| Blog News Main Page NEWS FROM 2006-03-25
Blog Entry: 3/25/2006 1:43:42 PM
I had never noticed this before, but a customer sent me email to say that they had set up their aspclassifieds profile such that they be contacted by email and not by phone.
However, in their ad, their phone number still appears. The lines in view_ad.asp that check for True values for the Contact_Via_Email and Contact_Via_Phone before displaying that information seem to always evaluate to True, regardless of their setting in the database.
I'm using an Access2000 DB for this. When I open the DB in access, I see the checkboxes correctly unchecked for phone and checked for email. However, if I do a quick test to display the retrieved values in the view_ad.asp (<%=contact_via_phone%> <%=contact_via_email%> they both display True.
What gives? I have had nightmares with Access and its weird handling of true/false 0/1 yes/no fields, but this is driving me nuts.
, Upgrade from V6 to v7.x with an MSSQL SERVER DATABASE
1st of all, backup your existing ASPProtect files and database before performing this upgrade. Please be really careful while performing this upgrade. Version 7.x is a highly advanced application compared to any previous versions. CJWSoft under no circumstances is responsible if you lose information or have website downtime.
BOTTOM LINE: (PERFORM THIS UPGRADE AT YOUR OWN RISK)
To do this upgrade you're going to need to have SQL Enterprise Manager and SQL Query Analyzer
That being said, on with the upgrade..
Open your SQL database in SQL Enterprise Manager
Regarding the following Tables
Rename "Users" to "ASPP_Users" Rename "Groups" to "ASPP_Groups"
If you do not have a "Groups" table do not worry about it right now.
Now right click and DELETE the Config Table. Yes, delete it..
Now, go into Design View for the "ASPP_Users" Table.
Rename the "Password" field to "Old_Password" Be sure to spell it perfectly using the Underscore
If you have a "Groups" Field... leave it alone If you do not have a "Groups" Field add one and make it a "nvarchar" field with a lengh of 255.
Now, we are going to add a few more new fields.
Add a field called "Redirection_URL" make it a "nvarchar" field with a lengh of 150. Add a field called "PayPal_Subscriber_ID" make it a "nvarchar" field with a lengh of 100. Add a field called "Newsletter" and make it a "bit" field Add a field called "Password" and make it a "nvarchar" field with a lengh of 100.
Now close that window and save the changes..
Download these scripts. 2005-02-23_171110_aspprotect_v7_sql_upgrade_scripts.zip
Now open up SQL Query Analyzer Connect to your SQL server.
Then load the script "aspprotect_v7_config_table.sql" into the Query Analyzer. Click the green play button at the top. If everything goes well the response should read something like this.
****************************************************** (1 row(s) affected) ******************************************************
Now, if you had a Groups Table your done with the database changes.
If you didnt have a groups table.
Then load the script "aspprotect_v7_groups_table.sql" into the Query Analyzer. Click the green play button at the top.
Now, go back to your database in Enterprise Manager and make sure all 3 tables are there and look ok. You might need to do a refresh or two to see them.
Now make sure an existing or new SQL user has (public / datareader / datawriter) permissions for all three tables. You reference this user in the asp code connection string so this user must be set up correctly. You may need your SQL server admins or hosting company to help you on this step as you may not have access to do this. You may not need to create a user and set permissions as the sql user you were logged in as to use query analyzer may by default get the correct permissions on anything you create.
Regardless, as you can see from this screenshot I have a SQL user called "aspprotectuser" and proceeded to set the permissions for that user. Under database access giving him (public,datareader, and datewriter permissions).

Now, you are done upgrading your SQL Server Database.
The existing passwords still have to be encrytped and moved from the "Old_Password" to the "Password" field
To that we have a special page we run in the application that will take care of that.
So, for now... go install the application, but using the database we just created. Follow these instructions for the most part... http://support.cjwsoft.com/forum/forum_posts.asp?TID=181& ; ;PN=1
When you get to the part where you finally get into the admin area and need to make an admin account you will notice that your existing user database is there but none of the users have passwords if you look at them in the edit screen.
