<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.technet.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Querystring parameters you should not use in your SharePoint application</title><link>http://blogs.technet.com/b/stefan_gossner/archive/2009/01/30/querystring-parameters-you-should-not-use-in-your-sharepoint-application.aspx</link><description>[Updated on February 22nd, 2010 - adding additional values for WSS 4.0] 
 Today I have been working on a support case where customer experienced exceptions in sharepoint when passing in specific query string parameters which are evaluated by his web</description><dc:language>en-US</dc:language><generator>Telligent Evolution Platform Developer Build (Build: 5.6.50428.7875)</generator><item><title>re: Querystring parameters you should not use in your SharePoint application</title><link>http://blogs.technet.com/b/stefan_gossner/archive/2009/01/30/querystring-parameters-you-should-not-use-in-your-sharepoint-application.aspx#3494082</link><pubDate>Tue, 24 Apr 2012 15:00:35 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3494082</guid><dc:creator>Stefan Goßner</dc:creator><description>&lt;p&gt;Hi Io, &lt;/p&gt;
&lt;p&gt;you can read them - but you should not set these query string parameters.&lt;/p&gt;
&lt;p&gt;Cheers,&lt;/p&gt;
&lt;p&gt;Stefan&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3494082" width="1" height="1"&gt;</description></item><item><title>re: Querystring parameters you should not use in your SharePoint application</title><link>http://blogs.technet.com/b/stefan_gossner/archive/2009/01/30/querystring-parameters-you-should-not-use-in-your-sharepoint-application.aspx#3494076</link><pubDate>Tue, 24 Apr 2012 14:26:35 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3494076</guid><dc:creator>Io</dc:creator><description>&lt;p&gt;Mortacci tuaaa!&lt;/p&gt;
&lt;p&gt;Yes, but as one reads the parameter from querystring?&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3494076" width="1" height="1"&gt;</description></item><item><title>re: Querystring parameters you should not use in your SharePoint application</title><link>http://blogs.technet.com/b/stefan_gossner/archive/2009/01/30/querystring-parameters-you-should-not-use-in-your-sharepoint-application.aspx#3469025</link><pubDate>Mon, 05 Dec 2011 17:36:02 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3469025</guid><dc:creator>Jeremy</dc:creator><description>&lt;p&gt;While the question is silly, neither answer is productive.&lt;/p&gt;
&lt;p&gt;The key to finding a solution is to recognize that the reserved list must be avoided as the name of the Querystring parameter, yet you are still able to filter against the ID column, for example. &lt;/p&gt;
&lt;p&gt;Simply use a &amp;quot;friendly&amp;quot; name for the actual Querystring parameter. If your list is Customers and you want to filter your by the ID field, name your Querystring parameter CustomerId or cid or ... (anything but a name on the reserved word list).&lt;/p&gt;
&lt;p&gt;In the configuration of your connection, use ID in the Consumer Field Name. Using this approach, the expected results are achieved consistently.&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3469025" width="1" height="1"&gt;</description></item><item><title>re: Querystring parameters you should not use in your SharePoint application</title><link>http://blogs.technet.com/b/stefan_gossner/archive/2009/01/30/querystring-parameters-you-should-not-use-in-your-sharepoint-application.aspx#3464456</link><pubDate>Thu, 10 Nov 2011 15:28:03 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3464456</guid><dc:creator>Stefan Goßner</dc:creator><description>&lt;p&gt;Hi Braham,&lt;/p&gt;
&lt;p&gt;I doubt that there is enough disk space available world wide to store the list of all allowed query string parameter names.&lt;/p&gt;
&lt;p&gt;Cheers,&lt;/p&gt;
&lt;p&gt;Stefan&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3464456" width="1" height="1"&gt;</description></item><item><title>re: Querystring parameters you should not use in your SharePoint application</title><link>http://blogs.technet.com/b/stefan_gossner/archive/2009/01/30/querystring-parameters-you-should-not-use-in-your-sharepoint-application.aspx#3464455</link><pubDate>Thu, 10 Nov 2011 15:24:13 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3464455</guid><dc:creator>Brahmam</dc:creator><description>&lt;p&gt;Is there a definitive list anywhere of the query string parameters that we are allowed to use?&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3464455" width="1" height="1"&gt;</description></item><item><title>re: Querystring parameters you should not use in your SharePoint application</title><link>http://blogs.technet.com/b/stefan_gossner/archive/2009/01/30/querystring-parameters-you-should-not-use-in-your-sharepoint-application.aspx#3433478</link><pubDate>Sun, 05 Jun 2011 21:19:15 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3433478</guid><dc:creator>Stefan Goßner</dc:creator><description>&lt;p&gt;Hi Adrian,&lt;/p&gt;
