Blog Entry: 3/25/2006 1:41:06 PM
So do I just replace the four folders that came with aspprotect with the four (in my case domain directory) folders in the patch or just move the files?, Here are three known bugs and their fixes...
If you have any of these symptoms these fixes will most likely take care of them.
If you don't have a symptom do not make any changes as you most likely have an updated copy of the application.
Technically if you bought that app on or after April 27th 2004 these bugs should all have been corrected.
Description Fix
(no descriptions showing in pop up window)
Edit pic_window.asp with a text editor
Change
Set f=fs.OpenTextFile(Server.MapPath("pictures/Album_ID_" & Album_ID & ".txt"), 1)
To
Set f=fs.OpenTextFile(Server.MapPath("../pictures/Album_ID_" & Album_ID & ".txt"), 1)
Slideshow Fix…
(last image in slideshow it not showing)
In slideshow.asp
Change
<% For PicArrayIndex = 0 To Ubound(PicArray) - 1 %>
To
<% For PicArrayIndex = 0 To Ubound(PicArray) %>
Add To Favorites fix
(add to favorites feature doesn’t work at all)
Edit "album_uppermenu_inc.asp" in the scripts folder
Change
<a href="users/favorite_albums.asp?Album_ID=<% =Album_ID %>"><img border="0" src="<% =application("skinpath") %>add_to_favorites.gif"></a>
To
<a href="users/favorite_albums.asp?Album_ID=<% =Album_ID %>&Action=Add_To_Favorites"><img border="0" src="<% =application("skinpath") %>add_to_favorites.gif"></a>
cwilliams38104.7034375,
For pay signups you set the groups during signup it like this thread tells you to
http://support.cjwsoft.com/code/moreinfo186-1.htm
only difference is you need to specify the groups info like so
(basically getting rid of the commas and just leaving behind the group numbers with a * around everything)
Also be sure to have no double asterisks
so, *1*,*2* would just be *1*2*
so, *1*,*2*,*5* would just be *1*2*5*
cwilliams38460.5969444444, Ok, if the link to the import/export screen does not show up its probably because you never put the import/export path in the admin settings?
go check that for me.
cause running that page without a path for the files could cause a timeout.. thats why the link doesn't show if the path is not entered (so people won't run it)
it looks sorta like this (there will be a field to fill in which wont show here)
Settings below specify the physical directory path of the export directory. This is used by the system when using the import/export feature. The export directory needs modify permissions for the anonymous webserver account. |
ExportDirectory |
|
the path must be valid for your file structure and it must have correct permissions (when creating files) , I had both ASP Listings & Classified on the same website. The categories seem to be getting mixed up. I removed ASP Classified but classfieds categories is still appearing in the student of ASP Listing.
How do I fix this?
Thanks
, Sounds cool.. post info when you get it sorted out
thx
hopefully someday I'll get the new version finished.. I just never seem to have time. Lately ASPProtect takes up all my time and now aspclassifieds seems to be in need of a new version more so than asp photo gallery
, We are using this photo gallery to manage galeries of all the prodcut
lines we carry, we have no use for users to be able to sign up so i hid
that part of the pages, what i am wondering is how can i hide the rest
of the navigational links and still be able to get logged in to
admin. Here is a link to the unfinished demo site.
http://www.scs-cases.com/photogallery/
, Hi there,
Well, that is why we added the PayPal subscription pack where all of that is taken care of and customers get put under a recurring billing cycle.
The more people you get to pay that way the less you have to do.
We also have routines for the two other supported payment methods so people can look up their account and add time to it whether it is active/expired or not.
Other than that, yes it is something you need to sort out on your own based on how you want to run your system. You have the source code and the sky is the limit on how you want handle all of that. You send out an email to users about to expire. Whether they come back to the site/look up their account and add more time to it is up to them. I really just do not see any way ASPProtect could handle that whole process automatically.
As for batch changing to users in the database. We give you the source code and we also use an open database structure. You can run any query you want on the database whether with ASP code or directly in your database using the tools that come with it, You can write any code you like to do whatever you like to the database. You can even tie other systems and code into the database via OBDC and manipulate data. The sky is the limit like I said. I also don't really see how batch changes to the database relates to individual users paying again for access or not especially since we include payment pages were a users can look up their accounts and pay for and add more time to it automatically ? At least not regarding the payment routine we provide support for.
