Captcha errors

[Brewhaus]

Since upgrading to Gold R6 (from 7.0.7) we are getting a tremendous number of errors in the error log, and they appear to relate to Captcha. In a little more than 12 hours we have gotten more than 200 errors, however, they all appear to have been focused in a 15 minute window, and all note Captcha in the error information. Has anyone else seen this issue, and how do we resolve it?

[Shopping Cart Admin]

Hello Rick,

Sounds like a bot to me.

[Brewhaus]

This has been a repeated issue, and only on one of our two AC sites. An example is below. If you think that this is a bot then I will just delete the errors from the log.

An error has occured at https://www.brewhaus.com/Captcha.ashx?w ... 1&t=063738
Exception: Input string was not in a correct format. Stack Trace: at System.Number.StringToNumber(String str, NumberStyles options, NumberBuffer& number, NumberFormatInfo info, Boolean parseDecimal) at System.Number.ParseInt32(String s, NumberStyles style, NumberFormatInfo info) at System.Convert.ToInt32(String value) at AbleCommerce.Captcha.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

Another that seems to be repeating is with the e-mail list subscription. Two errors come up on that:

An error has occured at http://www.brewhaus.com/Subscription.as ... 2713115843
Exception: Exception of type 'System.Web.HttpUnhandledException' was thrown. Stack Trace: at System.Web.UI.Page.HandleError(Exception e) at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) at System.Web.UI.Page.ProcessRequest() at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) at System.Web.UI.Page.ProcessRequest(HttpContext context) at ASP.subscription_aspx.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) Inner Exception: Exception has been thrown by the target of an invocation. Inner Exception Stack Trace: at System.RuntimeMethodHandle._InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeType typeOwner) at System.RuntimeMethodHandle.InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, Signature sig, MethodAttributes methodAttributes, RuntimeType typeOwner) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at CommerceBuilder.DomainModel.EntityWithTypedId`1.Save() at CommerceBuilder.Marketing.EmailListSignup.Activate() at AbleCommerce._Subscription.Page_Load(Object sender, EventArgs e) at System.Web.Util.CalliHelper.EventArgFunctionCaller(IntPtr fp, Object o, Object t, EventArgs e) at System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e) at System.EventHandler.Invoke(Object sender, EventArgs e) at System.Web.UI.Control.OnLoad(EventArgs e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) Inner Exception: Exception has been thrown by the target of an invocation. Inner Exception Stack Trace: at System.RuntimeMethodHandle._InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeType typeOwner) at System.RuntimeMethodHandle.InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, Signature sig, MethodAttributes methodAttributes, RuntimeType typeOwner) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at CommerceBuilder.DomainModel.EntityWithTypedId`1.Save() at CommerceBuilder.Marketing.EmailListSignup.Activate() at AbleCommerce._Subscription.Page_Load(Object sender, EventArgs e) at System.Web.Util.CalliHelper.EventArgFunctionCaller(IntPtr fp, Object o, Object t, EventArgs e) at System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e) at System.EventHandler.Invoke(Object sender, EventArgs e) at System.Web.UI.Control.OnLoad(EventArgs e) at System.Web.UI.Control.LoadRecursive() at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

follows about five seconds later by:

An error has occured at http://www.brewhaus.com/Subscription.as ... 2713115843
Exception: Request timed out. Stack Trace:

Any thoughts?

[ForumsAdmin]

Seems like something wrong with the URL requests.

A quick workaround for the captcha problem could be this

Open Captcha.ashx file and change all instances of

Code: Select all

Convert.ToInt32

with

Code: Select all

AlwaysConvert.ToInt

[Brewhaus]

This seems to be on only one of the two websites, which both run the same version of AC, on the same server, and were built from the same files (one is just a different color scheme and set of categories in the left sidebar, when it really comes down to it). I can certainly make the change mentioned above, but before I do I want to ask if you think that anything more is going on here, and if the suggested change to the file will have any potential negative effects (ie. is there any reason NOT to do it?).

