Blog Entry: 3/25/2006 1:44:48 PM
I have ASPProtect up and running and I was able to log in with little to now problem after following all of the directions.
I imported my data base of users (approx 5300) into the access db, and now it times out just letting me log in.
I've got full access to the web server to make any changes on that end that I need.
any ideas?
, been working on this for about 5 hours today.. I think I found the problem and it involves a vbNullChar that the encryption process is creating only during login attempts
it then messes up during ASPProtect authentication because it blows up the SQL Statement to the database
like I mentioned before the chances off this happening are slim but possible as two people so far have been able to create the situation
I seem to have the HANNAH password working now using your encrption key
I need a little bit more time to clean up the files I have been working on. Then I will give you new "check_user_inc.asp" and "check_admin_inc.asp" files to try out ,
ok, well as far as what else to try I already told you..
you need to manually compare all those field settings with the sql script and make sure they all got set correctly...
you also need to tell me what email/name you ordered the application under... before I will continue this support with you.. at this point I don't know if you purchased the application or if you are using the unsupported lite version
, Another good tip is to make a copy of the "password_admin/default.asp" named whatever you like..
"default2.asp" would work...
then maybe add a link to it from the header_inc.asp file
then you can modify that one all you want and your will still have the original around.
That concept works for a lot of things.. for example you could make a copy of the "users" folder and call it "users2" granted a few paths might need to be changed here and there but really not a lot. (how do you think the paypal signup folders were created, they started as a copy of the "users" folder of course)
You can even make a copy of the "check_users_inc,asp" file if you like. Then make a copy of the "scripts/login_form_inc.asp" file... then make your new "check_user_inc.asp" file reference it.
Then you can password protect pages using different versions of the "check_user_inc.asp" file. Why ? well maybe you want different looking logn forms for different parts of your website or you want to make a lot of changes to the "check_user_inc.asp" file and want to leave the original alone.
The sky is the limit really. When it comes down to it besides the actual guts of the "check_user_inc.asp" file ASPProtect is nothing but html tags and chunks of simple server side code that produce more html dynamically. What your browser ends up with is basic html. (some client side javascript in certain cases, but that is pretty basic stuff too.) cwilliams38422.509525463, Hello:
When using the Mass Mail feature and selecting the Users to ‘Active’ and the Access Level I want to send to the system will still send e-mails to the ‘Inactive’ users from the same Access Level.
In other words it sends to everyone in the Access Level regardless if you choose “Active” only.
Any ideas to correct?
Thanks,
-Ricardo , Oh, I just remembered something..
It's been a while since I did this... :)
Nevermind what I said above as that is a different sort of "debug"
When you want to debug like your talking about find this section in the "web.config"
<compilation defaultLanguage="vb" debug="false" />
change it to this
<compilation defaultLanguage="vb" debug="true" />
When you run the code in a production environment change it back though
More Info
http://support.microsoft.com/default.aspx?scid=kb;EN-US;3061 56
, The application is only intended for use with $ the way it comes.
Use of other currencies is not supported.
(this is noted on the product page)
However, it can probably be used fairly easily with UK customers.
You'll probably want to look into setting the currency to UK in the code generated for the PayPal buttons which is in "view_item.asp". There is probably a hidden form variable you add to it to specify the currency. PayPal's shopping cart documentation and help system would have more info on that.
Doing a search real quick there I came up with this.
<input type="hidden" name="currency_code" value="GBP">
Then you may also want to change the LCID settings for the web site to UK. (I think)
To do that edit the "config_inc.asp" file with a text editor.
Add this code between the <% and %> tags.
Near the top is good
Session.LCID = 2057 There may also be hard coded dollar signs in the code that you will need to change to whatever.. If after you do the above to steps you see then you'll know where to change them based on the named of the page you on.
It is quite possible that simply changing the LCID will take care of everything, but I am not sure.
Those are the tips I can give you. , UPDATE: read whole thread..
Version has been delayed
These are my personal notes on the new version of ASP Photo Gallery that should be out sometime in May/June 2004. Please ingore any typos.
This version may be more expensive than the current pro version as this is a major re-write and there will be a ton of new features.
Regardless, special pricing will be offerered to existing users.
If you see any features not listed that you think would be nice please post them here. We will of course consider them.
