Home | Advertising Info138 USERS CURRENTLY ONLINE   
PowerASP
   Site Search Contact Us Friday, March 14, 2025  

PowerASP active server pages asp.net microsoft .net framework sdk learn asp what is asp tutorial learn asp.net CJWSoft ASPProtect ASPBanner ASPClassifieds



Blog Entry: 3/25/2006 1:38:31 PM

Thank you...I thought I was doing something wrong - and thanks for the tip on the virtual path.,

After I approve someone's username and password, then go to send them the default e mail telling them of the approval, the e mail never goes through.  The e mailing used to work well for many months, but it stopped working.  Any thoughts?

Spider

,



1) Does everything, i.e. every user, every category, every product, etc., get stored in just one single database, or are there multiple databases at work and are linked to one another?  I am asking because there is only one table in the DB, and it is the "Users" table.  So I am presuming that there must be other databases that are linked to the DB.  Is this correct? 

2) Are user-level security permissions utilized in the sample Access DB that is shipped with the software?  I am asking because we cannot seem to remove the "temp" password no matter what we try, and this is the only reason I can think of. 

,
(Password Expiration Mod) for ASPProtect Version 7.x

This Advanced Mod requires decent knowledge of Databases and working with ASP. I originally wrote something like this for a customer on a custom project. I then took the time to re-write all the code from scratch so it could easily be plugged in to the current version of ASPProtect as an option. All in all this mod took me over 15 hours of time to develop and will save you a ton of time & money if you were planning on writing something like this on your own. Some parts of this were so difficult to get working that I would never have written this code if I was not paid to do so. (The encrypted array that rotates through the last 12 passwords was quite frustrating to get working)


 
The price on this is 19.95. I am not incorporating this into the base product because it makes things more complicated and isn't for everyone.

Purchase Page

Security is a big concern and making your users change their password every so often is a good idea. Keeping track of previous passwords they used and making them choose something they haven't used before takes the concept even further.

This Mod will add a password expiration date to the application. When the password expiration date is hit the user must confirm their old password as well as pick a new one before they can log in again.

There is a new password expiration directory where they must choose a new password that has not been used before. The new password must be confirmed during this process. (It remembers 12 old passwords the way it is coded) The old passwords are stored in the database in an encrypted array.


Directions:
Back up your existing ASPProtect installation.

Add two new fields to the "ASPP_Users" table in your database.

For an MSAccess Database

Password_Expiration_Date (Date_Time Field)
PreviousPasswords (Memo Field)

For a MSSQL Database

Password_Expiration_Date (smalldatetime)
PreviousPasswords (nvarchar 160 characters)

once that is done

Copy all the new ".asp" pages into your site.


Edit the "PasswordExpirationURL" variable in the "check_user_inc.asp" file

It needs to be the full URL to to the "change_password/default.asp" file


Now edit the "change_password/processchange.asp" file

There are 3 variables you can edit.

PageSentToAfter = "http://localhost/aspprotectmods/password_admin/default.asp"
PassMinLength = 4
PassMaxLength = 8

The "PageSentToAfter" is where you want them sent to after they change the password. It can be whatever you like.
If it is a protected page they should automatically get logged in with the new password they just changed to which is nice.

The other two values should be obvious.

That's it...

Just remember the password change thing is not used in the admin area...
You could easily add code for that on your own though by looking at the the password expiration code I added to the publics "check_user_inc.asp" file

Also:
You will see a new field to edit on the user edit screen for the Password Expiration of course. 
,

Is there a way to protect other virtual sites on the server that are not under the default web site considering people may have different websites running off one server?  I get the following error:

Parser Error Message: Cannot use a leading .. to exit above the top directory.

Source Error:

Line 1:  <%@ Register TagPrefix="aspprotect" TagName="checkaccess" Src="../../protectpage.ascx" %> 
Line 2:  <aspprotect:checkaccess level="4" groups="null" runat="server"></aspprotect:checkaccess>
Line 3:  

Thanks!

 

 

,

if it is your own XP machine there is no reason you should edit that config file manually.

simply set permissions on the data folder and all the folders in it and the application will write to the config files on its own... if you are having problems chances are you are not setting permissions correctly.. please read all of this
http://support.cjwsoft.com/code/moreinfo56-1.htm

if is not an XP machine (your post was confusing and I am not sure) then this is an article for 2003 server
http://support.cjwsoft.com/code/moreinfo136-1.htm

Most importantly whats the real error ? error 500 does not help figure out anything
http://support.cjwsoft.com/code/moreinfo11-1.htm

lastly make sure you go into iis and make that web its own application

,

Christopher,

Thanks for the reply. I think I've found my problem, but can't test until later in the evening as it is on a live site.

