KB153934 - IIS Converts %0D%0A to Hex 0DH and 20H When Submit to ODBC

Article ID: 153934

Article Last Modified on 6/23/2005

Microsoft Internet Information Server 1.0
Microsoft Internet Information Server 2.0
Microsoft Internet Information Server 3.0

This article was previously published under Q153934

We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SYMPTOMS

Try the Guestbook in the Internet Database Connector examples of the default home page of an Internet Information Server (IIS). If the following lines are typed in the Comments field of an entry:

line1
line2
line3

The following lines are replied when you query the same entry:

line1
line2
line3

NOTE: The extra spaces are inserted in front of line2 and line3.

CAUSE

%0D%0A is changed to hex 0DH and 20H.

STATUS

Microsoft has confirmed this to be a problem in Microsoft Internet Information Server 1.0.

Additional query words: textarea

Keywords: kbbug kbpending KB153934