Home | Advertising Info132 USERS CURRENTLY ONLINE   
PowerASP
   Site Search Contact Us Friday, March 14, 2025  

vbscript active server pages ASP vbscript SQL database informix oracle SQL Server Perl CGI Delphi PHP source code code sample samples program CJWSoft ASPProtect ASPBanner ASPClassifieds



Blog Entry: 3/25/2006 1:48:11 PM

It worked after bout 15 minutes.  I receive a response of *3*

However, when I log in as a user who is only a mamber of group1 I still get a response of *3*

,

I have ASPProtect up and running and I was able to log in with little to now problem after following all of the directions. 

I imported my data base of users (approx 5300) into the access db, and now it times out just letting me log in.

I've got full access to the web server to make any changes on that end that I need.

any ideas?

 

,



Makes sense to me. I used the  ASPProtect_access2002.mdb supplied. (I am using 2003).  Only added more names and other personal info to it for test. Uploaded the amended db with FTP.  This did not restrict someone not listed in db from logging in.

Would each individuals' information need to be added to the code in order to have it check the database first to find out if the person is authorized to view?

Part of the problem is I dont know which ASP page or script links the db to the rest of the web, or how one page relates or links to the other. 

Sometimes I wonder if problems I encounter originate with the server.

Thanks for patience.


,

you password protect an asp page in your site "where that is is up to you"

http://support.cjwsoft.com/code/moreinfo171-1.htm

then you link them there from your own pages

thats all there is to it

is that what you are asking?

Additionally...any page you password protect automatically becomes a login page... where you want to start and where you send them after or before login is something you have to handle on your own

Any pages you pasword protect will prompt the user for login info if they are not yet logged in that is.

Then once logged in it returns them to the same page they are showing the page content as it would normally appear.

 

cwilliams38455.7128356481, Thanks dude, I'll figure it out.  I've been ripping apart pieces of the code to get it.  I'm in the process of pulling some things out to make functions that do specific tasks based on your code.  I actually had a lot of luck yesterday with it. ,

ok, here is what is going on

you are password protecting an ".asp" page that requires querystring info to run correctly   (example - "somepage.asp?ID=3"")

that is something I never intended anyone to do.. while it does handle and repass the querystring info along during successful login it does not re-pass that info during a failed login as you have found out

this is all by design.. the only reason the system re-passes the querystring info at all is because I wanted to make it smart for the sake of the remember me/cookie feature.. so if someone was using that and bookmarked a page deep in your site with querstring info...then when they went back to that bookmark they would get authenticated and still see the page as intended with the querystring info in tact

it was a nice feature never intended to handle any situations other than what I just described...

now...
notice the url in the browser after failing a login.. then logging in successfully.. it is missing the querystring info

that more than anything is what is going on..  browser caching can cause some confusion when dealing with this because the browser likes to return you to the page minus the querstring info... when that happens a simple browser refresh at that time may very well solve the problem and then you see the page you are supposed to see...

To avoid all of this...

One solution to this is to always start people logging in to an ".asp" page that has no querystring info. That way this won't happen. Once they are logged in you can then offer them links to the pages they need to go to. (you of course still want to password protect those pages)

Another solution is to log them into a page with no querystring info and then do a response.redirect to the page with quersytring info.. thus accomplishing the same thing but without the possibility of the issue because of a failed login.

Another solutions is to do checks in your asp page for missing querstring info.. and if it isn't there do something about it like send them somewhere else.. or display a message about there being an error... etc etc

So,basically you don't want to tell people to login into such and such page with querstring info... and providing a username and password..... You can do it but like you found out it can cause an error if they mess up logging in the 1st time. The system just was not designed to handle that. There are complex reasons for that involving security that would just take me too long to explain.

I hope this makes some sense to you.. it is very hard to try and explain

, Unfortunatley, I dont have an easy answer for you. It is certainly doable but adjusting the code so people assigned to certain groups get specific expiration dates means a lot of code work and time. It would probably even take me a long time to figure out.

The fact that users can belong to more than one group also greatly complicats the whole idea.

You can certainly assign an expiration level when someone signs up. That is easy and explained in the forums. ,

How can I make so it goes to certain webpages if user enters valid username and password??

I suppose user enters its information on check_user_inc.asp page, and username and password are stored on SQL database.

