RE: Scrubbing user inputs

It's hard to tell what's happening without code, but I assume you are getting a successful post and are failing on the redirect. I work in PLSQL Web Toolkit every day and my code for submit is typically:

initialize

perform dml operations

owa_util.redirect_url

If this is what you're doing try commenting out the owa_util.redirect_url and just do an htp.p of the url you've built. Run the form with a pasted value you've identified as causing the error. Then look at the url provided.

At one point we had a form that echoed all parameters back to the original form when the dml failed. It worked ok unless the user added too much text to the comments field. The URL built was too long and failed. It seems you can go to about 1500 characters before the URL fails.

Since you had a PLSQL error, you may be doing an encode URL that's throwing the error.

Hope this helps,
Ray

---

Hello all,

 

I’ve built a simple html form using the pl/sql web toolkit that has a place for the user to include comments.

It’s been in production for months if not years.

 

Recently, we’ve experienced errors related to the content of the comments
and I’ve traced it to users cutting and pasting content from MS Word directly into the web form comments field.

Even that is fine except for when the user attempts to paste in bullets.

 

I’ll have to handle this on the client-side. Any ideas?

 

 

Regards,

 

Monty