[ForumsAdmin]

There is no reason not to do it. The change above is harmless.

[jmestep]

There is a bug in the email signup- the default email message and the signup with verification have bad links. The email signup with notification has a bad link, but it is the unsubscribe link. I reported a bug last week after I ran into it and it is supposed to be fixed in R7.

[Brewhaus]

There is a bug in the email signup- the default email message and the signup with verification have bad links. The email signup with notification has a bad link, but it is the unsubscribe link. I reported a bug last week after I ran into it and it is supposed to be fixed in R7.

I assume that we need to live with the 'subscription' errors in the error log for now, then?

[ForumsAdmin]

Judy the bug you reported has been fixed. But the issues mentioned here appear to be different. At least the error on captcha page is clearly because of invalid input in the URL. Likely by some bot. The solution posted above should work. Just change Convert.ToInt32 to AlwaysConvert.ToInt

[jmestep]

Live with the subscription errors

Live with the subscription errors

To get rid of them for now, I've had to change the email template to not include the links, not use signup with confirmation, and replace the unsubscribe link with some generic wording about changing their subscription preferences in their account. This won't help if they are not a user on the site, but it did allow people to subscribe and stop the errors. I haven't had time to see if there is something I can do in code.

More info I just got. This fix has been suggested:

Code: Select all

            if (action == "remove")
            {
                //delete user from the list
                int emailListId = AlwaysConvert.ToInt(Request.QueryString["list"]);
                string email = Request.QueryString["email"];
                string key = Request.QueryString["key"];
                AbleContext.Current.Database.BeginTransaction();
                ..............................................
                ..............................................
                ..............................................
                AbleContext.Current.Database.CommitTransaction();
            }
            else if (action == "confirm")
            {
                //ADD USER TO LIST
                int emailListId = AlwaysConvert.ToInt(Request.QueryString["list"]);
                string email = Request.QueryString["email"];
                string key = Request.QueryString["key"];
                AbleContext.Current.Database.BeginTransaction();
                ..............................................
                ..............................................
                ..............................................
                AbleContext.Current.Database.CommitTransaction();
            }

Be sure to add
using CommerceBuilder.Common;

[Brewhaus]

Which file does this go into? Subscription.aspx.cs? The code above appears to shorten the section of code, so I want to double-check before doing anything.

Another error that we are seeing a very large amount of since upgrading is on images:

An error has occured at http://www.brewhaus.com/GetImage.ashx?P ... ter-Unit.x';",)`&maintainAspectRatio=true&maxHeight=300&maxWidth=300
Exception: Illegal characters in path. Stack Trace: at System.IO.Path.CheckInvalidPathChars(String path) at System.Security.Permissions.FileIOPermission.HasIllegalCharacters(String[] str) at System.Security.Permissions.FileIOPermission.AddPathList(FileIOPermissionAccess access, AccessControlActions control, String[] pathListOrig, Boolean checkForDuplicates, Boolean needFullPath, Boolean copyPathList) at System.Security.Permissions.FileIOPermission..ctor(FileIOPermissionAccess access, String path) at System.Web.InternalSecurityPermissions.PathDiscovery(String path) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath, VirtualPath baseVirtualDir, Boolean allowCrossAppMapping) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath) at System.Web.HttpServerUtility.MapPath(String path) at AbleCommerce.GetImage.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

An error has occured at http://www.brewhaus.com/GetImage.ashx?P ... /Fillter-x';",)`.jpg&maintainAspectRatio=true&maxHeight=300&maxWidth=300
Exception: Illegal characters in path. Stack Trace: at System.IO.Path.CheckInvalidPathChars(String path) at System.Security.Permissions.FileIOPermission.HasIllegalCharacters(String[] str) at System.Security.Permissions.FileIOPermission.AddPathList(FileIOPermissionAccess access, AccessControlActions control, String[] pathListOrig, Boolean checkForDuplicates, Boolean needFullPath, Boolean copyPathList) at System.Security.Permissions.FileIOPermission..ctor(FileIOPermissionAccess access, String path) at System.Web.InternalSecurityPermissions.PathDiscovery(String path) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath, VirtualPath baseVirtualDir, Boolean allowCrossAppMapping) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath) at System.Web.HttpServerUtility.MapPath(String path) at AbleCommerce.GetImage.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

Any thoughts?