Darrell

,

(Password_Email_Confirmation_Mod) for ASPProtect Version 7.x

This will change the basic registration pages so that the email address and password entered must be confirmed when signing up. This eliminates the auto generated password during signup.

Some may prefer it working this way.

Directions:
Back up your existing ASPProtect installation.

Copy the two new files into your "users" folder

"register.asp"
"add_new_account.asp"

2005-12-01_182201_Password_Email_Confirmation_Mod.zip

,

Hello,

for an admin..
you view albums for a user.. make a new album... then click manage pictures

for a regular user you log in.. go to user user area.. create an album..then click on manage your albums

, I have run into the same problem with streaming pdfs to the browser using the stream_download.asp example, but only when selecting the option to open the file directly into the browser (after it's streamed back) as opposed to saving it and then opening it (which works fine in Firefox and IE).  Then I ran across this Microsoft support article

http://support.microsoft.com/default.aspx?scid=kb;EN-US;Q2 97822

It got me thinking that maybe a header needs to be included in stream_download.asp that tells the browser to specifically cache the file. Adding this suddenly got everything working

Response.CacheControl = "Public"

right after this line in the code

Response.ContentType = "application/octet-stream"

My asp is limited, but this seems to work at least for pdf documents.  Can someone confirm this?  The other question I have is if this is a solution, should the CacheControl be set to public or private.  Not sure on what the implications are.

Firefox by the way seems to open or save and open the file without this, so you are right that the implementation between the browsers is certainly different.

Tom

,

That would be great.

I am sure you know that many virus that are sent via email have the same property. (double extension). The code can be executed even though Windows identifies them as simple text files etc.

Thanks again

, when did you puchase/download the application? you may have old code., I just made a new admin account and I still can not log in using it ?

Did you by chance edit the code by adding LCID info or something like that ? Something is just very wrong. 

The simple example protected pages can not even be logged into ?

,

OK, I figured out the problem.  Not running ASP becasue the pages are not saved as ASP but rather HTM... OK so I am smart like a tractor but strong like an ox.

cwilliams38229.9128819444,

Hello,

You'll need to find a validation function to test for it.
Either server side or right in the form via client side javascript.

I dont have any experience with validating zip codes here much less UK.

Google it would be my best advice.. or maybe find some free app written in UK format and see how they did it.

Good Luck..

And if ya find anything post it here if ya like

cwilliams38381.5607638889,

- I am using the original files that came with the software.
- The software ads items to the database flawlessly.
- ASPImage works great.

- When I try to remove an ad or an image it says it's been removed.
- The ad does not show up on the site anymore.
- BUT, when looking at the sql database the ad is still listed there.

Why is the software not deleting the columns from the database and the images from folder?

Note: My other tables for other projects, in the database, allow me to delete them.

,

Version 8.1 can work with MySQL
http://www.aspbanner.com/aspbanunlimited_v8.asp
It is just not supported at all.

The standard version can not work with MySQL.
There were a lot of changes to make the new version work with it and I really only did ift because I have a couple friends with busy sites that could only use MySQL.

It sounds like your site is way too busy for using an access database as you mentioned.

,

Anyway,

How busy your site is actually won't be the only factor. Really the application should not restart unless something happens. If the IIS application is reseting alot it could very well be the ISP restarting the server or doing IISRESETS as well or other sites on the server causing the application pools to restart.. etc etc etc  Quality ASP hosting is important. Regardless your hosting company most likely will not admit to anything be out of the ordinary.

As far as that directory deleting itself on you.. I doubt they will have an answer for that one. All I can tell for sure is I didn't put any code to delete it in there.

,

I have been using this solution for over a year now and think its great, however I recently logged on to add a banner and when I clciked on the link that opens a window, displaying all the gifs in the directory../images/banners/, now images showed up, however they do exist in that directory.

I recently upgraded my computer and am now using windows XP...could that be the problem?

 

Thanks

 

,

at this point I would say install a fresh untouched copy in the web in a different directory and lets see if it acts weird from scratch.. the we can go from there.. I dont know what is going on

,
I had a question about user registration and how it works, mainly because I am having a problem.
 
When a user registers, with the email verification setting, I am assuming that there is supposed to be a new record created in the USERS table in the database. What could cause this not to happen?
 