That is normal. Simply do what the instructions say and create and admin account using a username that does not exist..
Then log off... then back in as that new admin account. If that works you are ready to convert the passwords.
This part is very easy.
You want to run a special page via the browser.
http://www.mysite.com/password_admin/convert_to_encrypted.asp
Replacing the part in blue with your website info.
Once you get the page running you will see a login prompt and one form field just like before with the "get_me_in.asp" page
You will need to paste the "PasswordEncryptionKey" value that you used in the "config_inc.asp" file in the form field and hit enter.
If all goes well you will see a page telling you to click here to encrypt the passwords and copy them over.
So do what it says... dont click more than once and wait.
Eventually it should say it is finished. So go log in to the admin area of the system using the new admin account.
Now edit some users but dont save... you want to see if the passwords are showing up. If they are the conversion worked. If you see nothing or a garbled mess it did not work and you made a mistake during this whole process.
If things went well backup and delete the conversion file below.
http://www.mysite.com/password_admin/convert_to_encrypted.asp
You do not need it anymore.
Once you are positive every thing is running smoothly and everyone's passwords are ok you can go in and delete the "Old_Password" field as well.
If things didnt go well.. try again from scratch and go slowly. If they still dont go well get ahold of us for help.
We are here to help, but if you really want us to we can be hired to do the conversion. ,
It's custimization work. and just not something I can support. Basically it is basic ASP/Database work.
Something you kind of need to figure out on your own. It's not difficult work for a good asp coder but there is no easy way and it is time comsuming.
I wouldn't use the custom fields though. I would make your own. It's simpler that way.
cwilliams38437.0929282407, I assume you mean 500 pixels wide
no.. because you cant reliably tell a pictures image width without an image resizing component to look it up.. asp can not do things like that on its own
serverobjects has a free component called "imagesize" that can do it as well but you need access to the server to install the component http://www.serverobjects.com/products.htm
so if you cant do that with regular asp code you definetly can not stop the upload proces because the picture is too wide..
heck, that would be nearly imposible to do regardless.. even with the best 3rd party components at your disposal
even with an image resizing component you would have to allow the upload.. then check the pixel width.. then delete it.. tell the user what is going on...etc etc .. all a very complicated process
, Nope,
No changes to any scripts - just a response.write added to Email_Password.asp to print out the SQL.
Sure - here's the address.
www.omegaphibeta.net/aspprotect/users/Email_Password.asp
-Toni
P.S. E-mail address to look for is serena_5@hotmail.com , User Information
After a user logs in there are variables that you can always access. They can be used to check various things or to display information dynamically based on who has logged into the system.
Session("PasswordAccess") Session("Access_Level") Session("Admin") Session("Active") Session("Expiration_Date") Session("User_ID") Session("Groups") Session("Redirection_URL") Session("Password") Session("Username") Session("First_Name") Session("Last_Name") Session("Company_Name") Session("Email") Session("Address") Session("City") Session("State_Province") Session("Zipcode_Postal_Code") Session("Phone") Session("Custom1") Session("Custom2") Session("Custom3") Session("Custom4") Session("Custom5") Session("Custom6")
You can display them on a page at any time using Response.Write like so
<% Response.Write(Session("FIRST_NAME")) %>
or like this
<% = Session("LAST_NAME") %> cwilliams38419.533900463, the txt file is only lke 624 kb...so I'm not sure,
Best setup I recomend is just setting up a rig and making a workgroup.
No real reason for a production machine to have any access to internal
security when you think about it.
classic asp should be pretty easy to move, just set up new webs and
dump the scripts in there. If you have 2 machines its always easier to
look at the one while your building the other. Basically copy the setup
and tada... the only thing you might need to remeber is components (if
your using any) and thats usually not a very big deal either.
