FIX: Extra Invalid Characters in String Arguments

• The Microsoft Foundation Classes (MFC), included with: Microsoft Visual C++, 32-bit Edition, version 4.1

SYMPTOMS

When the POST method is used to send information from an HTML form to an MFC ISAPI DLL, the last parameter in the function handling command may have extra characters that are not part of the actual input. This will happen if the last parameter is a string.

CAUSE

When the POST method is used, the input from the IIS server may contain extra characters that are not part of the input. These extra characters are sent by a browser. The code in MFC does not handle this situation correctly and appends these extra characters to the last parameter of your function if it is a string.

RESOLUTION

The sample code in the More Information section below should work around the problem.

STATUS

Microsoft has confirmed this to be a bug in the Microsoft products listed at the beginning of this article. This bug was corrected in Visual C++ 32- bit Edition version 4.2.

MORE INFORMATION

Sample Code

Add the following prototype to the CHttpServer derived class:

   #if (_MFC_VER == 0x0410)

       virtual int CallFunction(CHttpServerContext* pCtxt,
           LPTSTR pszQuery, LPTSTR pszCommand);

   #endif

   #if (_MFC_VER == 0x0410)

   // Replace CMyServerExtension with the name of your
   // CHttpServer derived class.

   int CMyServerExtension::CallFunction(CHttpServerContext* pCtxt,
       LPTSTR pszQuery, LPTSTR pszCommand)
   {
       DWORD dw = 100;
       char clen[100];

       BOOL bRet = pCtxt->GetServerVariable("CONTENT_LENGTH", clen, &dw);

       if (bRet)
       {
           long len = atoi(clen);

           *(pszQuery + len) = '\0';
       }

       return CHttpServer::CallFunction(pCtxt, pszQuery, pszCommand);
   }

   #endif