[ForumsAdmin]

In the above log the page causing error is different from the ones posted above.
Now we have three pages

• GetImage.ashx
• Captcha.ashx
• Subscription.aspx

The solution proposed above of replacing Convert.ToInt32 with AlwaysConvert.ToInt was for Captcha.ashx. However it will not apply to Subscription.aspx or GetImage.ashx. Although the issue in all the above cases is similar. The URL input string has some invalid characters that cause the failure. It is not clear how this happens. We try to reproduce it locally but we can't. We will have another look into this but if you can send the app.log file which has the details of these exceptions it may help detect the actual problem.

[Brewhaus]

The Captcha error is likely fixed with the patch above, but I have not gone through the entire error log to confirm. The subscription error is still and issue, as is the GetImage issue. Both of these are issues on both of the sites that we upgraded from 7.0.7 to Gold R6. I can send one of the app.log files, but please advise the best way to do this.

[ForumsAdmin]

@Brewhaus
I have sent you a PM

[Brewhaus]

Thank you. I have sent you the requested file.

[jmestep]

Regarding the subscription patch- the dotted lines just mean there is code not shown. Don't take the code out, just put the new lines in at the proper place.

[Brewhaus]

Just to confirm, then, is the following correct>

Code: Select all

            //DETERMINE THE ACTION
            action = action.ToLowerInvariant();
            if (action == "remove")
            {
                //delete user from the list
                int emailListId = AlwaysConvert.ToInt(Request.QueryString["list"]);
                string email = Request.QueryString["email"];
                string key = Request.QueryString["key"];
                AbleContext.Current.Database.BeginTransaction();
                EmailList list = EmailListDataSource.Load(emailListId);
                if ((list != null) && (email != null))
                {
                    string eluKey = string.Empty;
                    EmailListUser elu = EmailListUserDataSource.Load(emailListId, email);
                    if (elu != null) eluKey = elu.SignupDate.ToString("MMddyyhhmmss");
                    if (key == eluKey)
                    {
                        list.RemoveMember(email);
                        phMessage.Controls.Add(new LiteralControl(string.Format(this.DeletedMessage, list.Name)));
                    }
                }
                AbleContext.Current.Database.CommitTransaction();
            }
            else if (action == "confirm")
            {

                //ADD USER TO LIST
                int emailListId = AlwaysConvert.ToInt(Request.QueryString["list"]);
                string email = Request.QueryString["email"];
                string key = Request.QueryString["key"];
                AbleContext.Current.Database.BeginTransaction();
                EmailList list = EmailListDataSource.Load(emailListId);
                if ((list == null) || !ValidationHelper.IsValidEmail(email)) Response.Redirect(AbleCommerce.Code.NavigationHelper.GetHomeUrl());
                EmailListSignup signup = EmailListSignupDataSource.Load(emailListId, email);
                if (signup != null)
                {
                    if (key == signup.SignupKey)
                    {
                        signup.Activate();
                        signup.Save();
                        //confirm user subscription
                        phMessage.Controls.Add(new LiteralControl(string.Format(this.SubscribedMessage, list.Name)));
                    }
                    AbleContext.Current.Database.CommitTransaction();
                }
                else if (EmailListUserDataSource.Load(emailListId, email) != null)
                {
                    //CHECK IF USER HAS ALREADY ACTIVATED
                    //confirm user subscription
                    phMessage.Controls.Add(new LiteralControl(string.Format(this.SubscribedMessage, list.Name)));
                }
            }

I just want to make sure before I add using CommerceBuilder.Common; and save the file

[jmestep]

I had this before the final } above instead of where you put it because that is where the "else if" ends
AbleContext.Current.Database.CommitTransaction();

[Brewhaus]

I apologize if I seem dense, but you lost me. Do you mean to move the entire code, or just move the final line as below?

