| Blog News Main Page NEWS FROM 2006-03-25
Blog Entry: 3/25/2006 1:49:37 PM
did anyone find a way to get the descriptions to show under the image yet?
, I am trying to protect and ASP page written in Javascript. The first part of the page goes:
<%@LANGUAGE="JAVASCRIPT"%> <!--#include file="../Connections/connWINGAP.asp" -->
When I insert the aspprotect code it looks like this:
<%@LANGUAGE="JAVASCRIPT"%> <!--#INCLUDE VIRTUAL="/GIS/WCGIS/GISProtect/check_user_inc.asp"--> <!--#include file="../Connections/connWINGAP.asp" -->
and I get this error:
Microsoft JScript compilation error '800a03f7'
Unterminated string constant
/GIS/WCGIS/GISProtect/check_user_inc.asp, line 2
I think I understand that your code is written in VBscript and that is why it is not working. If this is the case, how can I switch to VB to execute your stuff then switch back?
Thanks,
Jess ,
As I already had directories in my web site root called 'images' and 'templates' I loaded the files into a sub directory called 'aspprotect' as suggested in the installation guide where it say 'either way it really doesn't matter'.
However, it does.
The scripts are often looking for a file which it can't find because the /aspprotect part of the path is missing. Example:
I can't find a way of editing all the scripts that need changing. I'm assuming it would be easier to change my site to avoid using subdirectories used by aspprotect and reinstalling from scratch straight into the root directory.
Anyone with any suggestions?
Many thanks
Ian , Hi
ASPBanner is great...
I have a little problem I have a ASP site http://www.bythebeach.com.au/
I understand how Zones (location on a pages) works but i need only to display those banners that pertain only to that catorgries or sub catorgries.
How would i do that would .... Would i have to add a new field in the database...?
Any help would be greatly apprecaited
regards
Domenic
Sydney, Australia , I have no idea.. perhaps PM me info on how to log into your site and reproduce the issue., More info on the groups session variable.
Session("Groups") will contain the ID numbers of whatever groups the user is a part of. It does not store the descriptive name of that group. It will show the same data that is actually stored in the "Groups" field in the database.
for example it might hold a value like this
*2*,*5*,*9*
meaning a user is part of groups 2, 5, and 9
so if you wanted to check to see if a user was part of a particular group you would do something like this
<% If InStr(Session("Groups"),"*9*") Then Response.Write("You are a member of group 9") End If %>
Taking this even further, if you really wanted to get a particular group's name or description you would have to query the database like so. In this case we ask it the name and description for group 9.
Group_ID=9 Set ConnPasswords = Server.CreateObject("ADODB.Connection") ConnPasswords.Open ConnectionString Set cmdTemp = Server.CreateObject("ADODB.Command") Set CmdEditGroup = Server.CreateObject("ADODB.Recordset") cmdTemp.CommandText = "SELECT " & tbl_label_groups & ".* FROM " & tbl_label_groups & " WHERE (Group_ID = " & Group_ID & ")" cmdTemp.CommandType = 1 Set cmdTemp.ActiveConnection = ConnPasswords CmdEditGroup.Open cmdTemp, , 0, 1 Group_Name = CmdEditGroup("Group_Name") Group_Desc = CmdEditGroup("Group_Desc")
, That worked...but when I tried importing the test user, the password was imported in an add formated...like it was encrypted, and I can't log in using the User ID that I imported., In addition to that I just noticed the </href> you have in there.. man that is some scary stuff you came up with.. that may appear to work and make a link but it is not correct. Each link will work but never truly be closed.
That is just not valid proper use of the anchor tag. You make a link in html like so
<a href = "somepage.htm">somepage.htm</a> http://www.w3schools.com/tags/tag_a.asp
Then your surrounding each link with <span lang="en-us"> </span> Not sure why ? , I am having problems accessing the admin site at the following URL:
http://www.drsweisberg.com/password_admin/default.asp
It brings up the login page, but when I enter the admin/test, it times out. The DB is the copy with no password and it resides in a directory on the same server hosting the site but it is not in a folder viewable by web users. This is how the dataconn_inc.asp is set:
<% '*** Below are the only two settings you need to edit in this file ConnectionString = "DSN=drweisberg;Driver={Microsoft Access Driver (*.mdb)}" DatabaseType = "MSACCESS" %>
The ODBC is setup and the IUSR has read/write/modify permissions.