Actually, in testing further I found that with the setting at Auto, Manual, or email, the record is not added to the table. And, if I am logged in as admin, the Add User button does not do anything.
 
I can however edit and delete user records...
 
Hmmm, adding a Category yields the same thing. And loggin in as a non-admin user still displays some of the menu items for admin, but then gives a page can not be found error if you click on one (ie, approve).
 
This looks like a db issue to me, I will have to try this with access and on a test server...
 
Any thoughts?
 
- Jason
 
 
cwilliams38303.8507291667,

that really does not make any sense...

I dont know what else to tell you as this really shouldn't be anything too difficult to sort out...

redirection based on criteria is not something aspprotect does by default... I try to help a bit... I've shown everyone how to do it in this thread...I know plenty of people doing it... I've done it myself... I know it works

let me ask you this... are you using ASPProtect 6 with the Option Pack ?
I assume you must be or you would not have the Groups feature ?
And you asked this question in the ASPProtect 6 section.

but then maybe your using 7.. I do not know

this should all work the same either way

,

Dear Support Team

I have read and Installed your v8 banner software

exactly as explained on XP pro which contains other asp working app.

I have problems with the " Application " and " Session" in your scripts

things that make the iis fall dead.

also in the file asp _unlimited_config.asp

you have exlained that every thing must be kept without the "" marks.

well i get http 500 error cause of it.

 

Please advise

Thanks

Ran

 

 

,

Microsoft has a free version of SQL server 2000 than you can run on a development machine.


http://www.microsoft.com/downloads/details.aspx?FamilyID=413 744d1-a0bc-479f-bafa-e4b278eb9147&DisplayLang=en

This is really the same thing as the MSDN version of SQL server that comes with Visual Studio

It is limited in two ways.

  • No single database can exceed 2 gigabytes in size. However, each Desktop Engine server instance can contain many databases, each of which can be up to 2 gigabytes in size. Each computer can host up to sixteen instances of Desktop Engine.

  • Performance will rapidly decline when more than five simultaneous users use the database engine at the same time. With five users or less Desktop Engine will operate with full SQL Server speed.

    After you install this your going to need a way to connect to your sql server as well as a way to run queires on it.

    I suggest either install the client tools off any SQL 2000 Installation Disc (giving you enterprise manager and query manager)

    or use the FREE SQL Server Web Data Administrator which will do amost everything you  will need to do. It is really very slick
    http://support.cjwsoft.com/forum/forum_posts.asp?TID=127& ; ; ;PN=1

    Then you have a pretty sweet setup for testing and developing locally using SQL server.

    If you are wondering why someone with a real SQL Server 2000 cd wouldn't just install the real SQL server locally it is because the server part will usually not install on XP Pro or non server versions of windows for licensing reasons. (at least every SQL 2000 CD I have is like that regardless of whether it is standard or enterprise) But the client side tools on the cd are invaluable so I just install the Desktop Version of SQL along with the client side tools and everything works great.

  • ,

    Hello,

    Unfortuantely I can not help you much regarding the javascript because I am a server side code kinda guy. Client side javascript just isn't my thing. That was free javascript code that I used for that function. I really do not know enough about editing client javascript. Sounds like you might though.

    Style 1 is really a relic left over from the standard version. I just left it in in case someone wanted to use it. Like I said because it is javascript making it do more than it does is tricky (at least for me)

    Now,, for actually getting description code. The thing to do is check out how that all works in the pic_window.asp file which is what style 2 two uses. Bascially descriptions for an particular album get stored in one text file. We read that test file. Put the lines into an array. Then display the info which gets run through a functions to convert some special characters used when saving back to normal.

    I tried to look at your site but it woulnt load for some reason.

     

    cwilliams38420.0809259259,

    1st off.. you appear to have some strange things going on with that domain. Looks like you have a frameset and are loading another domain in it which is always confuding especially if you are running the site off your home computer or something... I am not sure

    That aside..

    If I go to

    http://www.bones.myftpsite.net/rfamilystuff/default.asp

    and click on the "familiy" category

    then right click on a broken image.. look at properties

    Your linking the image to your localhost

    see

    http://localhost/rfamilystuff/pictures/Pic_3_1_thumb.jpg

    and that is wrong, just like I said above

    Nobody running the site off any computer but your development machine is going to see those pictures because the url isnt valid for them

    My guess is in the settings you have the "PictureURL" set to

    http://localhost/rfamilystuff/pictures

    when it should be

    http://www.bones.myftpsite.net/rfamilystuff/pictures


    Good luck with this.. I am going to the bar.
    If you need more help I probably will not be available until Monday.

    cwilliams38394.7688773148,

    probably.. better than what we are accomplishing here LOL

    or if you like send me the import file and your encrpytion key and I will try it out here and see what happens

    either way PM me any sensitive info if any

     

    ,

    Just wanted to let you know that after modifying the remote host string in the email pages and getting the correct connection from my server, everything is running fine.