Code: Select all

using System;
using System.Data;
using System.Configuration;
using System.Collections;
using System.Web;
using System.Web.Security;
using System.Web.UI;
using System.Web.UI.WebControls;
using System.Web.UI.WebControls.WebParts;
using System.Web.UI.HtmlControls;
using CommerceBuilder.Marketing;
using CommerceBuilder.Utility;
using CommerceBuilder.Common;

namespace AbleCommerce
{
    public partial class _Subscription : CommerceBuilder.UI.AbleCommercePage
    {
        private string _SubscribedMessage = "Your subscription to the list {0} has been activated.";
        public string SubscribedMessage
        {
            get { return _SubscribedMessage; }
            set { _SubscribedMessage = value; }
        }

        private string _DeletedMessage = "Your address has been removed from the list {0}.";
        public string DeletedMessage
        {
            get { return _DeletedMessage; }
            set { _DeletedMessage = value; }
        }

        private string _InvalidMessage = "The subscription request was not understood or the provided parameters are incorrect.";
        public string InvalidMessage
        {
            get { return _InvalidMessage; }
            set { _InvalidMessage = value; }
        }

        protected void Page_Load(object sender, EventArgs e)
        {
            string action = Request.QueryString["action"];
            if (!string.IsNullOrEmpty(action))
            {
                //DETERMINE THE ACTION
                action = action.ToLowerInvariant();
                if (action == "remove")
                {
                    //delete user from the list
                    int emailListId = AlwaysConvert.ToInt(Request.QueryString["list"]);
                    string email = Request.QueryString["email"];
                    string key = Request.QueryString["key"];
                    AbleContext.Current.Database.BeginTransaction();
                    EmailList list = EmailListDataSource.Load(emailListId);
                    if ((list != null) && (email != null))
                    {
                        string eluKey = string.Empty;
                        EmailListUser elu = EmailListUserDataSource.Load(emailListId, email);
                        if (elu != null) eluKey = elu.SignupDate.ToString("MMddyyhhmmss");
                        if (key == eluKey)
                        {
                            list.RemoveMember(email);
                            phMessage.Controls.Add(new LiteralControl(string.Format(this.DeletedMessage, list.Name)));
                        }
                    }
                    AbleContext.Current.Database.CommitTransaction();
                }
                else if (action == "confirm")
                {

                    //ADD USER TO LIST
                    int emailListId = AlwaysConvert.ToInt(Request.QueryString["list"]);
                    string email = Request.QueryString["email"];
                    string key = Request.QueryString["key"];
                    AbleContext.Current.Database.BeginTransaction();
                    EmailList list = EmailListDataSource.Load(emailListId);
                    if ((list == null) || !ValidationHelper.IsValidEmail(email)) Response.Redirect(AbleCommerce.Code.NavigationHelper.GetHomeUrl());
                    EmailListSignup signup = EmailListSignupDataSource.Load(emailListId, email);
                    if (signup != null)
                    {
                        if (key == signup.SignupKey)
                        {
                            signup.Activate();
                            signup.Save();
                            //confirm user subscription
                            phMessage.Controls.Add(new LiteralControl(string.Format(this.SubscribedMessage, list.Name)));
                        }
                    }
                    else if (EmailListUserDataSource.Load(emailListId, email) != null)
                    {
                        //CHECK IF USER HAS ALREADY ACTIVATED
                        //confirm user subscription
                        phMessage.Controls.Add(new LiteralControl(string.Format(this.SubscribedMessage, list.Name)));
                    }
                }
                AbleContext.Current.Database.CommitTransaction();
            }