ASP Photo Gallery Version 4
------------------------------------------------------------ --------------------------------------------
Finished Improvements:
new setup page makes setting up the data connection easier than ever
it attempts to determine the possible data paths and makes suggestions for what to try
when you finally get the data connection working it gives you a link to the admin area of the application
so you can get started using the application
all database table names can be specified in the config_inc.asp file for advanced users that they may need
to change the table names in the database.. helpful for sql installation where one sql database must be
shared by many applications
new data folder is the only folder that needs permissions set
before multiple folders needed permissions
now everything can be put in this folder... database,logfiles,configuration files,picture upload folders...
eventually all cjwsoft applications will do this allowing multiple cjwsoft applications to use that same folder
therefore making it easier than ever to setup more applications without asking your host to set more permissions
new text based config file makes it easier to add new options to the program without making changes to
the database structure... therefore the need for the configuration table in the database has been eliminated
this also reduces system resources needed to load the config data for each page because it eliminates calls to the
database for config data
added voice effects for data connection page, intro users page, and settings page
made it so ratings color was an option (red or blue)
fixed minor bug that wasn't showing fixed category heights when that was selected and am image wasn't originally sized that way during initial upload
changed logfiles dates so they always show up in the proper order 09 vs 9
added config option to change bit query value to 1 or -1
default it to 1.... this is a technical thing
added the extra options currently in the config file to the settings page so people do not have to manually edit that
file any longer...
added new persits email option and authentication options to the settings page
added new CDOSYS emailing option
added support for dundas emailer
added support for ASPSMARTMAIL
fixed word filter so if it is empty it doesn't mess up
also make editing it part of the main settings
made email functions include file and edited all page that email to use it
added css/style sheet support and removed a lot of the old font tags
seperated the settings page into sections because it was too big and confusing
added ability for text watermarking when using the ASPImage component
made the picture upload error message no longer mention browsers that do not support picture uploading
as that is confusing people... and the problem is never that anymore
Made the ASPImage test page delete the bar graph before creating it so if it is already there they will
not think it is working
added crystal ball feature to admin users screen... shows additional user info when you hold the mouse over it
Made search function highlight search word in results.
Made the search function search the image description text files as well
Eliminated the guestbook directory as there was no need for the guestbook to be in it's own directory. This also simplified the menu.asp file as the guestbook section could be removed.
------------------------------------------------------------ --------------------------------------------
Possible Improvements:
eventually make new and much better directions/documentation... html based for multiple reasons
Eliminate the need for parent paths to be enabled on the web server.
(THIS MAY NOT BE POSSIBLE)
Many hosting companies disabled parent paths and will not enable them for their users.
On Windows 2003 Server Parent Paths are disabled by default.
make it so users ability to upload pics can be optionally disabled
possibly make some of the special functions in the extras folder built in to the admin area
Make the category picture uploader smarter because of the jpg gif issue when reuploading cat icons
A jpg loaded over a gif.. doesn't delete the old gif graphic and vice versa
Reduce number of ".asp" pages in general.
Use more functions for redundant tasks.
Optimize all instances of the old filefound function which is using more resources than are necessary
option.explicit the entire application and get all the variables dimmed once and for all
possibly incorporate the new category system I am working on which allows for unlimited categories and levels
also simplifies the heck out of the pages that call the categories
possibly add some cool image manipulation functions such as rotation for the various image components supported
possibly add the ability to move pictures around in an album. and maybe between albums
I must also remember to move the ratings and desc as well for that image.
possibly add the ability to make individual pictures require approval
possibly add the streaming image ability (asp page called from image tag) I came up with as an option for
people that can use it. this will better secure images in password protected albums and also possibly make
it so images can only be viewed from certain urls.. and maybe make an interface for a list of allowed urls
improve the .net support to also resize the larger images.. currently it does not
possibly add a feature to store 3 versions of images uploaded
thumbnail, medium res, and high res/original
this will appeal to professionals or people that may want to sell prints
storing a large version will be optional
possible support for multimedia content other than gif and jpg images
fix... url to link to.. problem on control pics page when both a jpg and a gif are present... which also relates to a another slight
bug that needs to be taken care of
make interface in admin to listen to installed midi files
and also to upload / delete them
possibly make per album guestbook... or call it something else like disussion or comments
add option to store the images orginal name in the images description area during upload
may be helpful to people that name their images in a somewhat descriptive way
change approval settings so they work on a per user basis
eliminate access levels from edit user screen and get rid of the level 4 stuff mentioned
possibly add a per user option for individual pic approval as well if I get that feature implemented
add support for the ibulc bulk upload client that I recently discovered
it is very cool cwilliams38325.8264583333, If you are using version 6 CDOSYS is not supported. That is one reason why version 7 came out. If you want to rewrite the code to work with CDOSYS in version 6 that is something you need to sort out on your own as I do not support custimization to the code. ,
I have switched to Alentus and have the permissions set correctly and Parent paths turned on. I cannot figure out how to connect to the database. Should I have the database in the aspprotect/data/database folder, or in the data folder that Alentus has in my root directory? once that is determined, how do I decide what the path to that database is? I have tried many things, but this is what the setup page tells me to enter in the data_conn file DBQ=D:\Websites\www.mysite.com\aspprotect\data\database\ASPP rotect_access2002.mdb;Driver={Microsoft Access Driver (*.mdb)};UID=Admin;Password=temp
Thank You , The main root of your web site needs a "aspnet_client" folder for .NET apps like ASPProtect.NET to run.
