Getting 500 internal server errors when I have a% symbol in the query string

I am trying to diagnose a problem that a client site has encountered. Basically, when you search for addresses on your website, you can specify a character %to search for in a pattern. For example, you can search Be%for returns Belfast, etc.

This queries the database and then redirects you to the results page, passing the search criteria to querystring, e.g. results.aspx?criteria=Search%20criteria%20is%20Be%

This caused problems if you were looking for something like %Belfsince it %Beis a reserved character in URL encoding. So I encoded it to replace %with %25(URL character encoding representation %). This works fine on my test computer, where the url is now results.aspx?criteria=Search%20Criteria%20is%20%25Be.

This, however, does not work on our customer site for some reason, and I cannot understand why. The page saves an error:

Error code: 500 Internal server error. The request was rejected by the HTTP Filter. Contact your server administrator. (12217)

anytime you are looking for something like %Be %Fa %Feetc. etc.

Does anyone know if there is an IIS setting for this or something similar?

+3
source share
2

URLScan, . URLScan , . SQL-. , . ISAPI - , URLScan.

+3
+2

Source: https://habr.com/ru/post/1730419/


All Articles