Home | Advertising Info124 USERS CURRENTLY ONLINE   
PowerASP
   Site Search Contact Us Friday, March 14, 2025  

Active Server Pages help tutorial how to ASP Help ASP Tutorials ASP Programming ASP Code - ASP Free CJWSoft ASPProtect ASPBanner ASPClassifieds



Blog Entry: 3/25/2006 1:35:48 PM

I know what is happening.. its the old single quote thing messing up the query string..
but it shouldnt be happening with the newer code as I fixed it.

If you like I can go in and reproduce/fix the issue. I can not think of any other way I can help you as other users have not reported the issue.

Chances are if it is happening in one situation it will happen again in the future.. it really all depends on the passwords being used and your encyrption key... other passwords may produce the issue even if the password is correct

basically once the password gets encrypted it by chance has a single quote in it... then it messes up the query

I take care of the situation by replacing the single quote with a double quote but it looks like you found a situation where that didn't work out

 

cwilliams38453.8921990741,

Okay thanks, I'll have to consider wether or not to go down the path of the upgrade or cut my losses as the Access cannot handle the pressure

It's just errored out again with the following message:

msxml3.dll error '80072ee2'

The operation timed out

/forum/banner.asp, line 15

 

Regards,

Dave

,



I did not make a mistake.. what I typed is what I meant to say. I think maybe you are taking it the opposite way as I explained it.

Regardless,

What you want to do... logging them in under https and then having them continue though the site under http is not possible.

It doesn't work that. way. As far as the webserver is concerned https is a totally different site than http and each have their own unique set of application and session variables.

In a sense no different than www.somesite.com is different then somesite.com (each has their own unique set of application and session variables as well).

Now, because of the nature of Forms Based Authentication session varibles created under one will not carry over to the over and thus no password access if you switch over from a secure url to a non secure url.

If you want them logging in under SSL you need to keep them under SSL.

That is not to say there is some ultra complex scenario to mimic the session variables on the non secure side of things (possible with a complex http post to a non secure page from the scure page telling it what variables to create and set), but doing so means a ton of work and also has security concerns of its own.

,

Humm.. that should have worked fine

why are you getting a "OLE DB" error I wonder ?

I need more information. 

Database being used and version ?
Server OS Version?
Connection String being used ?

etc etc

, Then, you would have to add those users to the aspprotect user database. You would do so using the built in import/export features of msaccess and being very carteful about it. It is not a process we support and the technique used would be unique to any situation. Its basic database work though but still you have to be able to do it.

ASPProtect uses its own user database and you have to use that database. ASPPortect can not authenticate users using some other existing database.

Does that make sense ?,

I think its great to share a mod.

I will have  few with the new album.

, yes, any page you want protected needs to be edited..

You can probably have a login box on a non protected page. Just copy the generated source html form code for the login box of a protected page. Then put it on your non-protected page, but change the action to the page you want them to log in to.

In other words go to a protected page. See the login box, view the html browser source and use that to make your login form on the main page.

I have not tried it with .NET but I am pretty sure you can do it since it pretty much works the same as the classic asp version of ASPProtect.

try it.. see if it works.. If I have time tommoro I will test it out., All fixed... I changed the remote server from localhost.omegaphibeta.net or whatever it said there to localhost

I sent a test email to myself and got it no problem

the error you were getting was email component related ,

There are several pages on my website that a user may go to that are not protected (e.g. home page).  If the user has indicated that they want to be saved on this computer (until they explicitly log off), and their 1st entry point is to an unprotected page, how do I determine whether they have logged in before, and extract the info from the cookie / session variables without forcing them to log in or making the entry page protected?

 

,

i've got a client who has handed me a 151 character banner URL, and i see that the database is designed to take 150 characters. i took the obvious step of just increasing the size of that text field in the database, but i still get this error when i try to enter the URL in the proper form field:

Multiple-step OLE DB operation generated errors. Check each OLE DB status value, if available. No work was done.

/banners/aspbanner/save_banner.asp, line 200

now, line 200 is just this:

If Banner_Link_URL = "" THEN
 CmdEditBanner.Fields("Banner_Link_URL") = NULL
Else
 CmdEditBanner.Fields("Banner_Link_URL") = Banner_Link_URL
End If

which tells me that something is blocking the assignment of that long value to that field, even though i believed i had extended the length of that field in the source database.

where else might i look?

 

, As I'd said in my previous response, I found those databases and they didn't work. All three databases in asptest do work.,

Is there a simple way to upgrade from 7.x Lite to 7.x Full?  I was testing out the software and I just purchased it.  I have made some look and feel changes to the lite version (ie: login page), but no look and feel changes to the admin section.  Is there certian files that I can add to have the full version without shorting myself features or functionalbity? 

