Possible code fix for Forms Authentication vulnerability.

[Ken Dopierala Jr.]

Hi,

I've been reading the posts and blogs all over about this. I don't have a
system that is prone to this and the company I host all my sites through
isn't prone to this either so I can't test it. The code is below, it goes
in the Global.asax.vb file. Could someone please test this and let me know
if it fixes the problem for them? It isn't a permanent solution but just
something to get people by now that everyone in the world knows. Thanks!
Ken.

Sub Application_BeginRequest(ByVal sender As Object, ByVal e As EventArgs)
Dim rPath As String = Request.RawUrl
rPath = rPath.Replace("\", "/")
Context.RewritePath(rPath)
End Sub