Getting warning messages in event viewer log - what should I do?

Question

Here is the log(just the summary).  I'm not sure what I can do to avoid getting this warning messages.

Thank you.

Date: 7/29/2010
Time: 1:26:45 PM
Type: Warning
User: N/A
Computer: xxxxxxxx

Source: ASP.NET 2.0.50727.0
Category: Web Event
Event ID: 1309

Event code: 3003
Event message: A validation error has occurred.
Event time: 7/29/2010 1:26:45 PM
Event time (UTC): 7/29/2010 8:26:45 PM
Event ID: 9464a702756441aba8b9674e12997cde
Event sequence: 2271
Event occurrence: 4
Event detail code: 0

Process information:
    Process ID: 4240
    Process name: w3wp.exe
    Account name: NT AUTHORITY\NETWORK SERVICE
 
Exception information:
    Exception type: HttpRequestValidationException
    Exception message: A potentially dangerous Request.Form value was detected from the client (txtPost="T755Ax  <a href="http://fqsn...").

 

Answer 1

Hi Elly,

I would think this error has got nothing to do with SQL server or its security. Just googled and found some interesting links for this problem

http://stackoverflow.com/questions/81991/a-potentially-dangerous-request-form-value-was-detected-from-the-client

http://www.cryer.co.uk/brian/mswinswdev/ms_vbnet_server_error_potentially_dangerous.htm

 

---

Thanks, Leks

Answer 2

The services w3wp.exe is a IIS Application Pool process and the Source is ASP.NET . Most likely that an automated script is posting into your forms online i.e Customer feedback or Contact Us form. Because ASP.NET has validation for scripts inbuilt and switched on it will throw a Exception which will be logged into your Event viewier. You should consider adding a capatcha control to your forms and your will probably reduce the amount of spam posting getting to a ASP.NET error level.

---

http://www.unwindsoftware.com/blog/