Thanks

, download the free version...

check out this tutorial...
http://support.cjwsoft.com/code/moreinfo169-1.htm

If your application can post to the page and provide all the form variables needed to log in it may work out for you..

You'll have to try it out... all the form variables needed are in that login form example.

Basically you'd be posting to a protected (.asp) page..
and providing the following for the most part.. how your app creates it post data is on your end...

<input type="hidden" name="Status" value="Checkem">
<input type="text" name="Username" value="Yourusername">
<input type="Password" name="Password" value="YourPassword">



As an alternate scenario...

Now, by default the "check_user_inc.asp" file is looking for posted form data... for security reasons it is not looking for querystring info..

If you change this bit of code in that file

from

Username = Replace(Request.Form("Username"),"'","''")
Password = Request.Form("Password")

to

Username = Replace(Request("Username"),"'","''")
Password = Request("Password")


It will then grab either form or querystring data...

Meaning you wouldn't necessary have to create a true post to the page with form data. You could just access the page via a querysting like so

http://www.mysite.com/somepage.asp?Status=Checkem&Userna me=Yourusername&Password=Yourpassword

Of course that introduces security risks as the username and password would be passed in plain text over the net


Another option is...
You can also make a copy of the "check_user_inc.asp" page called whatever with those modifications just to use in pages you need your little application to post to... thus reducing the security concerns a a bit as the rest of yoru site could still have its pages protected under the normal scenario.

I hope this answers your question... I havent really ever tried any of this but that is how I think it would work... ,

yes, there is upgrade pricing
http://www.aspprotect.com/purchase_v7_upgrade_pricing.asp

and upgrade instructions here in the forums

if you install it in the same directory structure you wont have to make any changes to the pages in your site you have already protected.. because the code to protect a page will be the same

now, anytime you upgrade an application like this there is going to be a lot of work involved especially when there have been so many changes
http://support.cjwsoft.com/code/moreinfo173-1.htm
whether or not you upgrade is up to you

Like I said you can make version 6 work with CDOSYS and a remote email server. You just need to do some research on CDOSYS code and spend the time needed to make the code use it. I however am not going to spend time detailing all of that when I created a new version that does it.

,

I'll give it a shot loading it on the laptop and publishing it, if it doesn't work I'll let you know and you can take a look at it tomorrow afternoon.  Thanks for all the help tonight...

Good luck pouring that concrete!

,

We can't seem to find the purchase emails for this install of ASPProtect.

It would have been in May 2004 for NetOptions LLC or CareerMatrix.com

We noticed it should have been v6 of ASPProtect.

Can you resend the download links?

,

Ok I used the following for the sql string.. is this correct?

SELECT COUNT(Album_ID) AS Alb_Count FROM " & tbl_label_albums & " WHERE (User_ID = " & CmdListUsers("User_ID") & " AND Album_Active = '-1'" & ")"

, look in the "check_user_inc.asp" file

try editing this part by hard coding the body info you want to use

 Response.Write("<BODY" & Application("BodyTagInfo") & ">")


I would also suggest reviewing the generated source code in the web browser and examining the html to figure out exactly where the body tag info you dont want is coming from
,

Chris -

Sorry, I am looking at your code on view_item.asp and I have noticed that you are calling 3 variable; start_date, end_date, and image_url that do not exist in the databases that you provided.  Do I have the updated package for ASPVendor?

 

,

--------------------------------------------
(( TRY THIS AT YOUR OWN RISK !!))
--------------------------------------------

2004-08-19_122127_ASPBanner_V7.3_code_banner_encode_decode_m od.zip

This is an Expirmental MOD for ASPBanner Version 7.3 Only
Do not use it on other versions....

It encodes CODE Banner information before saving it into the application variables that handle banner rotation. It then decodes that information before displaying them on your web pages.

The reason for this is SOME very complex javascript does not always save correctly into the application variables that rotate banners (even when not using the JavaScript Method to display the banners)

This way the javascript or whatever you entered comes out on your web page exactly as you entered it and runs correctly.. but there is little more processing going on to handle the encoding and decoding. But its probably nothing to worry about and won't effect performance at all.

Unless your having a problem don't use this mod. It is not officially supported in any way.

