Blog News Main Page NEWS FROM 2006-03-25
Blog Entry: 3/25/2006 1:34:40 PM
Hello,
If you see that when doing a view source then that code is not running.
I will need to go into your site and look as something is very wrong on a low level and I have no more ideas.
PM or email me the info and I will figure out what is going on.
I'll need ftp or frontpage access to the site. I'll also need to know the urls for the asprotect system as well as the page you are trying to protect.
CJW cwilliams38229.7996064815, One problem that is appearing is that in the admin section, in the users.aspx page, only one user is showing up when there are in fact 9 users. Also, when I click the edit user or email icon, the page does not go to the edit screen, it remains on the same page.
Also, I’ve been trying to modify the code to adapt it for our application -- by removing fields that we do not need such as address, city, state, phone, but I am having trouble getting visual studio to compile. It could be due to the fact that the rest of the project is in C#. Or it could be due to some other factor in ASP Protect. ,
Hello Chris:
Let me run some more test if it's working on your end it should be on mine? I have made some custom updates to the code but no in that area.
Thanks, -Ricardo
, Chris,
Well some good news ! This from my hosting company this morning...
"
I'd say that the vendor is right so I've submitted a work order to create the *****.com/aspnetprotect directory as an application. If there are any other directories for which this needs to be done, please let us know. This particular task always needs to be performed by our staff.
If you need to follow up on this job with one of our on-line or phone technicians, you can reference ticket id 11860.
With regards "
Thanks for your help thus far
Andy cwilliams38455.5654513889, Glad it worked cwilliams38406.5549074074, Editing using Visual Studio.NET
Here are directions for editing the application using Visual Studio.NET 2002 or 2003 version.. either should work
Some of you are wondering why I didnt just give you the project files. It is best you go through this process and really understand what is going on. Also, I dont use VS 2002 so I wouldnt be able to give you project files that would work with that. Not to mention there is 100% chance my prject files wouldn't work for you anyway because of path differences and other things.
Anyway.. on with the instructions...
1st.. make sure IIS, ASP.NET, .NET Framework, and Visual Studio.NET are all installed correctly and up to date.
Open Visual Studio.NET
File - New Project
Select a New Visual Basic ASP.NET web application.
give the new web to be created a name.. I called mine "aspprotectdotnet"

Hit Ok..
Now. once the project opens up we need to delete a few things in the solution explorer window.
So delete "webform1.aspx" , "deletestyles.css", "Global.asax", "AssemblyInfo.vb", and "web.config"
Basically all the files under the project...
Now... you should have the aspprotect.net files unzipped somewhere on you hard drive...
open that folder and select all the files and folders like so

Now drag those selected files and folders to the solution explorer window of Visual Studio.NET right on to the name of the web. In my case "aspprotectdotnet"
It might say this folder already contains a folder names Bins.. just tell it to copy over and continue on any prompts like that.
You'll notice your project is now populated.
Open up the references tab in the solution explorer window as we need to add some references to the dlls in the bin folder of this project. This is needed so the compile process and function correctly.
Right click on references.. click add reference Then browse....browse on your hard drive to the location of the new web and the bin folder within it.
In my case... "C:\Inetpub\wwwroot\aspprotectnet\bin"
Choose "aspprotectlicense.dll"
Hit open...
Now do the same thing again until you have added all the dlls in that bin folder to the references..
Now.. click add-references again and this time choose "system.management" from the choices in the .NET tab
Once all of that is done your references should look like this

Now in the Visual Studio.NET menu system up top..
Choose Build - Build Solution
If you did everything right you will see something like this in the build window
------ Build started: Project: aspprotectdotnet, Configuration: Debug .NET ------
Preparing resources... Updating references... Performing main compilation... Building satellite assemblies...
---------------------- Done ----------------------
Build: 1 succeeded, 0 failed, 0 skipped
You now have the visual studio side of things all set up.
To make the project actually run we now have to set some permissions and edit the web.config file.
Using windows explorer browse to the web the app is in. Right click on the "_database" folder and give that folder and all the child folders within it. Modify permissions for both the Anonymous webserver account and the ASPNET account. These accounts might not show up until you dig into the advanced tab and click find now to show all the accounts on the machine.