ASPProtect can not handle everything every person would need to do. It is meant as a solid starting point for any project, but there are going to be times when more functionality will need to be added by the customer based on their specific needs.
, humm, I dont know then..
If you want PM me your site info and I will go in and troubleshoot.
Frontpage or frontpage access, either way
and also the site URL
, Christopher
Many Thanks
Seems like its working just got to test it bit to see, though it wasnt going to work as I had one too many End If's after the last part of the code you done for me. But even I eventually sussed it, nothing to do with your bit just another mistake on my part
Great to get support like this especially on a Saturday
regards
John
, do you want my help making the database with your import file ?, ((TITLE EDITED BY ADMIN))
it would be nice if there was an option for login abuse, where a login account would be flagged if it logged in from x number of different IPs over a period of time. I know many have dynamic IPs, but there's got to be a balance between legitimate logins and logins that are 'shared' for the sake of saving money (I sell subscriptions), in the end costing me.
Maybe searching the first two number groups in the IP (example, 209.168.*.*), and if finding more than an admin specified number of logins per week from IPs with different first two groups, the record would be flagged or locked...
, You cannot use server mappath in the connecting string of the application. If you want to know why read my article.
http://www.powerasp.com/content/hintstips/physical-path.asp
Make your connecting string just like in my example.. do not use the oledb connection string either as it will cause other problems.
If you need to find out the path to the mdb file you can use server.mappath to get that info but do not put server mappath in the connecting string. See my article again.
then if the database folder has proper permissions and the path to the mdb file is valid it will work... otherwise you get useless errors, its really that simple.
You also may want to download ASPTest from www.cjwsoft.com it is designed to show a person how to setup a working data connection., It's probably something I could do for you as a custom project if you are interesting in paying to have that work done, but it is probably not something that will be added to this version of aspbanner as it is in my opinion a feature more suited for a more expensive software package.
It is also difficult to get ASP code to do things on it's own. Scheduling something to run on the server or some other clever scenario is necessary and that usually means it would be unique to each persons setup.
http://www.cjwsoft.com/custom_work.asp
, glad it is working now
sorry ya had trouble.
cwilliams38418.6886342593, Hello,
My guess your having trouble setting up a system dsn because the database has a password set on it. Your hosting company most likely sets up DSNs without using the advanced tab which is where the authentication information goes. Or they have some sort of web interface for the customers to use that doesn’t allow setting up that information.System DSN’s are actually difficult to set up correctly when the database has a password on it. There is of course a password on the database for security reasons so if someone ever downloads it somehow they will not get your information.
System DSN’s are not the way to go regardless as you will see mentioned at our support site.
http://support.cjwsoft.com/forum/forum_posts.asp?TID=9&P N=1
You really should try setting up a DSN-less connection. It is the best way to go. They are easier to set up, perform better, and are less load on the server. Any host that wants it customers to use system dsn’s is not on the ball as far as server performance and server resource conservation goes. They are really asking for trouble down the road.
All you need to do to make dsn-less connection is the following.
Get permissions set for the folder the database is in (by your host)… then figure out the physical path on the server to the database by using server.mappath or you simply ask your host for the info.
An article I wrote on using server.mappath
http://www.powerasp.com/content/hintstips/physical-path.asp
Then your connection string will look something like this.. (of course you edit the path to match what server.mappath tells you. And you make sure the database name is correct)
ListingsConnectionString = "DBQ=C:\Inetpub\wwwroot\asplistings\_database\asplistings_ac cess2000.mdb;Driver={Microsoft Access Driver (*.mdb)};UID=Admin;Password=temp"
Another option would be to simply remove the password from the database using MSACCESS.. then try to connect to it using a System DSN without the password. If your host is storing the databases outside of your web in the root of the server then removing the password on the database is not that bad of a thing to do as there is no way anyone will be able to dload it from your site. Of course there is a still a performace loss when using a system dsn with an Access Database
cwilliams38145.8540509259, In a way your questions are confusing to me, but here is some information regardless.