If this isnt quite right one of two things can happen.
1.) You'll get a pop-up error like this.
'Unable to find script library WebUIValidation.js'
2.) The ASPProtect login screen will come up but just not let you log in.
This folder only goes in the root. Not in subfolders and subwebs.
If you dont have this folder in the root of your web.
Read this article to learn how to properly create the folder.
http://msdn.microsoft.com/library/default.asp?url=/library/e n-us/cpguide/html/cpconconfiguringaspnetapplicationforaspnet version.asp
If the app is installed on a hosted server you'll need to ask them to do that for you.
You can also try copying a the folder from your own machine after creating it the way the article above says.
or
here is a copy of my "aspnet_client" folder created under the latest framework at the time of this writing. v 1_1_4322
2004-11-03_134912_aspnet_client.zip
I am not sure if copying it in is as good as having created by the server as I haven't had time to really test all of that but it should work. Ultimately all this does is put some files .net needs in the web. , An email I just received from eastcoastguy.. to keep this thread up to date
Your quick reply was greatly appreciated... I removed the password and was able to use a DSN...I will look into a DSN-less connection later..once i get this working !
Cheers
eastcoastguy
cwilliams38146.6165509259, Testing for XML Parser Support
the microsoft xml parser is generally installed by default on all new server setups..
It allows ASP code to make calls to other pages anywhere on the new as well as a lot of other handy things..
download and run this ".asp" page to verfiy that it is installed and be sure it is available for you to use
2004-12-10_132620_test_xmlparser.zip
Make sure you run it from your web server through the web browser cwilliams38331.5621180556, To finalize this thread.. a target was added to the form by the customer by accident thus causing the situation, site looks fine in ie and also firefox from a windows machine..
I dont have a mac and I have not heard of that browser before
Sounds like an issue with the way that browser handles and puts together html/flash in relation to the layout of your site which is fairly complex
less likely - could also be related to computer processor/resources as that is a decent sized flash file and could bog down certain machines on the client level.. internet connection as well ?
those are my guesses.. I dont see anything wrong from windows xp web browsing from a fast machine and on broadband.. looks pretty nice actually , Anyone have any experience configuring PhotoGallery to use a backend mySQL database?
The application connects successfully for Read operations, but no amount of troubleshooting can get it to Write records to the tables.
http://www.marc-lisa.com/photos/default.asp , Your users with Internet Explorer may have received the "Page Expired" error. For ASPProtect users, it happens when the user is not logged on and tries to invoke the target page. check_user_inc.asp puts up the login form, and IE sees it as part of the target page. Any later attempt to Back up and reload from cache gives the errror.
My solution was, after successful login, instead of falling through the bottom of check_user_inc.asp and running the target page, I issue a re-direct to reload the target page. I also added META tags on the dynamic login form to say no-cache and expire now, so the re-direct really does reload the target page. This time, of course, check_user_inc.asp does not need to put up the login form, and the new target page in cache contains no form at all. So, IE will not give a Page Expired error when Backing up to it later.
Netscape, and I gather other browsers, do not behave the same way, so I limited the solution to IE. Also, the solution only works if the target page has no form of its own.
I'm uploading my customized version of check_user_inc.asp that contains this solution. (In it, I also used the Javascript focus method to place the "cursor" in the Username field when the login form loads.)
2004-11-22_050940_check_user_inc.zip cwilliams38313.494537037, Hi - When I try the mass email feature, I get an error that says:
ODBC Microsoft access driver) too few parameters expected 1
/aspprotect/password/admin/send_mass_email.asp line 280
Oddly...this feature works fine when I use the original admin user that you setup.
But I setup another one with my username and password (not test) - because I was afraid anything with "test" could get deleted.