Point sort of being at some point your going to have to change that
thing around and while its no fun you have to imagine now is a better
time to bite the bullet and get it set up the right way. Your
alternative is to mess around for hours and hours praying that you
change domain wide security to the point that running NET
apps on that domain controller works. Personally I wouldnt sleep well
knowing I had just messed around so bad with the OS that I had no clue
what bugs and security holes I might have accidently opened in the
process. I wont even get into the possible things that might stop
working on the rest of the domain if you fiddle with accounts like
"Network Service"
Oh and if thats not enough reason to make you think about it, consider
how hard it will be to try and rember what you did at 2AM 6 months from
now if that machine takes a dive or some critical update undoes what
you changed.
I feel for you though, trust me we have all been down that road once or
twice. Get some sleep and in the AM the task at hand wont seem nearly
as bad. You live and you learn, and you will definatly be WAY better
off making things right sooner than later
, Okay, I did that, now I get:
Microsoft VBScript runtime error '800a004c'
Path not found
/aspprotect/password_admin/upload_post.asp, line 292 , Hallo,
What do I have to do for inserting around 6,000 new users?
I have all my user in an access file. I don't know the password of access database files. The same problem with the "aspprotect upgrade pack".
Sorry for my English
 vaghelis38300.2319097222, The Pop-Up Javascript Date Pickers will only show up of your server's regional settings are set to one of two lCID values.
1033 which is English - United States mm/dd/yyyy date format
or
2057 which is English - United Kingdom dd/mm/yyyy date format
Many servers are set to run the default LCID which is 2048 so the banner system will not show the date pickers.
This setting can however be easily overwritten when using the ASPBanner system.
Edit the "config_inc.asp" file with a text editor.
Add this code between the <% and %> tags. Near the top is good
Session.LCID = 1033
or
Session.LCID = 2057
depending on what date format you are looking to use
Save the file and go edit a banner. The date pickers should be there now. cwilliams38325.7403125, I am having trouble getting any information to show up in the log files
directory or anything showing up on the log files tab in the
administrator. I have set the following variables under the
settings tab:
UseLogFiles checked and
value of LogFileDirectory is "c:\inetpub\wwwroot\wf\data\logfiles"
I checked the permissions on that folder and they are set so that the Internet Guest account has full control on that directory.
I also checked RecentActiveUsers and RecentPageRequrests.
I am sure I am missing something simple but no files are ever showing
up in the logfiles directory...anyone have similar problems or at least
successes?
Thanks!!
, I have sent an registration email (as test) to both a yahoo account and also my own email server and in both cases I get the same issue, all else is working great. I am sure its somthing simple, perhaps I am over looking somthing else. the site url is www.rochestertek.us/asp/users/register.asp if this helps
Again thanks. , well, like I said.. I am leaving in about 5 minutes for the wedding.
If you put this up on a live server that I can connect to I will look at it tommoro for you. I have told you everything I could possibly tell you so I dont think your going to figure it out based on the things you have told me so far.
Only other thing I can think of is make sure your not running anything goofy on that server 2003 box. Norton Antivirus script blocking... various ad blockers.. anti spyware applications... etc etc... They can cause problems as well. , SQL Server Datareader Datawriter Permissions..
here is a screenshot that shows how to set datareader and datawriter permissions on an aspbanner database using "SQL Enterprise Manager"
In this example we are making sure the aspbanneruser has those permissions on the aspbanner table in the database

cwilliams38325.8002893519, thank you for such a quick response -- It sounds straight forward - so I should be all set. Thanks again., After you click the link in the confirmation e-mail you are directed to
the Thank you page. Right above is a sign in link. When I
click this I get that funky error message.
I am trying to integrate the scripts with the look of my
site, if that is what you mean by changing things around too
much. But, I don't think I have done anything out of the ordinary.
Cheers,
Roy
, sometimes those emails take a bit... all depend on wht you are using to send them and whether a pickup directory is involved
as for the other I do not know.. PM me the site details I can look
if it is a 2003 server parent paths must of course be enabled.. its a requirement of aspclassifieds , Tony,
ASPBanner.NET was discontinued about 14 months ago. It is no longer supported in any way because quite frankly the classic ASP version is faster, more stable, has more features, and is a lot easier to install and get running.