-- DIRECTIONS --

( COPY THESE FILES INTO YOUR ASPBANNER DIRECTORY AND BACK UP ALL THE FILES THAT YOU WILL BE REPLACING ))
(( SO YOU CAN REVERT BACK IF THERE IS TROUBLE ))


If you are wondering if the "appinfo_inc.asp" included has the weight banner bug fix applied to it already. That is a bug mentioned in our forums

ALSO:

(( YOU CAN NOT USE THE INCLUDE METHODS OF CALLING BANNERS WITH THIS CODE ))

(( YOU CAN NOT USE THE JAVASCRIPT METHOD OF CALLING BANNERS WITH THIS CODE ))

(( USE ONE OF THE OTHER METHODS ))

cwilliams38229.4189930556, Wonderful!  Does it matter if I move the aspbanner logo, as long as I keep it on the page? Or does it need to stay front and center?

Laura
, Any updates on this ?, Not sure what you mean about the path to the IIS files being wierd...what else should it be?  The wf directory is the root of the aspprotect stuff for this project. 

I assume the permissions need to be read, write at least.  I was looking at the permissions dialog from a file explorer and I see a web sharing tab and a security tab.  I look at the security tab but I am not really sure which type of user I am looking for to add and give permissions to so that I can get it right.  Maybe that is not the right place to set the permissions....

Sorry to be "windows challenged" but I am not super familliar with all the different places to set various permissions for OS vs. IIS.  I looked in the "Internet Services Manager" and browsed to the logfiles directory and looked at its permissions...is that the place to set things up?  I see a "directory" and "Directory security" tabs...which is the important one?  I made sure "write" was checked and went to the directory security tab and enabled anonomous access....still no logs are showing up. Restarted server a bunch of times to make sure it took the permission settings.  I logged in and out correctly and incorrectly to see if a log would be generated but no luck.

The physical path to the logfiles directory is set correctly in the setup tab in aspprotect... sorry to still be baffled.

How do I know if the filesystem object is disabled on the server??  I can copy and paste things in there...

Thanks!!


, Yup, thats the problem I was having. I can get it to work if I don't do through the dl stream, but otherwise it prompts to save or open it instead of loading it in the browser.

I did read the change on making the content public instead of private so I think that will work for know...
, I have ASPPhotoGallery installed. Everything has been working great for some time. Suddenly, for no apparent reason, I am not getting the "Hits" incremented when a user opens an album. It works when an administrator is logged on. Does not for any anonymous users. Everything else seems to work fine. Again, this used to work. Any ideas. ,

You have old code I think.

It's probably because his password used with your encryption key by chance creates a single quote and messes up the database query

A notice went out about this. I will PM you the latest download with the updated files.

,

Hi Chris,

The hosting company has been doing some work apparently regarding the database connection issue. Still something is funky

When I type in www.vickerylightning.com/aspgallery/default.asp I get the custom 404 error page and I noticed that it is trying to open the following:

http://www.vickerylightning.com/skins/default/settings.asp

Is that what it is supposed to do?

Thanks!
Rhona, the rookie

 

 

,

[QUOTE=cwilliams]I would like to delete the SQL tables and set them up from scratch using enterprise manager and sql query manager and see what happens

If that is ok with you let me know.

Something is wrong like I said...  almost seems like the database is caching old password info from the field.[/QUOTE]

Sure go ahead

,

When did you download the ASPProtect Version 7 zip file ?

what did you enter as a wrong password to make that happen ?

does it it do it when other wrong passwords are entered ?

 

cwilliams38452.722037037,

We have been using ASP Protect for a while now and are big fans of the program.  We received ASP Banner 8.2 with our puchase which we now have a need for.  I went to put the files on our webpage, and doing nothing else other than locating the directory there, I noticed differences with how ASP Protect operates.  We have customized it a bit and want to keep the 2 programs separate.  the login screen for one showed up on the other, and some ASP Protect pages appeared altered so i immediately deleted ASP Banner.  did I do something wrong, and how can i ensure the 2 programs work completely independant of each other?  We can't risk braking what we're now using but would really like to add banner functionality to some of our pages.  maybe an update to the program before we install?  puchase new software?  Thanks for your help-

, Please try this URL www.telepedia.net/pages/chem_periex.asp
It is protected by GROUPACCESS "6" and the username:dimitris and password:tele
In the administration area, I have arranged this username as member of the group 6.
Thank you in advance for your help
,

Hello,

What is the difference between the paypal_sub_signup and the paypal_signup directories?  Also, I know it depends, but what directories and files can I delete from my web server if I am not using them?  I copied the entire set of files that came with the program over to the webserver and I am concerned that there is too much out there.

