Unable to enter data into database

Question

Hi All,

I have a gridview, I am allowing user to enter HTML data while editing a record in a gridview row. When I am clicking update button then I am getting this message

A potentially dangerous Request.Form value was detected from the client (ctl00$ContentPlaceHolder1$gvCommentDetails$ctl02$ctl04="This is message,
This is mark. ...").

Please let me know how could I resolve this , as I am using sql data source to update the gridview record.

=============

" SelectCommand=" SELECT c.Id,c.Name, c.message FROM Table1 c UpdateCommand=" UPDATE Table1 SET Name = @Name, message = @message WHERE Id= @Id">

Thanks in adavance

Answer 1

Try updating the following in your web.config

<pages validateRequest="false">

Answer 2

Hi Zerotoinfinite,

Basically it means that you can't post values containing HTML ( or script ) tags to the server.

In other words - if you have a textbox and the visitor enters something

This is message, [someHtmlTagGoesHere]

or

This is mark. ...[someTagGoesHere]

and then presses Submit button this error will occur since the posted value(s) contains HTML tags.

To disable request validation on a page add the following directive to the existing "page" directive in the file (you will need to switch to the HTML view for this): ValidateRequest="false"

Hope this helps...