            //IF RESPONSE IS EMPTY, REQUEST IS INVALID
            if (phMessage.Controls.Count == 0)
                phMessage.Controls.Add(new LiteralControl(this.InvalidMessage));
        }
    }
}

[ForumsAdmin]

Your log file is showing other errors that you need to fix by applying appropriate settings.
Your error log is full of this error

2013-11-21 08:44:25,130 ERROR AbleCommerce Error generating Google feed.
System.UnauthorizedAccessException: Access to the path 'E:\Websites\ACGold R6 Sites\Brewhaus\Feeds\GoogleFeedData.txt' is denied.
at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath)
at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)
at System.IO.StreamWriter.CreateFile(String path, Boolean append)
at System.IO.StreamWriter..ctor(String path, Boolean append, Encoding encoding, Int32 bufferSize)
at System.IO.StreamWriter..ctor(String path, Boolean append)
at System.IO.File.CreateText(String path)

Make sure /Feeds folder is writeable by ASP.NET / Network Service user

Most of the other errors are

ERROR AbleCommerce An error has occured at http://www.brewhaus.com/GetImage.ashx?P ... s/Filter-x';",)`-lg.jpg&maintainAspectRatio=true&maxHeight=300&maxWidth=300
System.ArgumentException: Illegal characters in path.

This error comes from system code when it tries to get the image from the requested path. I can provide you some fix that will avoid this but the error actually is an indication of something wrong somewhere else. The image URLs that are generated have invalid characters in them. These URLs are generated based on the paths stored for the images. It appears that your image paths strored in database are not valid. Please check and validate the image data, especially if you have upgraded the database or you have used some manual way of adding image paths. Like some bulk update/import operation.

The error log shows that the error that sometimes occurs on subscription page is this

2013-12-03 11:44:31,005 ERROR AbleCommerce An error has occured at http://www.brewhaus.com/Subscription.as ... 0313082321
System.Web.HttpException (0x80004005): Request timed out.

This is a request timeout error. Most likely because of the SMTP/email server involved.

The other error on subscription page is something like this

ERROR AbleCommerce An error has occured at http://www.brewhaus.com/Subscription.as ... 2713032753
System.Web.HttpUnhandledException (0x80004005): Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> NHibernate.NonUniqueObjectException: a different object with the same identifier value was already associated with the session: CommerceBuilder.Marketing.EmailListUserKey, of entity: CommerceBuilder.Marketing.EmailListUser

This seems to be an attempt to add a user to the email list twice. We will look into this.

[ForumsAdmin]

Just for self reminder : The issues and fixes discussed here have been reported separately in our bug system to ensure any improvement gets included in the next version.

[Brewhaus]

Thank you for the help. I had asked about the permissions needed, but nobody was able to help with that (apparently Able does not have a list provided anywhere, as even Fred could not locate the suggested permissions). I have corrected the permissions to /Feeds, so hopefully that will be resolved.

The image issue popped up only after the upgrade, and does not appear to be an issue with any items where I have replaced the images with new photos. It is odd because when I first saw this error I went to the category and then product page for the item, and the image came up fine and did not create another error in the log. I am guessing that it has something to do with the upgrade, and hope that it works itself out / someone can suggest a fix, as it will be some time before we can replace the rest of the images (we probably have 500 to go!)

The subscription error is odd. I have had a couple of customers contact me because the link that was e-mailed did not work. When I looked in the EmailListSignups table the customer was listed. I was not able to add the e-mail address to the EmailListUsers table, as SQL said that the address could not listed twice. When I looked through the table, sure enough, the e-mail address was there. But, when I checked the e-mail list via the Admin interface the address was not listed, and on a search it could not even be found. So, I added them as Users via the admin interface (Users --> Add User), and when they were added as a user they automatically were part of the e-mail list (ie. I did not have to manually add them). Hopefully this information can be of help to you in figuring out the issue. Until then, if you can propose a temporary fix that would be great.

