Hi Ben J,

I'm with Ben T.  To set your mind at ease, remove the CRLFs and test.

Cheers,
Paul.

-----Original Message-----
From: Ben Timby [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, 4 September 2002 5:21 AM
To: ActiveServerPages
Subject: RE: IIS bug with <pre> CRLF</pre> or am I carazy????

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ben, I am sorry, I just don't buy it. I would imagine that there has
to be something else wrong w/ the app other than a bunch of CRLF's in
the page. I would wait until you can do some testing before I would
point any fingers. I guess stranger stuff has happened, but I would
base my conclusion on hard facts, and not speculation.

Ben Timby
Webexcellence
PH: 317.423.3548 x23
TF: 800.808.6332 x23
FX: 317.423.8735
[EMAIL PROTECTED]
www.webexc.com 

- -----Original Message-----
From: Ben Jacob [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, September 03, 2002 6:40 AM
To: ActiveServerPages
Subject: Re: IIS bug with <pre> CRLF</pre> or am I carazy????



no the prograner just hit the [enter]  key, when u look on HEX u see
0d10 0d10 for two blocks
we found that ot was working like that for almost a year, but this
page will
take the server down
theb only change we can think of was sp3 ?

beny
- ----- Original Message -----
From: "Sam Thompson" <[EMAIL PROTECTED]>
To: "ActiveServerPages" <[EMAIL PROTECTED]>
Sent: Monday, September 02, 2002 10:36 AM
Subject: Re: IIS bug with <pre> CRLF</pre> or am I carazy????


> what did the code look like?
>
> <pre><%=CrLf%></pre> ?
>
> Sam Thompson
> ----------------------------------------------
> 2cs Communications Ltd
> http://www.2cs.com
> [EMAIL PROTECTED]
> T: 01473 622263
> F: 01473 622515
> -----------------------------------------------
> ----- Original Message -----
> From: "Ben Jacob" <[EMAIL PROTECTED]>
> To: "ActiveServerPages" <[EMAIL PROTECTED]>
> Sent: Saturday, August 31, 2002 11:46 PM
> Subject: IIS bug with <pre> CRLF</pre> or am I carazy????
>
>
> > Here is a weird story/IIs bug. For 4 days production server was
> > down, 
> every
> > thing look normal, no error on the log but the sites were
> > behaving like under an external attack. It toke to serve a asp
> > page up to 5 minutes 
and
> if
> > we did not shut down the IIS after few hours the server become
> unaccessible
> > and require power hard boot. We look every where found nothing (I
> > was 
sure
> > it is a virus or Trojan). By try and error we identified one site
> >  that cause the problem (there are more than  30 sites there).
> >
> > Make the long story short we found a asp file with <pre></pre> 
> > with 480 CRLF in between. Don't ask me why the html programmer
> > did it, I do not 
> care,
> > but if it is true it means that a simple html code can take down
> > a 
server
> > (even a user on a forum / form that allow to post text with html
> > tags) 
> >
> > Can some one test it? For some internal problems we will not have
> > access 
> to
> > test server till Tuesday.  And I am not daring to try it on
> > production 
one
> > more time.
> >
> > I am not even sure it is the problem. All we know is that the
> > site with 
> this
> > asp file was causing the problem and I can not take them down one
> > more 
> time.
> >
> >
> >
> > thank
> >
> > Beny
> >
> >
> >
> > ---
> > You are currently subscribed to activeserverpages as: [EMAIL PROTECTED]
> > To unsubscribe send a blank email to
> %%email.unsub%%
> >
>
>
> ---
> You are currently subscribed to activeserverpages as:
> [EMAIL PROTECTED] To unsubscribe send a blank email to
%%email.unsub%%
>





- ---
You are currently subscribed to activeserverpages as: [EMAIL PROTECTED]
To unsubscribe send a blank email to
%%email.unsub%%

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.0.4

iQA/AwUBPXULrPnby1cCm2Q8EQJHeQCfcf95lgqK4gjYwxAj1FUaeaYc1KcAn0pZ
6jRnW2yKNlJM+xGUx/m4HIYa
=RiZU
-----END PGP SIGNATURE-----



---
You are currently subscribed to activeserverpages as: [EMAIL PROTECTED]
To unsubscribe send a blank email to
%%email.unsub%%

---
You are currently subscribed to activeserverpages as: [email protected]
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to