    I hope you enjoyed your vacation.

    thank you
    adam

    , Great!  Sounds good Chris.  ,

    Ok time for some more questions!!!

    Is there a way to make the person's email address their default username... or force it in somehow instead of allowing them to create their own?

    , on that particular page check the session variables manually (not using the include)

    that way you are keeping the login access checking to an absolute minimum, elminating any form processing from the login procedure, and keeping the upload script happy

    like so

    <%
    If Not InStr(Session("Groups"),"*1*") Then
        ' do whatever
    End If
    %>

    you could response.write something followed by a response.end

    or you might even want to response.redirect them to some other page that using the "check_user_inc.asp" where they can log in

    And if you are going to be using a free asp upload script use this one as it is probably the best pure code upload solution available as far as performance goes.

    http://www.freeaspupload.net
    , I have ASPPhotoGallery installed. Everything has been working great for some time. Suddenly, for no apparent reason, I am not getting the "Hits" incremented when a user opens an album. It works when an administrator is logged on. Does not for any anonymous users. Everything else seems to work fine. Again, this used to work. Any ideas. ,

    Our webhost set the permissions, but the error is still there, so that is obviously not the problem.  We now have both our webhost and our asp support technician trying to figure out the problem and everyone is stumped.  Can you please provide us with the following information to help us out:

    1) what is the name of the file that sets the connection string?

    2) what is the name of the file, if it is different from above, that sets the password of the database?

    thanks

    ,

    Not sure because of the nature of the javascript method

     

    for starters tighten up the html around the banner call

     

    change

     

    <tr>
    <td width="460" height="60" align="center" valign="middle" class="imagead">
    <!------- ASPBanner Ad code ------------->
    <script language="JavaScript">
    var code = '';
    var now = new Date();
    var nIndex = now.getTime();
    document.write('<s' + 'cript src=" http://www.nababaseball.com/aspbannernet/aspbanner/injectban ner.aspx?BannerZone=1&nocache=' + nIndex + '">');
    document.write('</' + 's' + 'cript>');
    </script>
    <script language="JavaScript">document.write(jscode);</script >

    </td>

     

    to

     

    <tr>
    <td width="460" height="60" align="center" valign="middle" class="imagead">
    <script language="JavaScript">
    var code = '';
    var now = new Date();
    var nIndex = now.getTime();
    document.write('<s' + 'cript src=" http://www.nababaseball.com/aspbannernet/aspbanner/injectban ner.aspx?BannerZone=1&nocache=' + nIndex + '">');
    document.write('</' + 's' + 'cript>');
    </script>
    <script language="JavaScript">document.write(jscode);</script >
    </td>

     

     

    If that doesn't help I would suggest using the ASP 3.0 version of ASPBanner. It can serve banners to a any type of page extension and it runs just as well as the .NET version. There is a new iframe method for calling banners that you can try instead of the javascript. The iframe method is explained in the ASPBanner Unlimited section of the forum.

    cwilliams38150.6443634259,

    If a picture does not show after uploading it is one of the following things.

    The upload method chosen is not supported on the server
    or
    The physical path specified to the pictures folder is not correct.
    or
    The URL to the Pictures folder is not correct.
    or
    Permissions to the pictures folder have not been set properly


    Here is more information on how permissions are set.

    http://support.cjwsoft.com/code/moreinfo136-1.htm
    http://support.cjwsoft.com/code/moreinfo56-1.htm

    Without more information and the settings you have entered and chosen that is all I can offer for now.

    ,

    Chris.

    After I had you install ASPProtect I added the ASP protecting code to the top of my home page:

    <%@ LANGUAGE="VBSCRIPT" %>

    <% CHECKFOR = "1" %>
    <!--#INCLUDE FILE="../../check_user_inc.asp"-->

    Then I made my index.html page my login page buy using the script "Login form on a non protected page" on that I changed <form method="POST" action="memberarea.asp"> to <form method="POST" action="home.html">. 