Permissions screen looks like this...

Once that is done go back the solution explorer window in visual studio.
Open the docs folder.. right click on "sysdiag.aspx" and choose view in browser.
It should complie the project again.. and then run that page in either the internal or external browser depending on how you have that set up.
That page will report back path information. "BTW.. for security reasons this page should be removed from any production server after installation is complete.. this is very important" In my case it looks like this.
Probabale AppRootPhysicalPath c:\inetpub\wwwroot\aspprotectdotnet
Probabale AppRootUrlPath http://localhost/aspprotectdotnet
Probabale Path to Access Database c:\inetpub\wwwroot\aspprotectdotnet\_database\aspprotectnet2 002.mdb
Now we need to edit the web.config file... your going to need to know some of the path information above.
In solution explorer double click on web.config.
Now edit the AppRootPhysicalPath, AppRootUrlPath, and CN keys accordingly.
In my case they will look like this.
<!-- PATHS USED BY THE SYSTEM --> <add key="AppRootPhysicalPath" value="c:\inetpub\wwwroot\aspprotectdotnet" /> <add key="AppRootUrlPath" value="http://localhost/aspprotectdotnet" />
<!-- MICROSOFT ACCESS KEY --> <add key="Cn" value="Driver={Microsoft Access Driver (*.mdb)};Dbq= c:\inetpub\wwwroot\aspprotectdotnet\_database\aspprotectnet2 002.mdb;Uid=admin;Pwd=" />
Now.. because our web is really not in the root of our virtual directory which starts at "inetpub/wwwroot" we need to edit another tag in this file.
Find the forms tag near the bottom.
<forms name=".aspprotect~net" loginUrl="/aspprotectlogin.aspx" protection="All" timeout="60" path="/" />
Change it to say this
<forms name=".aspprotect~net" loginUrl="/aspprotectdotnet/aspprotectlogin.aspx" protection="All" timeout="60" path="/" />
Notice tha part in bold that we added.
Now, you may also want to check the temp license key info while you are in that file and make sure it is not expired but I am not going to get into that here.
Now save and close that file and do a compile again.
In solution explorer open up the "aspprotectadmin" folder. Right click on default.aspx and click browse
You should see the login prompt in your web browser..
Log in with
admin temp
all lower case
You should see the users screen of the application,
Click on the system info tab up in the top left... make sure all those paths are correct and save it.
Go to the settings page of the admin area. Make sure all those paths/settings are correct and save it.
Congratulations... you just set up a visual studio web project from scratch and our now ready to edit and compile an advanced web application.
From here on your on your own, but feel free to ask questions in the forums as you will probably get help from myself or others who own the software.
One last thing... because we are not in the true root of the web on the development machine the examples in the example folder will need the reference to the "protectpage.ascx" file modified before they will work
It will need to go from
Src="/protectpage.ascx"
to
Src="/aspprotectdotnet/protectpage.ascx"
If this app was installed in the true root of a domain on a real webserver.. you would not have to edit the forms tag in the web config file or change the paths in the examples as they would be correct the way they came , If you have found out that parent paths are disabled on the web server you can still use the application.
Before you continue.
If it is your server consider enabling parent paths to solve the problem.
If it is not your server consider asking them to enable parent paths for your web site to solve the problem.
If that is not possible please download this zip file. 2005-02-20_150703_aspprotect_v7.x_alternate_include_file_pat hs.zip
This zip file contains 3 sets of alternate files depending on your situation. You simply replace your existing aspprotect v7.x files with these new ones.
The zip file contains the following folders and files.

Below is the contents of the readme.txt file which explains everything.
The following folders each have a version of all the files in the ASPProtect system that might need to be edited in case you need to change the paths for the server side include files. There are 3 different scenarios.
(parent paths enabled) - This is the way the application comes. The files in this folder have FILE server side includes containing "../" information. While these includes will work when the applicaion in is any location of a website they will not work if parent paths are disabled on the web server. Generally you will want to use these on your xp development machine. You can of course use them on your real server if parent paths are enabled. Parent Paths are now disabled on II6 by default and some hosting company will not enable them.