If you PM me via the forum you are welcome to a copy of the current ASP Unlimited Version. It can serve banners to any type of page extension. All you have to do is ask for a copy.
Whether or not your existing ASPBanner.NET database is exactly the same structure I do not know, but I believe it is. You should compare the two if you plan to keep using the old database and make any neccessary changes so the old database has the exact same structure as the new version. If there are any differences they are very few. , I think I've got it to work somewhat. I modified the 2checkout1 & 2 asp file to use and pass Product_id. It now identifies the product correctly. I'm good fo now. Thanks for the info though.
-Jason , Humm, its hard to explain but I am not sure that is a good way to be testing that. I hear what you are saying but I am not sure that really means anything. Whatever is going on its some sort of client side issue with the browser and the meta refreshing over a very long period of time during which there really is no user doing anything at the site. , I like to change my database from access to SQL. I run the aspbanner.sql in the database and then I checked the new database tables with the screenshots from your support info. Then I make a ODBC Connection and it looks very good, I logged in and create a zone, but I was not able to store it. I got the following message:
Microsoft OLE DB Provider for ODBC Drivers- Fehler '80040e07' [Microsoft][ODBC SQL Server Driver][SQL Server] Bei der Konvertierung eines char-Datentyps in einen datetime-Datentyp liegt der datetime-Wert ausserhalb des gütigen Bereichs. /adserve/aspbanner/appinfo_inc.asp, line121
Please can anyone help me, that aspbanner also run on my SQL Server ?
Best regards Josef Raschko , thats because you can not have exchange server running at the same time as the windows IIS virtual smtp server..
they clash with one another... and thats why the emails never get picked up by the iis stmp server
you have to send the emails another way like using a true remote mail server.. I am not sure but if your exchange server can do pop 3 you can probably use that that way
you may be able to change the pickup directory that cdosys uses under the virtual SMTP scenario, but I am not sure if that will work with exchange picking it up, but maybe it will work ok because you said it does when you paste them in there manually.. I do not really know.. you'd have to try it and edit the email sub routine to use that pickup path
"scripts/emailing_subs_inc.asp" is where you could try editing that path , Hello,
If you are using ASPProtect Version 7 it is possible because version 7 supports html emailing. In any other version it would require some custom coding to add html email support. You would have to sort it out by experimenting and editing the emailing code. All the email methods have documentation on the web in some form or another showing how to send html emails.
Also, sometimes depending on the email component being used and the email client reading the email a link in a text based email will get hyperlinked automatically. For example outlook usually will do that, but it doesn't always in other situations.
Lastly, we have special upgrade pricing should anyone want to upgrade to ASPProtect Version 7. It really has a ton of great features.
Best Regards,
Chris Williams www.CJWSoft.com cwilliams38415.6414236111, Hey, I run a business and I will not have things like that mentioned in these forums. , Okay, hopefully I'm posting in the correct area this time.
Currently we are utilizing ASPProtect 7.x
When using the Newsletter function, many members are indicating they are not receiving email. No evidence of email in SPAM folders. Also, when checking with email provider, they insist it is not being filtered prior to delivery to member's email address.
The following message does appear when a newsletter is sent.
error '8004020f'
/newsite/ASPprotect/scripts/emailing_subs_inc.asp, line 124
Line 124 is the line of code to 'send' the emails. We have approx. 860 members who are on the list to receive the newsletter emails. I have no way of knowing how many are not getting the email. Based on anecdotal evidence, I'm guessing it could be as high as 20%.
We are using CDOSYS / SMTP authentication with a real external email with MX records. Our website is hosted by Cbeyond. They insist it isn't at their end. (for what it's worth)
Thanks for your assistance.