    When I try to log on to that page I get en error page HTTP Error 405 - The HTTP verb used to access this page is not allowed. Internet Information Services (IIS). I checked with my hosting company GoDaddy.com and they informed me that due to the fact that they do not have ASPProtect instaled on there systems they can not support it.  In recent conversations you told me that you have customers that do use godaddy and you products. 

    Can you please tell me what I can do to get this working?

    Thank you for your time and help.




     

     

    , After a user edit his information (name, email, etc), the session variables are not updated.  In the user_area.asp page, I "Response.Write" all the session variables, and they are still showing the old information. I tried refreshing the page but to no avail. The only way to update the display is to log off and login again.

    please help.
    ,

    I did everything mentioned here but it do not work ;(

    ,

      Much thanks, the duplicate incl's I spaced on and should have caught.  The hidden form variable was a key issue.  Thanks for the syntax and the help.  Now I get this page together. j  As a note - I got faster results by dropping my timeout to 3 minutes temporarily while progging and cleared browser cache between tests.  Thanks again.

    , Not sure what you mean about the path to the IIS files being wierd...what else should it be?  The wf directory is the root of the aspprotect stuff for this project. 

    I assume the permissions need to be read, write at least.  I was looking at the permissions dialog from a file explorer and I see a web sharing tab and a security tab.  I look at the security tab but I am not really sure which type of user I am looking for to add and give permissions to so that I can get it right.  Maybe that is not the right place to set the permissions....

    Sorry to be "windows challenged" but I am not super familliar with all the different places to set various permissions for OS vs. IIS.  I looked in the "Internet Services Manager" and browsed to the logfiles directory and looked at its permissions...is that the place to set things up?  I see a "directory" and "Directory security" tabs...which is the important one?  I made sure "write" was checked and went to the directory security tab and enabled anonomous access....still no logs are showing up. Restarted server a bunch of times to make sure it took the permission settings.  I logged in and out correctly and incorrectly to see if a log would be generated but no luck.

    The physical path to the logfiles directory is set correctly in the setup tab in aspprotect... sorry to still be baffled.

    How do I know if the filesystem object is disabled on the server??  I can copy and paste things in there...

    Thanks!!


    ,


    Timecard Entry: 3/25/2006 1:38:31 PM

    Going over EDavis problems with CB. Finding out about Fridays trip to Remington Museum (what needed, etc). Going over GraysFlowerShop w/Lisa, technical support supervisor duties. helped techs with issues, maintained and managed --- qlight, radlog, new user call backs, expired user call backs, dial up issues, ask us a questions, voice mail, emails, emonitor, NOC calls, follow ups on noc and customers, customer calls in, calls made out to the customer, radlog, open incidents....and took incoming calls , Talked to Crispin about status of all the SoftMLS databases, Made copies of Modem Checklists., did invoices with Michele and stuffed them for the mail, proposal for wdt, troubleshoot problems with sales laptop, logins - emails -radlog., Reading and responding to emails and voice mails, CFM FOODS WEBSITE DESIGN, rebuild Radius1, covered noc for ben while he went to mt zion to finish installing a router....radius 4 went down, had to proxy in and stop/restart service, then it came back up and was happy happy, Lunch, vacation guide - design and layout of inside of book, CostGuard Training and Discussion With Account Representative, Project Manager, and CEO, *Energy Initiatives design revisions, phone calls, emails for current wireless and WAN projects, BARTER-finalize designs for Burlington P&R site, salad. , Warren DB conv., Emails, Phone, Working on SoftMLS... Going over material we collected and fixing some things on the live demo site., course 3161 & 3162 passport trainingpspt training, SWMF Routers, pre-sales Development Estimate, Working with New York Air Brake server. Trying to get SA File Up working., radius still down. had a billing question. did a setup, Setup a static ip for Chapin Watermatics., lunch-actually tanned , back to watertown for compaq mtg that was rescheduled.,

       Active Server Pages Rule The World
    Contact Us  
    All artwork, design & content contained in this site are Copyright © 1998 - 2025 PowerASP.com and Christopher J. Williams
    Banner ads ,other site logos, etc are copyright of their respective companies.
    STATS Unless otherwise noted - All Rights Reserved.

    PowerASP active server pages asp.net microsoft .net framework sdk learn asp what is asp tutorial learn asp.net CJWSoft ASPProtect ASPBanner ASPClassifieds www.aspclassifieds.com, www.powerasp.com,www.cjwsoft.com,www.aspphotogallery.com,www.codewanker.com,www.aspprotect.com,www.aspbanner.com