(domain root) The files in this folder have VIRTUAL server side includes in them. These includes only work when the applicaion is installed in the root of your web domain. For example if your domain was called "www.somedomain.com" the following aspprotect files and folders would end up like this "http://www.somedomain.com/check_user_inc.asp" "http://www.somedomain.com/password_admin" "http://www.somedomain.com/users"
(domain directory) The files in this folder have VIRTUAL server side includes in them. These includes only work when the applicaion is installed in a directory called "aspprotect" in the root of your web domain. For example if your domain was called "www.somedomain.com" the following aspprotect files and folders would end up like this "http://www.somedomain.com/aspprotect/check_user_inc.asp" "http://www.somedomain.com/aspprotect/password_admin" "http://www.somedomain.com/aspprotect/users" You can change the name of the "aspprotect" directory but you will will have to edit the includes in the files.
Lastly, if you are on a local machine and insist on using the VIRTUAL INCLUDES you would also use the (domain directory files) even though you dont have a domain on your local machine most likely For example if your site was installed like so. "http://localhost/aspprotect/check_user_inc.asp" "http://localhost/aspprotect/password_admin" "http://localhost/aspprotect/users"
cwilliams38403.6836342593, Umm, if your using MSACCESS your using MSACCESS
SQL server has nothing to do with it. , Yes, you are right. That was the problem. Sorry 
Cheers
Roy
, ok, 1st we need to rule out the #1 reason people sometimes think that is not working.
Is is set up never to allow the same IP to increment the count more than once in a row so when testing it is real easy to think the count isn't working because unless you can change your ip you can not increment the count more than once per album
It's a poor mans spam abuse type of deal.. For the most part it will keep some Joker from hitting refresh 100 times and inflating the count of an album.
Do you think that is possible what is happening ?
Also, here is an older thread about the same issue? http://support.cjwsoft.com/code/moreinfo54-2.htm , I believe what happened is we received the older copy of ASP Banner iwht our purchase of ASP Protect and were notified of a free update to download aspbanner_unlimited_v8.2_feb_26_2005.zip which we did, and that's the one i recently put on our site.
Sounds from your reply that something technical is going on to the point where I will have to hire one of our Web consutants to dissect for us. We'll try again and track our issues and send another request for information when we can show you a specific example of what is happening. I'll be in touch. , IT worked just as cwilliams said. I did see the IP address being stored in the table but it didn't dawn on me that it was tied in to the view count, I tried it from a different IP address and it worked great .
Good coding Christopher
Thanks
John , I'm getting errors when clicking the Update Config Button in the System Info page and when clicking the log files button.
I'm not sure if it's a permission thing or not. ASPNET and IUSR both have modify access to the _database folder and childs, yet I'm still getting the error:
Access to the path "D:\Inetpub\wwwroot\aspprotectnet\_database\xsd\aspprotectne t_config.xml" is denied.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: System.UnauthorizedAccessException: Access to the path "D:\Inetpub\wwwroot\_database\xsd\aspprotectnet_config.xml" is denied.
ASP.NET is not authorized to access the requested resource. Consider granting access rights to the resource to the ASP.NET request identity. ASP.NET has a base process identity (typically {MACHINE}\ASPNET on IIS 5 or Network Service on IIS 6) that is used if the application is not impersonating. If the application is impersonating via <identity impersonate="true"/>, the identity will be the anonymous user (typically IUSR_MACHINENAME) or the authenticated request user.
To grant ASP.NET write access to a file, right-click the file in Explorer, choose "Properties" and select the Security tab. Click "Add" to add the appropriate user or group. Highlight the ASP.NET account, and check the boxes for the desired access.
Any ideas?
Thanks
 , Sounds crazy. I recently took over this web site and all IT duties. User today said member area was not working. All pages would not display. After restoring some files I got the members area partially working. But I cannot find where the database sits. I am able to get in and view users in the admin are and log in as a member. Thanks., Okay, I'm going nuts trying to find that settings screen.
I've got a dedicated server that I connect to using "Remote Desktop
Connection" so it looks like a regular Windows desktop. It's running
Windows Server 2003.
There's a program called "IIS Manager" but I've looked at all the
options for all the different sections and I don't find anything that
looks even remotely like that screen. And, of course, Windows
Help is no help at all.