Jess

cwilliams38446.6304050926, Come on the threats are not necessary- i got the point the first time you said it.. i thought i made a friend thru this and felt comfortable to say something like that... i am not a big online chatter just do the web stuff as a hobby... i am a network / computer hardware guy (yet i work for a mortgage co. go figure...),

You are not supposed to use "../" with a virtual include

Thats goes against what a virtual include is and makes no sense.
When using a virtual include you give the path as if accessing from the root of the main web / virtual directory

I find it very hard to believe it ever worked like that and if it ever did it was wrong.

 

cwilliams38434.6703356481,

Chris, if there is no way to change this, I understand. I just though maybe it might be possible and I can't find out if i don't ask.

Thanks Chris.

Let me know.

-john

 

, well, thats a network drive path and in my opinion a very poor way for them to have set things up. It can work as long as permissions get set there and they have the anonymous webserver accounts set up correctly to handle that scenario, but performance isn't the best because your accessing the access database over the network. Access databases are not just not meant to be connected to over the network in a web based scenario. Quality ASP hosting companies do not set up their servers that way and it can often be difficult to get things running as it is a more complex setup on their end. Meaning if they dont synchronize the IUSR_machine accounts correctly you'll have permission issues.

http://www.aspfaq.com/show.asp?id=2168 ,

where is your site ? I'll taka a look

,

If you re-start the web via IIS, reboot the server, or (possibly) just add and remove a category... that will clear up.

ASPClassifieds and ASPListings must be installed in seperate IIS applications if they are the same web. Otherwise the category caching system of each system will interfere with each other. They were never intended to be installed in the same web together since ASPListings is merely a stripped down version of ASPClassifieds and they share a lot of the same code. Like I said though if different IIS applications are set up in the web site you can do it because each IIS application will have it's own set of application and session variables.

,

ok,

IE and firefox do some things differently.

It could very well have to do with MIME types set on the server for your website. pdf probably isnt set as a mime type which can cause issues with file streaming situations.

Mime types are either set in the IIS console for your web site under the http headers tab or you can try setting the content-type header to 'application/pdf' right on the asp page the does the streaming

see this article which shows how to do that
http://psacake.com/web/gj.asp

'Specify a MIME type such as "text/html", "image/gif" or "application/pdf"
Response.contenttype = "application/pdf"
'Useful in cases for unknown file types

You would want to put the code that sets the contentype as close to the top of the asp page doing the streaming as possible.

,

Christopher,

Thanks for the reply. I think I've found my problem, but can't test until later in the evening as it is on a live site.

Darrell

,


Timecard Entry: 3/25/2006 1:35:48 PM

Three hours of vacation time -loved it, *TaskForce: Colligonet Development - Debug User and Template Changes, Pull pd. invoices, Vermont; timecards, Wowking on CMA for softmls. It is screwing up and giving HTTP errors and I am fixing a bunch of little bugs I found that are causing it., Madison, WI Training, *TaskForce: ColligoNet development; troubleshoot failed file server, still busy whew, looped some circuits on the 5800 to stop rnas., Travel To Clayton, Travel home from Victor, NY 165 miles, commercial shoot, went over some changes and probles/credits etc with Michele, sorted the mail, Working on Cortland database.. trying to figure out how we are going to convert it., conversation w/Craig Kieny/Energy Initiatives re: site launch date, Meeting with Brownville specialty re: phone Wand and web site met with their Board of directors, GAther material for meeting including questions for Wilcox , answering phone, callbacks from voicemail, checked emails. incident report, cancellation of invoices, cc report with Mary, quality checked sign ups, taking sign ups, , worked on work order/work request systems integration (internal, billable, programming), chow, Research Gisco invoice for Supplies, postage, cell phone entries 1/00-9/00; Walker POT04005 - match to multiple invoices , Fed Ex $45.78 & MCI $1604.55 invoices; , tanned and went to the bank-flat tire, CHRSolutions, Howard, sign ups, HB A/P, Time cards and Misc, not many calls, like 4 to 6, some that called more than once, long term \calls, NT Server Radius 4 down 815am-818am. Worked on POP page. , Did a callback for the emails that ron sent to me. , traveled back and unloaded supplies, Marketing,

   Active Server Pages Rule The World
Contact Us  
All artwork, design & content contained in this site are Copyright © 1998 - 2025 PowerASP.com and Christopher J. Williams
Banner ads ,other site logos, etc are copyright of their respective companies.
STATS Unless otherwise noted - All Rights Reserved.

Active Server Pages help tutorial how to ASP Help ASP Tutorials ASP Programming ASP Code - ASP Free CJWSoft ASPProtect ASPBanner ASPClassifieds www.aspclassifieds.com, www.powerasp.com,www.cjwsoft.com,www.aspphotogallery.com,www.codewanker.com,www.aspprotect.com,www.aspbanner.com