Hi there, I need to prevent possible db injection attacks, I have proper validation strings in the form to replace potentially harmful characters, however there seams to be something built into .NET that screams when it sees the angle bracket followed by the word "script" before it performs any validation or string replacement function. I know hackers use these errors to thier advantage, so how can I keep the site from breaking at all if someone attempts to use this tactic to inject my database? The only solution I can think of is to use a custom generic error page - that of course reveals no info - but the fact that an error occured does. Any suggestions? - Thanks!

None taken, yes
and \n is the first thing I tried actually, no I am definately not a beginner at this but sometimes one has to look at the basics which can become more difficult the more experienced one becomes. Thanks for your thoughts on this, I am going to persue another solution.

Thanks for the pointer, I have unfortunately come to the conclustion after trying even an ASCII carriage return that the Web Hyperlink Tooltip displays all whitespace as a single space. So, I will either have to clutter an already busy dynamic display or figure out how to get the AJAX to update just my popup panel instead of the entire page.

Thanks, but no dice - Environment.NewLine.Insert(0, "sometext") does not put a line break into the Tooltip, Environment.NewLine has no effect either this thing seems bent on ignoring whitespace. my code lokks like this: H.ToolTip = "Date of Order: " + Convert.ToDateTime(dataread["DateStamp"].ToString()).ToString("MM/dd/yyyy HH:mm") + Environment.NewLine.Insert(0, "sometext");

I need to display multiple lines of information on a hyperlink mouseover for a web application. The mouseover works fine, but niether "
" nor "\n" works to get a linebreak into the tooltip text. Can someone please help? Thanks.