When I try to upload a page to my already published website the transfer stops and I get this warning back from Norton: (Type as is)

Intrusion: HTTP-MS-SQL-XML-CrossSiteScripting
Intruder: localhost (1803)

I tried to add some forms yesterday which included scripts. Could this fact be causing the problem?

Yes. Cross Site Scripting (XSS) is a serious security issue. If your forms take in information and then print that information without server-side validation, you risk XSS attack. Since this kind of attack is enabled with forms, that is probably what Norton is detecting.

If these forms are posting to a database backend (like SQL) the risk is much higher, because hackers can use the volunerability to delete tables from your database.

See if this helps:

http://support.microsoft.com/default...b;en-us;252985

-John
"Fred" <(E-Mail Removed)> wrote in message news:uNtCss$(E-Mail Removed)...
When I try to upload a page to my already published website the transfer stops and I get this warning back from Norton: (Type as is)

Intrusion: HTTP-MS-SQL-XML-CrossSiteScripting
Intruder: localhost (1803)

I tried to add some forms yesterday which included scripts. Could this fact be causing the problem?

It looks like it's an XSS problem. It says that one should "validate" forms etc before loading them. How does one do this?

Fred
"John Clark" <(E-Mail Removed)> wrote in message news:uxmp8w$(E-Mail Removed)...
Yes. Cross Site Scripting (XSS) is a serious security issue. If your forms take in information and then print that information without server-side validation, you risk XSS attack. Since this kind of attack is enabled with forms, that is probably what Norton is detecting.

If these forms are posting to a database backend (like SQL) the risk is much higher, because hackers can use the volunerability to delete tables from your database.

See if this helps:

http://support.microsoft.com/default...b;en-us;252985

-John
"Fred" <(E-Mail Removed)> wrote in message news:uNtCss$(E-Mail Removed)...
When I try to upload a page to my already published website the transfer stops and I get this warning back from Norton: (Type as is)

Intrusion: HTTP-MS-SQL-XML-CrossSiteScripting
Intruder: localhost (1803)

I tried to add some forms yesterday which included scripts. Could this fact be causing the problem?