What program do I run to get to that configuration screen?
Thanks,
Robert Gidley
, [QUOTE=afifm]
I was actually able to do similar thing by allowing our dedicated search engine to access the site unchallanged.
<% If Trim(Left(Request.ServerVariables("HTTP_USER_AGENT"),11)) = "MYPASSWORD" Then SearchFlag = True End If If SearchFlag <> True Then If Session("Access_Level") > CHECKFOR or Session("Access_Level") = "" Then %> <!--#include virtual="/Auth/check_user_Code.asp" --> <head> <title>My Title</title>
</head>
<body>
My Protected stuff here
</body>
</html>
For this to work, the search engine must pass the PW to the web site. I just was not sure how to do the same thing with IPs. I will play with the code and see what happens. If it works, I will post it here to help others, if this is OK with forum rules.
Thanks,
Mo
[/QUOTE]
I just added couple of lines and it works fine
If (Request.ServerVariables("REMOTE_ADDR")) = "xxx.xx.xxx.xxx" Then ' Session("PasswordAccess") = "Yes" SearchFlag = true End If , I have noticed that during the file import, that some of the pictures get messed up. I can import aroun 150 pictures into different albums, say 3 albums with 50 each.
I have noticed however that some of the get messed up. What is happening is...the thumbnail will be correct, but after you click it the picture that shows up is one form a different album.
Any cure for this? , Well, hold everything.
Looks like I did it right. The latest user showed up in the correct group.
I guess the ASP pages had to refresh at the server or something...
It's still a great product, BTW. Almost five years for my enjoyable ride with ASPProtect!
, I have been having some display issues with the .NET version of ASPBanner. I set the size of the image, and I set the size of the banner and there is still white space above and below the image. I am not using a text link below the banner, so I have it set to blank.
Here is a link to my page.
http://www.nababaseball.com
Two of the three banners in the rotation on the main page have non-white backgrounds so it's easy to see the issue I'm talking about.
Is there a way to tighten up the formatting so that the image fits onto the page in the size specified?
JDooley , No, Unfortunately.
I have seen your messages.
I have not edited the code at all.
Tomorrow I will install the sql database again from your script as I
did before and I will try again. I will send all the details.
Thank you again.
, Along with being able to set an expiry date or number of impressions, is it possible to add another option for a banner to be "non-expiring"?
With our current ad software (which we are transferring all data from to ASPBanner), we run banners for both paid advertisers, and for our own services. The banners relating to our own services, we would like to set to "non-expiring" so they appear all the time. , issue resolved.. new files did the trick, YAY! I FOUND A BUG IN MY TESTING!!! Do I get a cool t-shirt or a coupon for Ben & Jerry's Ice Cream? 
Hehehe... seriously, thanks for digging deeper and spotting the error.
You got some mad skillz and some excellent service, Mr. Cwilliams!
, They really have do not have anything to do with each other as far as code and numbering goes, but I really do not fully understand your question or where you are going with this. (the part about the user setup ?)