[Brewhaus]

Correction: I just went to the error log to clear it and found that we do have an image error for an photo that we updated just after upgrading:
12/10/2013 2:30:23 PM Error
An error has occured at http://www.hotsaucedepot.com/GetImage.a ... ean-12oz.x';",)`&maintainAspectRatio=true&maxHeight=300&maxWidth=300
Exception: Illegal characters in path. Stack Trace: at System.IO.Path.CheckInvalidPathChars(String path) at System.Security.Permissions.FileIOPermission.HasIllegalCharacters(String[] str) at System.Security.Permissions.FileIOPermission.AddPathList(FileIOPermissionAccess access, AccessControlActions control, String[] pathListOrig, Boolean checkForDuplicates, Boolean needFullPath, Boolean copyPathList) at System.Security.Permissions.FileIOPermission..ctor(FileIOPermissionAccess access, String path) at System.Web.InternalSecurityPermissions.PathDiscovery(String path) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath, VirtualPath baseVirtualDir, Boolean allowCrossAppMapping) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath) at System.Web.HttpServerUtility.MapPath(String path) at AbleCommerce.GetImage.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

12/10/2013 2:30:23 PM Error
An error has occured at http://www.hotsaucedepot.com/GetImage.a ... aribbean-x';",)`.jpg&maintainAspectRatio=true&maxHeight=300&maxWidth=300
Exception: Illegal characters in path. Stack Trace: at System.IO.Path.CheckInvalidPathChars(String path) at System.Security.Permissions.FileIOPermission.HasIllegalCharacters(String[] str) at System.Security.Permissions.FileIOPermission.AddPathList(FileIOPermissionAccess access, AccessControlActions control, String[] pathListOrig, Boolean checkForDuplicates, Boolean needFullPath, Boolean copyPathList) at System.Security.Permissions.FileIOPermission..ctor(FileIOPermissionAccess access, String path) at System.Web.InternalSecurityPermissions.PathDiscovery(String path) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath, VirtualPath baseVirtualDir, Boolean allowCrossAppMapping) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath) at System.Web.HttpServerUtility.MapPath(String path) at AbleCommerce.GetImage.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

12/10/2013 2:30:23 PM Error
An error has occured at http://www.hotsaucedepot.com/GetImage.a ... -Chicken-x';",)`-12oz.jpg&maintainAspectRatio=true&maxHeight=300&maxWidth=300
Exception: Illegal characters in path. Stack Trace: at System.IO.Path.CheckInvalidPathChars(String path) at System.Security.Permissions.FileIOPermission.HasIllegalCharacters(String[] str) at System.Security.Permissions.FileIOPermission.AddPathList(FileIOPermissionAccess access, AccessControlActions control, String[] pathListOrig, Boolean checkForDuplicates, Boolean needFullPath, Boolean copyPathList) at System.Security.Permissions.FileIOPermission..ctor(FileIOPermissionAccess access, String path) at System.Web.InternalSecurityPermissions.PathDiscovery(String path) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath, VirtualPath baseVirtualDir, Boolean allowCrossAppMapping) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath) at System.Web.HttpServerUtility.MapPath(String path) at AbleCommerce.GetImage.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

12/10/2013 2:30:22 PM Error
An error has occured at http://www.hotsaucedepot.com/GetImage.a ... -Flaming-x';",)`-Caribbean-12oz.jpg&maintainAspectRatio=true&maxHeight=300&maxWidth=300
Exception: Illegal characters in path. Stack Trace: at System.IO.Path.CheckInvalidPathChars(String path) at System.Security.Permissions.FileIOPermission.HasIllegalCharacters(String[] str) at System.Security.Permissions.FileIOPermission.AddPathList(FileIOPermissionAccess access, AccessControlActions control, String[] pathListOrig, Boolean checkForDuplicates, Boolean needFullPath, Boolean copyPathList) at System.Security.Permissions.FileIOPermission..ctor(FileIOPermissionAccess access, String path) at System.Web.InternalSecurityPermissions.PathDiscovery(String path) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath, VirtualPath baseVirtualDir, Boolean allowCrossAppMapping) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath) at System.Web.HttpServerUtility.MapPath(String path) at AbleCommerce.GetImage.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