NPA , Okay, I deleted out the aspprotect folder and started over. I also took out the dsn connection to the ecommerce database and deleted out the subweb that had it, I decided to use another provided where the database is resident on thier servers not mine.
I broke my txt file into groups and it's loading sort of. The first 1000 users uploaded fine...the second said it timed out, but when I looked at the access database it showed 2000 people. The login still times out and every page seems to load incredibly slow still. , When using this code:
<!------- ASPBanner Ad code -------------> <script language="JavaScript"> var code = ''; var now = new Date(); var nIndex = now.getTime(); document.write('<s' + 'cript src=" http://www.poconocommuter.com/aspbanner/injectbanner.asp?Ban nerZone=6&nocache=' + nIndex + '">'); document.write('</' + 's' + 'cript>'); </script> <script language="JavaScript">document.write(jscode);</script& gt; <!--------- End ASPBanner Ad code --------------->
I receive an error that jscode is undefined. The banner will not display.
Any ideas how to fix this?
, 1st. Please understand you have to purchase two licenses to do such a thing as each installation will need a valid license purchased.
Moving on:
ASPProtect using a industry standard concept called "Forms Based Authentication"
This primarily relies on session variables keeping track of login status.
Each installation must be in it's own unique "IIS Application" so it will have it's own set of application and session variables.
That is often not possible with shared hosting plans as the server admins may not be willing to set a folder in your web as a separate IIS application. You would need to ask. It is going to depend on the quality of your hosting plan whether they do it or not.
technically it takes about 1 minute to open up the "IIS Console" and set up a folder in your web as a separate "application"
Based on what you are telling me that you want to do I think it would make a lot more sense to have one installation and one user database and customize your sites so ASPProtect users that are part of certain "groups" have access to things others do not or see things on pages other users would not. That is after all the entire point of Dynamic web sites and also why ASPProtect has "groups".
Then as far as the registration differences go you would make a copy of the users area folder area and manual customize it to register users in an alternate fashion than the main "users" folder. And then send people there if that is how you want them to register.
I don't support customizations but that is the gist of it. It's really not difficult work, but you have to be good with ASP., If you have messed up the admin account or forgotten the admin password you generally should open up the database manually and add a new account or see what the old account is.
In version 7 however you have another option. Go through the installation instructions again. Specifically the part where you use the "get_me_in.asp" page to get back into the admin area by pasting in the password encrpytion keye you are using from your config file. , You really should check out the documentation regarding the config file before you go any farther.
If the server supports ASP.NET you do not have to spend any money to have real fast loading thumbnails.
Also, licenses of ASPImage only cost 69.95 and regardless any quality host supporting ASP should have one of the 3 supported resizing components installed or else you should consider a better host like www.alentus.com Places like that have good hosting prices and give you access to 3000.00 worth of 3rd party asp components.
, site looks fine in ie and also firefox from a windows machine..
I dont have a mac and I have not heard of that browser before
Sounds like an issue with the way that browser handles and puts together html/flash in relation to the layout of your site which is fairly complex
less likely - could also be related to computer processor/resources as that is a decent sized flash file and could bog down certain machines on the client level.. internet connection as well ?
those are my guesses.. I dont see anything wrong from windows xp web browsing from a fast machine and on broadband.. looks pretty nice actually ,
Hi Chris,
Alright. We figured out how to work with both C# and VB, by creating a separate VB web project in VStudio, and then passing the aspprotectnet.dll to the C# project.
Ok. I have another question:
How can our code determine the identity and user_id of the currently logged in user:
Is it Session["User_ID"].ToString() and Session["Username"].ToString()?
thank you
, one more problem I see...