Groups are more powerful than access levels and are meant to replace them. Access Levels are only there for backward compatibilty with older versions. ,
These Settings:
Picture upload feature settings. |
Use_Picture_Upload |
< = value=True name=Use_Picture_Upload> Check this if you will be using the picture uploading feature. |
UploadDirectory |
< size=60 value=C:\Inetpub\virtuals\aspphotogallery.com\Web\demo\pictu res name=UploadDirectory> Example: "C:\Inetpub\wwwroot\ASPPhotoGallery\pictures" Ask your server admin if you are not sure. This directory needs proper permissions for the SAFILEUP component or the VBSCRIPT solution to work correctly. It basically needs to same permissions as the database directory would need when using Microsoft Access. |
PictureURL |
< size=60 value=http://www.aspphotogallery.com/demo/pictures name=PictureURL> Example: "http://p600laptop/ASPPhotoGallery/pictures" This is the web URL of the the upload directory specified above. |
Use_SAFILEUP_Upload |
< = value=SAUP name=Upload_Solution> This option will enable file uploads using a component called SAFILEUP which is high end upload component available from www.softartisans.com. It is far superior in performance and reliability compared to the VBSCRIPT file upload solution.It is highly recommended for a busy site. If you enable this component and do not have it installed on your web server you will cause an error. |
Use_ASPUPLOAD_Upload |
< = value=ASPUPLOAD name=Upload_Solution> This option will enable file uploads using a component called ASPUPLOAD which is high end upload component available from www.persits.com. It is also far superior in performance and reliability compared to the VBSCRIPT file upload solution.It is highly recommended for a busy site. If you enable this component and do not have it installed on your web server you will cause an error. |
Use_DUNDAS_Upload |
< = value=DUNDAS name=Upload_Solution> This option will enable file uploads using a (FREE) component called DUNDAS UPLOAD which is a high end upload component available from www.dundas.com. It is also far superior in performance and reliability compared to the VBSCRIPT file upload solution.It is highly recommended for a busy site. If you enable this component and do not have it installed on your web server you will cause an error. |
Use_VBSCRIPT_Upload |
< = value= name=Upload_Solution> This option will enable file uploads using a pure VBSCRIPT solution. It requires VBSCRIPT version 5 or higher to be installed on the server. The solution usually works fine, but has been reported to cause memory leaks on XP machines. | , sure and thats probably what you should do... that pure asp upload thing must not be able to handle the size of your import file... another thing which can very .. also some versions of IIS require registry changes to upload bigger files via asp code alone , I am not sure. I can tell you that I run windows 2003 server and I have never had any issues setting permissions for ASP.NET files and folders. This very server is 2003 and the ASPProtect.NET demo runs on this server as well.
Course, I can't say that I have specifically tried to remove ASP.NET READ permissions on the database folder as it's just not something I would not have a reason to do. Why are you trying to do that? The ASP.NET account needs that permission. If you are trying to stop file browsing and downloading in that folder that is not how you do that. The best way to do that is by keeping the database somewhere else on the server that is not part of the http web. , sorry your having so much trouble. A good host is a must.
Yes, that is most likely permissions related. http://support.cjwsoft.com/code/moreinfo27-1.htm
You may want to read over my article on how permissions are set. It will give you a very good understanding of the process and may help yo when dealing with your hosting company.
http://www.powerasp.com/content/new/windows_2003_server_and_ permissions.asp
there is also an xp pro version of the article for people doing locl development and running iis on their xp box http://www.powerasp.com/content/new/windows_xp_pro_and_permi ssions.asp , do you have "use picture uploading" checked in the settings ? that is important..
have proper permissions been set on the picture folder ?
are the paths set correctly for the picture folder ?, Right, I've done that. My concern is that it will time out again while I'm trying to import the file.
The import/export manager does not show up under the users tab when I log in normally. I have to pull up the page in frontpage and then preview it a browser to get it to show. , Hello,
Sorry, I do not have any good ideas on this one... Domain Name Masking can cause issues with quite a few things.
cwilliams38366.3136342593, Okay, I deleted out the aspprotect folder and started over. I also took out the dsn connection to the ecommerce database and deleted out the subweb that had it, I decided to use another provided where the database is resident on thier servers not mine.
I broke my txt file into groups and it's loading sort of. The first 1000 users uploaded fine...the second said it timed out, but when I looked at the access database it showed 2000 people. The login still times out and every page seems to load incredibly slow still. , I dont know. Perhaps a fresh installation in a new folder would be a good idea as well if possible..
for troubleshooting sake.. , I dont know about your error on line 6 when uploading..
as far as the manaully edited import file not working I would really need to see it. There has to be somethin wrong with it's format.
I really need more information and possibly acess to the system to do some troubleshooting...
This is anot a feature anyone has ever had an issue like this with. , Hi there,
Just bought ASPProtect 7.0 last week and just got around to installing it. I've gotten through the installation and am now trying to test the (Forgot Password) functionality.
I get the following error when I type in the e-mail (or in some cases the username) and Post the form.
Error was [11004] Valid name, no data record of requested type
I know that the add user functionality is pointing to the correct database (I see the additional rows via SQL Enterprise Manager) and that the e-mail address I am looking for is in the SQL database.
Any ideas? Any other information you need?