12/10/2013 2:30:22 PM Error
An error has occured at http://www.hotsaucedepot.com/GetImage.a ... ages/The-x';",)`-Chicken-Caribbean-12oz.jpg&maintainAspectRatio=true&maxHeight=300&maxWidth=300
Exception: Illegal characters in path. Stack Trace: at System.IO.Path.CheckInvalidPathChars(String path) at System.Security.Permissions.FileIOPermission.HasIllegalCharacters(String[] str) at System.Security.Permissions.FileIOPermission.AddPathList(FileIOPermissionAccess access, AccessControlActions control, String[] pathListOrig, Boolean checkForDuplicates, Boolean needFullPath, Boolean copyPathList) at System.Security.Permissions.FileIOPermission..ctor(FileIOPermissionAccess access, String path) at System.Web.InternalSecurityPermissions.PathDiscovery(String path) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath, VirtualPath baseVirtualDir, Boolean allowCrossAppMapping) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath) at System.Web.HttpServerUtility.MapPath(String path) at AbleCommerce.GetImage.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

12/10/2013 2:30:22 PM Error
An error has occured at http://www.hotsaucedepot.com/GetImage.ashx?Path=x';",)`-Flaming-Chicken-Caribbean-12oz.jpg&maintainAspectRatio=true&maxHeight=300&maxWidth=300
Exception: Illegal characters in path. Stack Trace: at System.IO.Path.CheckInvalidPathChars(String path) at System.Security.Permissions.FileIOPermission.HasIllegalCharacters(String[] str) at System.Security.Permissions.FileIOPermission.AddPathList(FileIOPermissionAccess access, AccessControlActions control, String[] pathListOrig, Boolean checkForDuplicates, Boolean needFullPath, Boolean copyPathList) at System.Security.Permissions.FileIOPermission..ctor(FileIOPermissionAccess access, String path) at System.Web.InternalSecurityPermissions.PathDiscovery(String path) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath, VirtualPath baseVirtualDir, Boolean allowCrossAppMapping) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath) at System.Web.HttpServerUtility.MapPath(String path) at AbleCommerce.GetImage.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

12/10/2013 2:30:22 PM Error
An error has occured at http://www.hotsaucedepot.com/GetImage.ashx?Path=x';",)`&maintainAspectRatio=true&maxHeight=300&maxWidth=300
Exception: Illegal characters in path. Stack Trace: at System.IO.Path.CheckInvalidPathChars(String path) at System.Security.Permissions.FileIOPermission.HasIllegalCharacters(String[] str) at System.Security.Permissions.FileIOPermission.AddPathList(FileIOPermissionAccess access, AccessControlActions control, String[] pathListOrig, Boolean checkForDuplicates, Boolean needFullPath, Boolean copyPathList) at System.Security.Permissions.FileIOPermission..ctor(FileIOPermissionAccess access, String path) at System.Web.InternalSecurityPermissions.PathDiscovery(String path) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath, VirtualPath baseVirtualDir, Boolean allowCrossAppMapping) at System.Web.HttpRequest.MapPath(VirtualPath virtualPath) at System.Web.HttpServerUtility.MapPath(String path) at AbleCommerce.GetImage.ProcessRequest(HttpContext context) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)


In addition, I found the following error:
An error has occured at https://www.hotsaucedepot.com/login.asp ... count.aspx
Exception: Request timed out. Stack Trace:

[Shopping Cart Admin]

Please open threads for new issues and help us to better respond to your posts!

[Brewhaus]

I apologize, Mike. Because this thread had discussed these errors already I just kept my post in the same thread. Would you like me to delete the post and start it in a new thread, or are you able to move it (moving the post does not appear to be an option for me)?