Any ideas on why the new admin userid would not work? Note: I have not change any code from the original installation.
, Hello,
I have ASPprotect 7 installed on my remote server. I am able to go to the examples/default.asp page and login in without any difficulties. If I copy the code from that page and paste it in a new page called the same thing but in a different folder, I get this error; (Keep in mind that this is essentially the same exact page in a different location of the website)
Error Type:
Active Server Pages, ASP 0126 (0x80004005)
The include file '../../check_user_inc.asp' was not found.
/aspprotect/Pages/default.asp, line 3
I get the same error if I paste the "protection code" I have generated into the top of a current (.asp) page in my site.
Basically, the only pages that work are the ones that came with the program as examples. Thats great, but now I need to make it work for my pages. Any thoughts?
, that variable comes from the settings acreen in the admin area. If you do not have it set properly things like what you are describing will happen., IFRAME is just an client side html thing...
has nothing to do with .NET
will work with any page extension or server side technology
As you see from that compatibilty chart I posted a link to.
Nearly every modern browser supports it.
cwilliams38155.4462847222, sorry for the confusion. I completely forgot about that flag setup, and how different it is between the two databases., This is great documentaion for windows script 5.6
in windows chm file format for jscript and vbscript.
We use server side vbscript in all our our ASP 3.0 applications so this info can be a lot of help.
2005-02-18_150921_vbscript_docs.zip
cwilliams38401.6321990741, I have narrowed it down. The ../ for includes will not work with .asp files but will work in .shtml files.
any ideas? , The PayPal feature that is in ASPClassifieds has always been labeled as experimental and has never been supported as the documentation says. About a year ago I stopped even mentioning the feature on the product pages or in the live demo because I didn't like how it worked and I decided I would just market the application as a free based classifieds. It’s just not something I can support or talk about. To work really well it really needs to be coded to use PayPal IPN and a credit system. Where ads and various extra features cost so many credits and people have to buy credits before they can post any ads.
That’s about all I can tell you. It's just not something I support. , UPDATE..
Installed a new rack mount 1u server this week.
3.2 ghz hyperthreading 1 mb l2 cache prescott cpu
2 gb pf pc3200 kingston memory
SATA Raid.. (2) 120 gb drives running hardware raid 1
It is a supermicro 1u server case and server motherboard.
The hard drives are SATA 150 120 gb 7200 rpm Diamondmax Maxtors
All high end server type stuff... It's a very powerful server and has been running great all week. 500+ hours uptime so far.
Running Windows 2003 Server Enterprise
SQL 2000 Enterprise SP3
SmarterMail
SmarterStats
Windows DNS
ZipEnable (which I am reviewing for them)
ServerMask (which I am reviewing for them)
A ton of ASP Components which I have purchased over the years.
So that means I can now focus my attention on creating software again instead of being a system admin. (Due to these server issues over the past few months I am now back to godly status as far as windows system administration goes.. not to mention I am now back up to speed on the latest processors and hardware)
So, getting back to ASP Photo Gallery...
I spent about 20 more hours this week on the new version of ASP Photo Gallery Pro.. I have another 40 or more to put into it as I have a lot I want to do.
I think it will be ready within the next three weeks. I know a lot of you have been waiting for something.
cwilliams38331.5907060185, Hi,
Could you please advise what may be causing this error:
Microsoft OLE DB Provider for ODBC Drivers error '80004005'
[Microsoft][ODBC Microsoft Access Driver]General error Unable to open registry key 'Temporary (volatile) Jet DSN for process 0x57a4 Thread 0x5474 DBC 0xf03a704 Jet'.
/ASPProtect/check_user_inc.asp, line 292
Funny thing is that if I refesh the page with the above error it gives me the following eror:
/ASPProtect/check_user_inc.asp, line 292
and after few times of refreshing the page it shows me the page I am after.
Is this my promlem or ISP's.
Thank you , Very weird for sure but I guarantee no code in ASPProtect is deleting that folder. Something else is going on the server and deleting it and I have no idea what it would be.
Maybe try leaving a blank text file in it and see if the folder disappears after a few days., I just got home from a lonnng trip.. I will try to answer this 1st thing in the morning.
CJW, (User Search & Contact Mod) for ASPProtect Version 7.x
This will allow an individual user to search for other users as well as email or call them.
Notes: This is a down and dirty mod. The users page from the admin area was used as a starting point. I then edited it up real quick to be used as a user search. The way it is it shows the user email as a regular email link. If you want to set it up so emailing is done from the application and emails are not actually shown you will have to do some extra work. If you don't want phone numbers shown you will have to remove that column which is not very difficult.