&lt;p&gt;that is impossible as there is an endless list of allowed query string parameters.&lt;/p&gt;
&lt;p&gt;Cheers,&lt;/p&gt;
&lt;p&gt;Stefan&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3433478" width="1" height="1"&gt;</description></item><item><title>re: Querystring parameters you should not use in your SharePoint application</title><link>http://blogs.technet.com/b/stefan_gossner/archive/2009/01/30/querystring-parameters-you-should-not-use-in-your-sharepoint-application.aspx#3433453</link><pubDate>Sun, 05 Jun 2011 11:13:36 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3433453</guid><dc:creator>Dr Adrian Colquhoun</dc:creator><description>&lt;p&gt;Is there a definitive list anywhere of the query string parameters that we are allowed to use?&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3433453" width="1" height="1"&gt;</description></item><item><title>re: Querystring parameters you should not use in your SharePoint application</title><link>http://blogs.technet.com/b/stefan_gossner/archive/2009/01/30/querystring-parameters-you-should-not-use-in-your-sharepoint-application.aspx#3373377</link><pubDate>Mon, 06 Dec 2010 19:24:46 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3373377</guid><dc:creator>Edward Joell</dc:creator><description>&lt;p&gt;Truly unpredictable. &amp;nbsp;We are used the parameter ID in four or five querystrings sometimes as the first parameter other times as the second or third parameter. &amp;nbsp;We had an issue with only one usage where the any user without Site Collection Admin rights would get an Access Denied error thrown on attempting to open that page. But when the parameter name was changed to ListItemId then the page worked as designed. &amp;nbsp;However none of the other pages with that parameter in the call to open the window responded in that fashion. Truly a model of SharePoint&amp;#39;s consistency&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3373377" width="1" height="1"&gt;</description></item><item><title>re: Querystring parameters you should not use in your SharePoint application</title><link>http://blogs.technet.com/b/stefan_gossner/archive/2009/01/30/querystring-parameters-you-should-not-use-in-your-sharepoint-application.aspx#3333629</link><pubDate>Wed, 26 May 2010 05:37:43 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3333629</guid><dc:creator>Stefan Goßner</dc:creator><description>&lt;p&gt;Hi Vertigo, &lt;/p&gt;
&lt;p&gt;as indicated these parameters are reserved and internally used for a special purpose.&lt;/p&gt;
&lt;p&gt;E.g. the ID parameter is undergoing a string-to-int conversion to map it to a list item ID.&lt;/p&gt;
&lt;p&gt;If this parameter now contain non-numeric values this string-to-int conversion will fail and you will get an exception.&lt;/p&gt;
&lt;p&gt;Using any of these parameters in your code can lead to unpredictable results.&lt;/p&gt;
&lt;p&gt;Cheers,&lt;/p&gt;
&lt;p&gt;Stefan&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3333629" width="1" height="1"&gt;</description></item><item><title>re: Querystring parameters you should not use in your SharePoint application</title><link>http://blogs.technet.com/b/stefan_gossner/archive/2009/01/30/querystring-parameters-you-should-not-use-in-your-sharepoint-application.aspx#3333612</link><pubDate>Wed, 26 May 2010 04:00:07 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3333612</guid><dc:creator>Vertigo Hopes</dc:creator><description>&lt;p&gt;I noticed that when I used the ID parameter in the query string, it would work for numbers but not letters. ?ID=1234 would render correctly, but ?ID=123A causes the page to crash. Any ideas? I&amp;#39;m using SharePoint 2010 and a query string filter web part to filter a document library web part.&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://blogs.technet.com/aggbug.aspx?PostID=3333612" width="1" height="1"&gt;</description></item></channel></rss>