replace CMyServerExtension with the name of your // CHttpServer derived class.

int CMyServerExtension::CallFunction(CHttpServerContext* pCtxt,      LPTSTR pszQuery, LPTSTR pszCommand) {      DWORD dw = 100; char clen[100];

BOOL bRet = pCtxt->GetServerVariable("CONTENT_LENGTH", clen, &dw);

if (bRet) {          long len = atoi(clen);

*(pszQuery + len) = '\0'; }

return CHttpServer::CallFunction(pCtxt, pszQuery, pszCommand); }

#endif The CONTENT_LENGTH server variable contains the correct length of the data sent from an HTML form. This function uses that length to remove the extra characters appended at the end before parameters are extracted.

Additional query words: ISAPI POST carriage return line feed

Keywords: kbbug kbcode kbfix kbvc420fix KB152968

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.