Thanks, Toni
, I would say that it isn't all that difficult using mySQL for the backend....the main thing is to make sure you set the primary keys for auto-incrementing in your database. Alos need to make sure that any DELETE SQL statements are formatted like this
DELETE FROM tblName WHERE tblField=SomeValue
and not
DELETE * FROM tblName WHERE tblField=SomeValue
The same holds true for using MSSQL , Hi Chris,
The password is HANNAH. If you're into trouble shooting mode and would like the key, I can send it to you. If not, no big deal, I've email the guy a new password. We'll see how many rounds it takes him to get it right.
Thanks, Mick , [QUOTE=cwilliams]
Every application we sell that has a password on the database uses "temp"
Also, the password is in the connection string in the dataconn_inc.asp file.
After all, the ASP code needs to know the password just like anyone that wants to open the database would.
[/QUOTE]
That i have, my question revolves around the all the users and passwords that I in that database. I need to be able to export that list to word for a mail merge list, but when I do the passwords show up encrypted. I need to be able to get an unencypted list.
thanks , humm.. their FAQ is interesting...it looks like some sort of .NET configuration issue regarding security policies like you mentioned
Thats one of the big problems with hosting .NET. Some hosting companies just do do some oddball things. ASPProtect.NET works under default conditions but when hosts go around locking things down to the max there is bound to be trouble. This is the 1st I have heard of this.
Now, ASPProtect.NET does use the "System.Data.OleDb" and "System.Data.Odbc" which your host says they block because they require full trust.
All I can really say at the moment is go with a hosting company like www.alentus.com or www.maximumasp.com that does not restrict your .NET abilities so much.
In the meantime I am going to ask John Evans what he thinks about this.
, I checked the option pack code as well and it looks correct. I tested it and it acted as it should.
You can see it in active at the live demo http://www.aspprotect.com/demo3/demo.asp
admin test
go the the admin area.. you will notice 3 users with level 4 access 1 of them is inactive
then go to the mass email area and pick active and level 4 it will say it is sending email to 2 users which is correct
then go to mass email again and pick level 4 and inactive it will say it is sending email to 1 user which is correct
choose any status and access level 4 and it will send email to 3 users which is correct
When you do this please realize you can not choose a group as well. That will cause a problem because you can not choose a group and an access level at the same time.
Anyway... perhaps you can private message or use the contact us form and and let me take a look at your system. Since I can't reproduce the behavior that is the only way we might figure this out. cwilliams38104.690787037,
Timecard Entry: 3/25/2006 1:34:40 PM
added a billing section to Work Request System and added an "Address" field to request form (internal, billable, programming), Handled more calls than usual regarding busy signals or disconnected with servers. Found in each case that the problem was with the customers system., not too busy, alot of calls from Lowville, answered calls, and tried to keep an eye on radlog, Order two phones for Herald Building, Took tech calls, checked DUI, RAD AUAQ, and Voice mail. Alright day., Reviewed STLD contract, answered calls, call backs, billing calls, Jim Miles re: VPB connectivity, Checked voice/emails
Created Purchase Order Work Book, continued evaluation of ISP home pages, assisted other techs in a variety of tasks (including answering ques. and troubleshooting printer problems), Channel Partners Tips , etc., Authentication server down... 2 hours of almost straight phone calls. (no incidents), misc. upkeep duties, reconcile billing for wend 4/9/00, email / voice mail, answering phone, taking sign ups, and checked emails. , E-mail, lunch, W-4s, etc, answered tech related calls. checked ask a ? emails and dial up issues. checked voice mail., cancels, covered phones downstairs, ran to get cream, faxed summmary and filed cancels, Went to Physical Therapy., added picture gallery upload component pages to TI Bait Store (tibait.com, billable), Called back some of the expired lists when I had a chance. , Talking to CW about SQL server trying to get some example code., Audit stuff, disability, anwering all kinds of questions on all kinds of things, Mary Mesires, end of the day, filing, ect. Trying to get Paul out of here on time for next appointment-will never happen., mostly tech calls on Lowville i called logical net about the issue and left a voicemail... about 4 hours later it still was not fixed nor had i heard anythin from the technicians so i sent an email about the issue to Dan, Travel to work,
|