Thanks

 

,

yes, like macnap says.... you have to protect your ".asp" pages the way the directions tell you to...

and like in the "example" protected pages we provide

or they will not be protected and nothing will happen as far as ASPProtect goes

I guess I just didnt understand what you were talking about

 

,

The count is in the album area where the small pictures and description of album.   Viewed 1 time(s)  This count never changes.

 

Thanks

 John

,

5 Computers in an office, random hardware and operating systems.  Some wireless some wired - all the same ISP connection.

Some users do not see the PLACE A NEW AD hyperlink.  How can this be hidden?  There is no conditional statement yet some see it and others don't.

To make this problem even more confusing if I take an image and put the place_new_ad.asp hyperlink on that image the users don't even see that image any longer.

How can this be resolved?

,

if that account isnt there thats normal because if it doesn't have any permissions for that folder so it wouldnt be listed

you simply dig into the menus a liitle deaper and find it then add it.

cwilliams38417.6984606481,

you dont want to use the virtual smtp virtual server method... you want to use a real remote email server with valid MX records..

ultimately though after all that is going is it is out of the hands of the asp code and it becomes issues other then the code sending the email... regarding to whether or not emails get blocked by certain organizations

For example:
I have many aol users sign up for various systems I have running without issue. I use CDOSYS with my own server mail.cjwsoft.com which has proper MX records set up.

I would also try to determine the difference between blocking and spam/junk email filtering. It is impoirtant to truly know what is going on.
Sometimes adding more information to the body of the emails going out will eliminate the junk mail filters from gettings the emails.

Then you have the various open relay lists that places like AOL use. If your email server or IP sending the email is on those lists for spamming you do not stand a chance. That is all out of the hands of the ASP code.

,

Hello,

If you see that when doing a view source then that code is not running.

I will need to go into your site and look as something is very wrong on a low level and I have no more ideas.

PM or email me the info and I will figure out what is going on.

I'll need ftp or frontpage access to the site.
I'll also need to know the urls for the asprotect system as well as the page you are trying to protect.

CJW

cwilliams38229.7996064815,

If you still cant see the upload buttons after checking the settings send me a PM with the info and I will take a look at your installation. It will have to be up on a live server of course.

,

I am testing this now and there is something wrong.

PayPal is hitting the ipn.asp but the database is not being updated.

I will figure it out shortly though and post the anwer here.

,

Okay Chris, I wold like to get rid of the encryption then if it's not too much trouble.

I have no option of running the production server against an ms access db, since the db needs to be online and accessible from another system.

,

1st off.. you appear to have some strange things going on with that domain. Looks like you have a frameset and are loading another domain in it which is always confuding especially if you are running the site off your home computer or something... I am not sure

That aside..

If I go to

http://www.bones.myftpsite.net/rfamilystuff/default.asp

and click on the "familiy" category

then right click on a broken image.. look at properties

Your linking the image to your localhost

see

http://localhost/rfamilystuff/pictures/Pic_3_1_thumb.jpg

and that is wrong, just like I said above

Nobody running the site off any computer but your development machine is going to see those pictures because the url isnt valid for them

My guess is in the settings you have the "PictureURL" set to

http://localhost/rfamilystuff/pictures

when it should be

http://www.bones.myftpsite.net/rfamilystuff/pictures


Good luck with this.. I am going to the bar.
If you need more help I probably will not be available until Monday.

cwilliams38394.7688773148,

When did you download the ASPProtect Version 7 zip file ?

what did you enter as a wrong password to make that happen ?

does it it do it when other wrong passwords are entered ?

 

cwilliams38452.722037037, Great!  Sounds good Chris.  ,

Most likely it is no longer supported on the web server. The web host probably moved you site to a windows 2003 server which does not support cdonts or they stopped running the IIS SMTP server.

You usualy wont get an error..

it is also possible that cdonts is boned up as it is pretty flaky and that tends to happen. For example sometimes the emails it is suppost to send get caught up in the smtp pickup directory and never get sent out until the server is rebooted.

You should really ask the hosting company why cdonts has stopped working. It definetly has nothing to do with the code if it has been working all that time.  If CDONTS still is supportd tell them you emails are in limbo. Ask them to look and see if a bunch of ".eml" files are stuck in the stmp pickup directly and if so to please reboot the server.

lastly:
cdonts has been deprecated and now everyone uses cdosys.
see my article
http://www.powerasp.com/content/new/sending_email_cdosys.asp

,

Our login works great, variables even help determine menu options.  When user logs on, however, it opens in a new page.  Is there a setting somewhere that sets whether you can open in a new or existing page?