I think your login box on the main page is missing the hidden form variable
http://support.cjwsoft.com/code/moreinfo169-1.htm, ok, I am using ASPProtect's password program, which has been very successful, for managing over 1,500 military veterans' memberships at http://www.vspa.com. What I am trying to do now is utilize the "Groups" code, as generated by the Admin page, to prevent members with expired accounts (and non-members) from accessing restricted "members only" .ASP pages they may have bookmarked, or found via web search. The code generated and used is as follows:
<%@ LANGUAGE="VBSCRIPT" %> <!-- Begin ASPProtect Code --> <!-- Groups with access to this page. ( * ADMIN * Member Current * Member Life * Officer/Staff * ) --> <% GROUPACCESS = "10,12,14,19" %> <!--#INCLUDE FILE="check_user_inc.asp"--> <!-- End ASPProtect Code -->
The above is placed over the <html><head> statements on the page.
When I am logged in the code works perfectly! When I log off and try the URL again, the page appears in its entirety but with a Login box for Username and Login Password at the top of the page. You may view the problem at: http://www.vspa.com/aspprotect/vspa-password-enter.asp .
What I would like to have happen is expired members and non-members would be sent (or Redirected) to a Login page. I do not want the Login password box to merely be inserted above the page that I am trying to keep them from visiting.
Don Poss, VSPA Webmaster , Interesting.. Yes, the SMTP service is turned on. This is my boogle. If they are both installed, then it should in theory work. But for some reason, it is being subborn and not working., The default database password is "temp"
This is noted in the docs. You can also see the current password by looking at your connection string. cwilliams38176.7913888889, thanks thats what i was guessing.
, Chris,
I've given the IUSR account modify access for the aspprotect folder.
In the ODBC manager module on the webserver I've taken out the aspprotect access driver option.
The dataconn_inc.asp line reads as
ConnectionString = "DBQ=D:\missourirealtor.org\members\aspprotect\data\database \ASPProtect_access2002.mdb;Driver={Microsoft Access Driver (*.mdb)};UID=Admin;Password=temp"
Now this should make it DNS-less correct? with the permissions set properly?
I've also taken out the password on the access database.
The original database of users I had was an access database from a different program called spooky login. I exported them into a tab delimited file and changed the column headings to match those in aspprotect exactly. Actually access would not let me import them in the databases without them being exact.
I imported that information directly using access's import options. I tried the import/export manager in aspprotect but kept timing out as well.
,
Timecard Entry: 3/25/2006 1:43:42 PM
Redesigning file encrypter/unencrypter to support vb common dialog for browsing files. , Personal Day, Problems with QB, PO/Inv reports and TAF for Michele, Drive to Boston for Creating for the Web conference, Slow starting off, but picked up... the phone kept me busy most of the morning., Amy - Showing her new upload manager for Timberview/FX Caprara/Froggy 97., did radlog calls, Split up the voice mails amongst us. , check out why x5000 and x5500 are messed up. tried to get ahold of usadatanet. problem was fixed within about 10 minutes of it reported to me. took and softbusied dsp cards and then restored fixed a problem with 2 cards on the second chassis and did a loop shutdown on 3 ct1's on the as5800 that werent getting calls, Talking with Bell Atlantic regarding ticket #60522. Talking with Henry Button in Canton, having him reboot the router up there., read and sent emails, Installation of Macromedia Shockwave for funtionality and as part of the Flash program installation, doing the paper work......lots of it...logging trouble tickets calls in a log for Howard...doing my timecard., steady morning. , go over whites lumber with tom- bresee cars, wo 99-49, configure and test Sangoma card, * energy intiatives development, Floating Holiday., finding out where they are with ss7, MS tech Support re: FPSE, met with Howard briefly on Roger Morgan to give him the status of it all, Working with servers. Supporting customers. Working with routers. Helping other employees., voice mails and timecards apprval, on the phones, most of the time, was very busy., Reset Ogdensburg modems., phones, invoices, bulk mailing, etc., travel from Clayton to Canton to meet with Allied Federated, Authen went down at 1050-1115. Wasnt' too bad. Busy at first and then we cleared the queue right out. , Talked to Tim Lasek about his work; he says he's doing a lot from home on his personal time. Says that his father is dying and that he wants more time to spend with his dad., TRAIN TERRI IN FRONTPAGE,
|