Using Active Sever pages you can not protect entire folders. It is simply not possible. ASPProtect is Active Server Pages scripts so it can only protect individual ".asp" files.
If you are concerned about customers downloading the access database..
best practive is to store it in different folder name than it came in
best practive is to give the database .mdb file itself a different name
best practive is to change the password on the access database
best practice is to store it in a directory that is not part of your web if possible.. many of the better hosting companies have it set up so you actually can do that
the more of these things you can do the better..
And if you are really worried about security you should use a SQL Server database which nobody can download from your website under any conditions because your data lives in the sql server and unless they get the username/password to it they can not access it.
cwilliams38306.6367708333, Hello,
What is the difference between the paypal_sub_signup and the paypal_signup directories? Also, I know it depends, but what directories and files can I delete from my web server if I am not using them? I copied the entire set of files that came with the program over to the webserver and I am concerned that there is too much out there.
Jess
cwilliams38446.6304050926, I appreciate the offer to beta test... but its really more a matter of me getting it ready..
I have a lot done.. but a lot of things are hard coded to only work on my machine and some things have not been sorted out. Giving it to someone else to test would be a waste of time at this point as I they probably couldn’t even run it.
Lately the reason this project has fallen behind has all to do with my main webserver where I collocate.
1st it got compromised (we think by certain competitors who are always up to no good)... then windows 2003 server which I decided to go with on the new server gave me random problems... then the Cisco hardware firewall was acting up and making the sites run slow....then SQL server attacks on port 1433 from Korea when I took the firewall down....and as of the last few days I think the server just needs a new power supply. I swear for the last 2 months I have spent more time administrating my servers than working on code. Yesterday it was locking up every 30 minutes. There have been a lot of days like that and it takes up all my time until I get it situated. Especially since its over 100 miles to the collocation center. The APC unit I installed that allows me to remotely cut the power to hard reboot is a life saver.
Fun... I tell ya... and expensive.. (hardware, software, lost sales, and time) I am pretty much completely broke at the moment. It has been a very expensive few months.
But I like running my own servers... I run dns servers, email servers, sql servers, web servers.. I do it all. It's keeps me in touch with the latest software/hardware. Regardless , my servers ran well for years and they will again.
anyway.. hopefully I can actually get a new version of the photo gallery out before the month is over. It will probably be the last classic asp version. The version after that will most likely be ASP.net.
cwilliams38295.6248032407, [QUOTE=sdunham]
My hosting company uses ASPEMAIL - and I am trying to setup the mailing settings on ASPPROTECT - but cant seem to get it to work. I've tried many different options - here are two that are the closest - but have issues:
1. If I use the settings:
email component: aspemail
Mail remote server: my internal server name
*no smtp authentication
email mail notification - my email address on my internal server
***I get the following results:
I can get get notified when a new user logs in, email a user from aspprotect user screen if they are in my company and have a valid email -- but I can not send to the outside world - I get an relay prohibited error.
2. If i try to change the setting to use the Hosting Website email server - I get the following results: I dont get notified when a new user registers, I cant send to internal company people - but I can send to the outside world.
**any suggestions on what to do? I'm trying to work with the people who manage the mail servers - but since I dont know anything about them - its a bit difficult.
[/QUOTE]
The relay error is because when you send emails outside your email domain smtp authentication is required.
I suggest trying to use CDOSYS with the smtp authentication option. CDOSYS is on all servers by default and is really the way to go. Use a real email account and password to send the emails through the server. Be sure to check smtp authentication for cdosys and to specify all that info for your email account and password in the settings screen.
If you want to know about CDOSYS read my article.
http://www.powerasp.com/content/new/sending_email_cdosys.asp
, I think you can either change some things in your PayPal account settings regarding your default currency..
or add a hidden variable to the PayPal form code ASPProtect uses like this guy did.
http://support.cjwsoft.com/code/code_info.asp?TID=237&KW =paypal
The hidden form variable code would go next to all the other hidden variables in no particlar order.. just look through the paypal code in notepad till you find a bunch of those hidden form variables lines in a row. , Dear Support Team
I have read and Installed your v8 banner software
exactly as explained on XP pro which contains other asp working app.