Also, when you log off

, Attached is a SQL script to create the ASPProtect Database with the Option Pack Changes already applied. This lets you create the database in one step and you wont have to make the option pack changes as they are already there.

This only applies to people using MSSQL and doing a new installation.

This scripts are run via SQL Enterprise Manager.

You make a new database then run this script on it in query manager.

2004-06-14_180056_aspprotect_w_option_pack.zip cwilliams38152.7522569444, I dont get it.. I am still looking into it..

I think this has something to do with your original experience when things would work and then not work.

something weird is going on
, Can I have the logon be in a top frame while having the protected pages displayed in a main frame?

Also, how will it behave if a user moves in between a protected page to a public page and back to the protected page again?
,

If things are not perfect there will be no log files and no errors.. it can only be one of these things really
http://support.cjwsoft.com/code/moreinfo313-2.htm

You may also want to make your the filesystem on the server is working and not disabled by norton script blocking or anything random like that. Testing the filesystem object is best done by writing a simple text file to a folder. Plenty of examples of doing that can be found at www.aspin.com

Recent activity is temporary and admin activity in the admin area is not tracked. If your application in IIS has reset or there has been no activity in the users area or in pages you protected there will be nothing there. The busier your site the more chance something will be there. For example usually our online demo has something there except right after 4am when my server does an iisreset.

,

I dont know about your error on line 6 when uploading..

as far as the manaully edited import file not working I would really need to see it. There has to be somethin wrong with it's format.

I really need more information and possibly acess to the system to do some troubleshooting...

This is anot a feature anyone has ever had an issue like this with.

,

I think you may be using old code where that was an issue... I am going to PM you the latest version..

to be safe upgrade all the ASP files except the dataconn_inc.asp files and your config_inc.asp files

"be real careful not to lose your current encryption keys in the "config_inc.asp" file or you will be in real trouble

You can use your existing database

 

,

Glad it worked

cwilliams38406.5549074074, if you just see code then you do not have ASP and Web Server setup correctly.. Basic IIS Server Setup stuff and not something I cover, but there is plenty of info out there.

http://www.aspfaq.com/show.asp?id=2084

http://www.codefixer.com/tutorials/installation.asp

http://www.webwizguide.com/asp/tutorials/installing_iis_winX P_pro.asp

http://www.w3schools.com/asp/asp_intro.asp





,

Just wanted to say how much I like the program! I hunted for days and finally purchased a Perl based product. After several days of goofing with it I gave up. ASPPhoto worked right on first install!!!!

 

Way to go!

,
Yep, thats my thinking as well.
 
On the test server I have the site connected to a SQL 2000 db with the sa account, so it should have full control. But still no luck.
 
However, on the test server, I connected to the Access 2002 db and it works fine..adding user, adding categories, adding albums.
 
Weird
 
, [QUOTE=afifm]

I was actually able to do similar thing by allowing our dedicated search engine to access the site unchallanged.

<%
If Trim(Left(Request.ServerVariables("HTTP_USER_AGENT"),11)) = "MYPASSWORD" Then  
 SearchFlag = True
End If
 
If SearchFlag <> True Then
If Session("Access_Level") > CHECKFOR or Session("Access_Level") = "" Then 
%>
<!--#include virtual="/Auth/check_user_Code.asp" -->
<head>
<title>My Title</title>

</head>

<body>

My Protected stuff here

</body>

</html>

For this to work, the search engine must pass the PW to the web site. I just was not sure how to do the same thing with IPs. I will play with the code and see what happens. If it works, I will post it here to help others, if this is OK with forum rules.

Thanks,

Mo

[/QUOTE]

I just added couple of lines and it works fine

If (Request.ServerVariables("REMOTE_ADDR")) = "xxx.xx.xxx.xxx" Then 
 ' Session("PasswordAccess") = "Yes"
 SearchFlag = true
End If

, and did you response.write that session value to see if it holds anything to ensure it is being set ,

The way the application ships there are no password confirmation areas anywhere ? Please be more specific as to what you have done and if any mods are involved ?

If you are talking about one of the MODS please realize they are not supported. http://support.cjwsoft.com/code/moreinfo459-1.htm

Even though they are not supported I look them over pretty closely and I know of no issue like you mentioned so I would suggest re-downloading the MOD. Perhaps you got a corrupt download or file.

