When an Internet Security and Acceleration Server 2004, Internet Security and Acceleration Server 2006, or Windows Essential Business Server 2008 client performs an action that uses the HTTP POST method, the action may be performed multiple times

Article translations Article translations
Article ID: 933523 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

When a Microsoft Internet Security and Acceleration (ISA) Server 2004, Microsoft Internet Security and Acceleration (ISA) Server 2006, or Windows Essential Business Server 2008 client performs an action that uses the HTTP POST method, the action may be performed multiple times. For example, if a user on an ISA Server 2004 or Windows Essential Business Server 2008 client adds an item to a shopping cart by using a Web page form, the item may be added to the cart three times.

CAUSE

This problem occurs when the following rules are configured in ISA Server or in Windows Essential Business Server 2008 in the following order:
  1. A rule is configured that enables anonymous access to the HTTP protocol, and at least one content type is selected in Selected content on the Content tab.
  2. A rule is configured that enables All Authenticated Users access to the HTTP protocol and to all content types.

RESOLUTION

To resolve this problem, obtain the latest ISA Server service pack.

For more information about how to obtain the latest ISA Server 2006 Service Pack, click the following article number to view the article in the Microsoft Knowledge Base:
954258 How to obtain the latest Internet Security and Acceleration (ISA) Server 2006 Service Pack
For more information about how to obtain the latest ISA Server 2004 Service Pack, click the following article number to view the article in the Microsoft Knowledge Base:
891024 How to obtain the latest ISA Server 2004 service pack
After you install the hotfix package, the change is turned off. To enable the change, you must run the following script on the computer.
const USE_FILE_EXTENSION_AS_CONTENT_TYPE_Default      = 0
const USE_FILE_EXTENSION_AS_CONTENT_TYPE_IfNotExist   = 1
const USE_FILE_EXTENSION_AS_CONTENT_TYPE_Always       = 2

Const SE_VPS_GUID = "{143F5698-103B-12D4-FF34-1F34767DEabc}"
Const SE_VPS_NAME = "UseFileExtensionAsContentType"
Const SE_VPS_VALUE = 1

Sub SetValue()

    ' Create the root obect.
    Dim root  ' The FPCLib.FPC root object
    Set root = CreateObject("FPC.Root")

    'Declare the other objects needed.
    Dim array       ' An FPCArray object
    Dim VendorSets  ' An FPCVendorParametersSets collection
    Dim VendorSet   ' An FPCVendorParametersSet object

    ' Get references to the array object
    ' and the network rules collection.
    Set array = root.GetContainingArray
    Set VendorSets = array.VendorParametersSets

    On Error Resume Next
    Set VendorSet = VendorSets.Item( SE_VPS_GUID )

    If Err.Number <> 0 Then
        Err.Clear

        ' Add the item
        Set VendorSet = VendorSets.Add( SE_VPS_GUID )
        CheckError
        WScript.Echo "New VendorSet added... " & VendorSet.Name

    Else
        WScript.Echo "Existing VendorSet found... value- " &  VendorSet.Value(SE_VPS_NAME)
    End If

    if VendorSet.Value(SE_VPS_NAME) <> SE_VPS_VALUE Then

        Err.Clear
        VendorSet.Value(SE_VPS_NAME) = SE_VPS_VALUE

        If Err.Number <> 0 Then
            CheckError
        Else
            VendorSets.Save false, true
            CheckError

            If Err.Number = 0 Then
                WScript.Echo "Done with " & SE_VPS_NAME & ", saved!"
            End If
        End If
    Else
        WScript.Echo "Done with " & SE_VPS_NAME & ", no change!"
    End If

End Sub

Sub CheckError()

    If Err.Number <> 0 Then
        WScript.Echo "An error occurred: 0x" & Hex(Err.Number) & " " & Err.Description
        Err.Clear
    End If

End Sub

SetValue

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

REFERENCES

For more information about how to install ISA Server hotfixes and updates, click the following article number to view the article in the Microsoft Knowledge Base:
885957 How to install ISA Server hotfixes and updates

Properties

Article ID: 933523 - Last Review: September 12, 2008 - Revision: 3.1
APPLIES TO
  • Microsoft Internet Security and Acceleration Server 2004 Standard Edition
  • Microsoft Internet Security and Acceleration Server 2004 Enterprise Edition
  • Microsoft Internet Security and Acceleration Server 2006 Enterprise Edition
  • Microsoft Internet Security and Acceleration Server 2006 Standard Edition
  • Windows Essential Business Server 2008 Standard
Keywords: 
atdownload kbexpertiseadvanced kbfix kbbug kbprb KB933523

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com