I have problems with the " Application " and " Session" in your scripts
things that make the iis fall dead.
also in the file asp _unlimited_config.asp
you have exlained that every thing must be kept without the "" marks.
well i get http 500 error cause of it.
Please advise
Thanks
Ran
, Here is what I have in settings.
ServerSoftware |
Microsoft-IIS/6.0 |
ServerName |
www.107threnegades.com |
ServerProtocol |
HTTP/1.1 |
PathInfo |
/gallery/gallery_admin |
PathTranslated |
d:\hosting\arisky1\gallery\gallery_admin |
|
|
FILE SYSTEM OBJECT |
Installed |
ADODB (ActiveX Data Object) |
Version: 1.2 Installed |
CDONTS |
Version: 2.80 Installed |
SMTPMail |
Not Installed |
JMail |
Not Installed |
AspEmail |
Not Installed |
AspMail |
Not Installed |
SAFILEUP |
Not Installed |
Dundas Upload |
Not Installed |
ASPImage |
Not Installed |
AspJpeg |
Version: 1.4.0.1 Installed |
ImgWriter |
Not Installed |
|
|
Script Engine |
|
Type |
VBScript |
Version |
5.6 |
Build |
8515 |
I do not even see ASPUpload listed but when I run the test_asp_components.asp from the extras/more_component_info folder, it shows that it is installed.
, The protection code for my group3 is:
<!-- Begin ASPProtect Code -->
<!-- Groups with access to this page. ( * GP03 * ) -->
<% GROUPACCESS = "3" %>
<!--#INCLUDE FILE="check_user_inc.asp"-->
<!-- End ASPProtect Code -->
btw - sorry but I am using v7
and thanks for the assistance
, Got it. Thanks Chris!
Michelle
, humm, those are some very big images to be starting off with but I am not sure that would cause a problem under the importing scenario
what width are you having the system resize them to ?
What happens when you upload a image manually (one a t a time)
Also, try the import process out with some pictures no bigger than say 1024 and lets see what happens
, import/export feature WARNING !!
I just want to warn everyone that the built in import/export feature can be a little dangerous.
The reason being is when you import users they get new "Users_ID"s in the database.
The "User_ID" field is an autonumber field and that is why and there is nothing you can do about it.
So, if you are using a user's current "User_ID" to keep track up something important NEVER export the users and re-import them. Because their "User_ID" will change and you will be in trouble.
The PayPal signup features of ASPProtect actually use the "User_ID" like this and that is the main reason this warning is here.
now, that being said
If you are importing new users into ASPProtect
or
simply exporting existing users to another system
then this is nothing to worry about.
Basically, the moral of this story is dont think of the built in Import/Export feature as backup system because it is not. It is not a substistute for backing up your database.
It is a just a tool that can come in handy for various things.
cwilliams38425.0597685185, that really does not make any sense...
I dont know what else to tell you as this really shouldn't be anything too difficult to sort out...
redirection based on criteria is not something aspprotect does by default... I try to help a bit... I've shown everyone how to do it in this thread...I know plenty of people doing it... I've done it myself... I know it works
let me ask you this... are you using ASPProtect 6 with the Option Pack ?
I assume you must be or you would not have the Groups feature ?
And you asked this question in the ASPProtect 6 section.
but then maybe your using 7.. I do not know
this should all work the same either way
, I encountered the same problem and eventually found out that my Norton protection was not allowing scripts to work so I had to uncheck the setting before the banners reappeared., Guess who!
I have a user/client who can't access stats. Even when I give them a
new username, I get the message that their username has expired.
In the notes of the account it says "Level 1 access" and I can't
figure out what that is and where it is edited or set or even what it
means. Seems like I must have hit something somewhere that goofed
up this account. I could just delete the account/user and set it
back up but I'm worried I'd just make this same mistake later and
figured I'd get the info on it. Any ideas?
TIA! (So far, I'm VERY happy with this product)
Laura
, Hi,
I basically explained how I thought that might work here where I went over everything I could think of and suggested you download the free version and see if you could get it working
http://support.cjwsoft.com/code/moreinfo488-1.htm
The part about using the alternate scenario involving querystring info from a url.
I have never done anything like that and that is why I told you what I knew and suggested you try it with the free version...