Directions:
Back up your existing ASPProtect installation.
copy "search.asp" into your "users" folder
2006-03-10_143253_User_Search_Contact_Mod.zip
Direct your users there. They will have to be logged in to view the page.
WARNING: This has not been extensively tested for SQL Injection attacks.
I think it is perfectly fine the way it is by looking it over quickly, but use it at your own risk.
, I am trying to protect and ASP page written in Javascript. The first part of the page goes:
<%@LANGUAGE="JAVASCRIPT"%>
<!--#include file="../Connections/connWINGAP.asp" -->
When I insert the aspprotect code it looks like this:
<%@LANGUAGE="JAVASCRIPT"%>
<!--#INCLUDE VIRTUAL="/GIS/WCGIS/GISProtect/check_user_inc.asp"-->
<!--#include file="../Connections/connWINGAP.asp" -->
and I get this error:
Microsoft JScript compilation error '800a03f7'
Unterminated string constant
/GIS/WCGIS/GISProtect/check_user_inc.asp, line 2
I think I understand that your code is written in VBscript and that is why it is not working. If this is the case, how can I switch to VB to execute your stuff then switch back?
Thanks,
Jess , I wasnt talking about the date for a banner ad.. I was talking about the date field in the database for a USER if there is one (I dont remember if that app had date fields for user or not and I am not at a computer to take a look)
If you do not know how to directly open up and edit the database then yes you should just make a new user, if you use either of those options the mail server info you use must of course be valid (example: mail.somesite.com) your host can provide that info
you should also make sure your sending the emails using an account at your email server.. not some other email you have
other than that if it does not send emails it could be because your hosting company may require authentication for outgoing emails...
ask them ...
if that is the case the version of ASPBanner you have does not support sending email that way and you would need to add the necessary code to any places that send email... in order for emailing to work , you have to do it like I show above... your not specifying the field name to be searched in the instr function so what you just showed me will not do anything
You also should not have the > 0 stuff in the function because it is testing the result of the function.
You have to do it just like I showed , See, and that's what I thought. What's interesting is that if I call either an aspx page or an asp page in the iframe tag, it asks me if I want to open the page, it doesn't display it. I'm using IE6 so there's not problem with the support for the tag.
I'll keep looking to find out what's going on. I think the iframe method might work best.
JDooley , Sorry, should have added, if i change the connection string, i can also get this...
[Microsoft][ODBC Driver Manager] Data source name not found and no default driver specified , Alright...I'll try those out. Also, if I do the data import on my laptop initially and just publish it to the server do you think that will help?, thank you for such a quick response -- It sounds straight forward - so I should be all set. Thanks again., This is great FREE SQL Server Web Data Administrator App from Microsoft..
http://www.microsoft.com/downloads/details.aspx?FamilyID=C03 9A798-C57A-419E-ACBC-2A332CB7F959&displaylang=en
It is an ASP.NET web application that you install locally on your development server and then use to connect to a SQL database whether remote or local.
It can do nearly everything enterprise manager can do.
I have tested it and it works great for me. cwilliams38325.7453587963, It runs on either... I used IIS
I dont remember much about installing it except it went pretty smoothly / no issues,
Timecard Entry: 3/25/2006 1:44:48 PM
lunch, Work on Business Journal Story, Lunch, close out w/o's, sorted the Watertown mail, bullets, updates, agenda, made copies for the meeting, PO for Watertown, Emails and phone calls with Tara for phone situation, Chalks - logo colorization - export files for CD, 67306-67402, via phone, Created sample renderings for guide cover image., Not busy... one call asking about prices. Checked mail and responded to the last Dial Up/Connection Issue., callbacks from voicemail, checked emails, taking sign ups, answering phone, cc report, cancellation of invoices, , Finding out liscensing on ASP-HTTP component, discussing user admin and file parsing for upcoming project., 401k meeting, small break, Lunch, emails, voice mails, did a setup. had a billing question. quite a few calls about email. 2360 was messed up too, AM meeting, Marketing, tarrif, Review FCC antennae siting rule , meet with connie schoch
meet with connie schoch dutches president, C.E.R. TOWERS GRAPHIC LAYOUT, met with river trail real estate, more radlogs and callbacks. had a user with modem problems, Getting Flu Shot, steady, batching cc, Conference Call w/ Richard Flatbush, he never called, I called him and he called back, we talked about doing it again.,
| 