, remeber too.. you might have to edit code you used on your existing pages in your site so they still call the "check_user_inc.asp" correctly.. though it may very well work out so it works the way it is at the new site

any redirection code you might have done may need the redirection urls changed if you used full domain urls..

things like that... etc etc etc,

On second thought guys, it would must easier to change the code using modulus as follows:

<% If PicIndex mod 6 = 0 THEN %> 
      </tr>    
      <tr>
<% End If %>

This will end each row and create a new row after each 6th picture. It'll be must easier code to work with and change.  This code must be placed in the PicIndex For Loop.

If you have any questions, JPortnoy@Checkernet.com

,

ok.. so we got an NT server with a 486 with 256 meg of ram. 

hehe  sorry

anyway.. I have the system running without doing any importing and WOW is it chugging.. I mean it takes a while even to edit/save a user

good news is the filesystem object works as I wrote to a text file

this may end up being a simple case of lack of horsepower..

we may need to do the importing on a faster system and then take the database over cause everthing I see on your server looks correct

even so aspprotect is running so slow.. I have never seen it chug like this

I even tried connecting to a 2000 version of the database and no difference.

I am not totally sure what is going on but the server resources available are scaring me... however this could be something new in the code that I never got a chance to try on NT server.. I dont think so though

how does your other stuff run ?

static pages that do not access a database seem to serve up quickly.

are you running any other dynamic code ?

,

Hi

I've tried almost anything here... I'm using an online SQL SERVER database with ASPProtect 7, and I can't login after my initial creation of the admin account.

It works fine with Access... I believe I have checked all the fields created by the sql statement (which was run with no errors),

What could be the problem here? could it be a problem that I run my local IIS against the online sql server?

sincerely,

Morten

,

Our home page is not showing up gives this error:

Active Server Pages error 'ASP 0126'

Include file not found

/Default.asp, line 246

The include file 'elib/articles/home_feature1.asp' was not found.

,


Timecard Entry: 3/25/2006 1:48:11 PM

reset idle modems on the micorcoms. installed printer on linda's laptop. started working on a mop (methods of procedure) for the microcoms., couple phone calls, couple radlog expireds, callbacks from voicemail answering phone., *TaskForce - Office Add In Development, editing pages, adding photos, Peggy Deyoung Furniture, Finish Decomm. ccc-international.org, Working on correcting errors on cnymn.com site dealing with not having any listings in system, read materials on centillion 1000 series (atm). differentiate features/benefits from ticc vs ba for lesson VoDSL workshop scheduled for july. , initial "close month", worked on reformatting images for Jason, Saratoga mailer, 2000-7-32__ARDEN GREENE__ CREATE BANNER AD, talk to ben about his projects hes working on, his moving to vermont to work on the vermont internet side of company, teched phone calls, grubbage userlist, worked with jeff and russ from high point over the phone to get the linux pager box for the doctors working, had them trying a bunch of things as i was learning the setup of the pager box, got box working again and paging, they need a quote for another pager box. andy is gonna work up a quote for me., check voice mail.email spoekw th crown point- regsietr domain problem with ftp clean up room nect beth and chris- put in orders forsupplies cotact staples for palm pilots goiv eto nary copy milage reports send to michele , Not that busy... most of the problems were "not being able to surf" tonight, worked on user group mail piece, call backs, payroll sent and learned how to do SCU deduction, Picked up mail and opened. . Ans phone., not too busy answered a couple of emails...checked dial up issues, Went to the bank to make deposit , then to the post office and then entered deposit to QB, general billing issues. Sign ups, invoices, doing daily receipts to send to Clayton. Cancels. Phone....................., TICC Logo, researching, and sketches, met with Charlie Rice,starting his own company, will most likely be going with a VPN and possibly website, Reset modems on Clayton 4911., drop off parts to be fixed at Alpha Paging, CREG and GiSCO picnic,

   Active Server Pages Rule The World
Contact Us  
All artwork, design & content contained in this site are Copyright © 1998 - 2025 PowerASP.com and Christopher J. Williams
Banner ads ,other site logos, etc are copyright of their respective companies.
STATS Unless otherwise noted - All Rights Reserved.

vbscript active server pages ASP vbscript SQL database informix oracle SQL Server Perl CGI Delphi PHP source code code sample samples program CJWSoft ASPProtect ASPBanner ASPClassifieds www.aspclassifieds.com, www.powerasp.com,www.cjwsoft.com,www.aspphotogallery.com,www.codewanker.com,www.aspprotect.com,www.aspbanner.com