, thanks thats what i was guessing.
, it is not uncommon for folder permissions to be lost or changed on a server.. a lot of things can cause it
if it was working and now you can not edit or write new data to the database it is most likely permissions
I would triple check permissions... see my articles if there is any doubt on how permissions are set
http://support.cjwsoft.com/code/moreinfo136-1.htm
http://support.cjwsoft.com/code/moreinfo56-1.htm
, I already gave execute permissions to the stored procedures and that
cleared up the first error, but the second one I still can't figure out., As I'd said in my previous response, I found those databases and they didn't work. All three databases in asptest do work., I dont know. Perhaps a fresh installation in a new folder would be a good idea as well if possible..
for troubleshooting sake..
, I do not what is going on at this time. It is not a known issue.
If is is not working it would seem to be a problem with the application variables on the server possibly and your web.
Perhaps try installing it on a local machine and see if it works for testing sake.
Also.. if your stuck with the black skin you could always just edit the information in the that skins folder to get the app looking the way you want.
That and the header and footer files that comes with the app are what control the look of the system.
cwilliams38294.5880208333, so use the connection string the readme.txt in the sql installation folder file tells you to... it has the correct username.. I just posted that info above
or change the username in the connection string so its rigfht
or go into sql and give any user you want access to the database and use them
Any connection strings that come in the datacon_inc.asp file the way it ships are examples. We fully expect people to edit them.
Also.. the SQL scripts primarly goal is give you a properly set up database with correct files and table settings. Users and permissions often need a little extra attention from the installer as that part doesn't always get set right by the scripts It really all depends on what sql user you are when you execute the scripts. Many times the user someone logs in with doesn't have permission to make users and set permissions.
cwilliams38325.9116898148, Yeah, its working great witht he Access database. Now I just need to get it all set up. I like how the config file is set up with all the comments, it really helped allieviate the 40k thumbnails,

.
One quick question though, and I haven't looked through all the code yet... Is there a quick way to have pic_window.asp open full screen by default? I just want to minimize having to either scroll through, or maximize, the screen
Thanks!!!
- Jason
, It's just a generic error that means one of 1000 different things is wrong.. there is a lot of information on in in these forums as well as links to articles about it.
http://support.cjwsoft.com/forum/forum_posts.asp?TID=27& PN=1
usually it means permissions to the database folder are incorrect or the physical path you are specifying for your dsn-less connection is invalid..
everything has to be perfect
cwilliams38370.5271296296,
Timecard Entry: 3/25/2006 1:41:06 PM
Email from Lafargeville central. New teacher and students to add to database., Working w/ Hitty and Ben regarding TS Peck, Soft MLS presentation to Warren, PA Board, Drive to Watertown office to meet Steve for JCC meeting., Drive back from Syracuse (90 miles), CVX training, not too busy, dsl, general tech support hardly any calls... just about general support topics, dial up issues , radlog, cleaning, phones, email.
, Posted accounts and did a detail of checks and cash for a bank deposti. Ans. phone, customer inquiries, credit card authorizations and coupon referrals., Minor emergency that Ron woke me up for - RNA on the 5500 numbers., cancellation refund checks and info in emerald, not, Daily crystal reports
, lunch at Skeemers American Cafe, Worked with Mary wood. Busy morning.Printing ivoices and reports., Very busy. Lots of calls of off the wall questions again that really didn't pertain to Gisco. , SAMARITAN HEALTH.COM STARTED PHOTOSHOP DESIGN , SCANNED PHOTOS, MASK OUT BACKGROUNDS OF PHOTOS, ARRANGEMENT OF PHOTOS, emails and voicemail, worked on storefront on Hacketts site, Ken Mills, Jeff, Casey Lyons., paperwork, email, voicemail, work on config of new PC, staff meeting and follow-ups, ASP research and coding tests, SQL Self-study, Put together tech manuals together with Linda., read and sent emails, Going thru the entire SoftMLS system on my laptops and changes all the realtor side to use a Server Side Include for the menu system instead of a frontpage include.... also tinkering with javascript that warns users when they create a new listing that they must edit and save it... if they try to close the browser window, setting up more web stuff,