Any help would be greatly appreciated. , ok, 1st we need to rule out the #1 reason people sometimes think that is not working.
Is is set up never to allow the same IP to increment the count more than once in a row so when testing it is real easy to think the count isn't working because unless you can change your ip you can not increment the count more than once per album
It's a poor mans spam abuse type of deal.. For the most part it will keep some Joker from hitting refresh 100 times and inflating the count of an album.
Do you think that is possible what is happening ?
Also, here is an older thread about the same issue? http://support.cjwsoft.com/code/moreinfo54-2.htm , ERROR [HY000] [Microsoft][ODBC Microsoft Access Driver] Operation must use an updateable query.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: Microsoft.Data.Odbc.OdbcException: ERROR [HY000] [Microsoft][ODBC Microsoft Access Driver] Operation must use an updateable query.
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below. | Stack Trace:
[OdbcException: ERROR [HY000] [Microsoft][ODBC Microsoft Access Driver] Operation must use an updateable query.]
Microsoft.Data.Odbc.OdbcConnection.HandleError(IntPtr hHandle, SQL_HANDLE hType, RETCODE retcode) +27
Microsoft.Data.Odbc.OdbcCommand.ExecuteReaderObject(CommandB ehavior behavior, String method) +838
Microsoft.Data.Odbc.OdbcCommand.ExecuteNonQuery() +80
aspprotectnet.aspprotectlogin.Login_Click(Object sender, EventArgs e) +2284
System.Web.UI.WebControls.Button.OnClick(EventArgs e) +108
System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEven tHandler.RaisePostBackEvent(String eventArgument) +57
System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) +18
System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData) +33
System.Web.UI.Page.ProcessRequestMain() +1292
|
Version Information: Microsoft .NET Framework Version:1.1.4322.2300; ASP.NET Version:1.1.4322.2300
I am getting this error message when trying to log in as admin or registering a new user. I am using Windows Server 2003 and it is a DOMAIN CONTROLLER.
I have read that there is NO ASPNET account for a domain controller. In its place is the IIS_WPG account. I have given this account and the IUSR account FULL CONTROL.
STILL GETTING AN ERROR. ANY SUGGESTIONS??? , Hello,
You are correct regarding what you noticed.. ASPBanner only allows one person to administrate. If if did what you are asking about it would probably cost more. (you get the ASP source so if you really wanted that you could always add it on your own fairly easily, but it all depends on your skills)
AS for keyword advertising and different ads based on certain pages ASPBanner does not get into that. The main reason being performance as I built ASPBanner primarily as a performance banner rotation solution. http://support.cjwsoft.com/forum/forum_posts.asp?TID=144& ; ; ; ; ;PN=1
Like that thread says, you could make different zones for different conditions.. then surround the banner calling code with if else logic so a different banner zone was called under certain conditions.
Regardless, if you really need something that has every bell and whistle. BanManPro is where it is at. cwilliams38434.7100578704, Not really. The way I thought activity would work is that I would always see the last 50 users. Not sure what controls that and why I wasn't seeing it, but it sounds like it is an IIS thing and since my site is not all that busy, it will not show the users if some process has reset the numbers. Not a big deal.
As for the log files, I think it is related to my other question regarding the export directory. I have the ISP looking into things at thier end to see if they are doing anything that could cause the directories to disappear.
Thanks,
Dave , I have ASPPhotoGallery installed. Everything has been working great for some time. Suddenly, for no apparent reason, I am not getting the "Hits" incremented when a user opens an album. It works when an administrator is logged on. Does not for any anonymous users. Everything else seems to work fine. Again, this used to work. Any ideas. , Hi - When I try the mass email feature, I get an error that says:
ODBC Microsoft access driver) too few parameters expected 1
/aspprotect/password/admin/send_mass_email.asp line 280
Oddly...this feature works fine when I use the original admin user that you setup.
But I setup another one with my username and password (not test) - because I was afraid anything with "test" could get deleted.
Any ideas on why the new admin userid would not work? Note: I have not change any code from the original installation.
, yes, like it says it is expirimental
turn it off.. the banner system will run just as fast for the most part
or leave it on and an occasional user will see a permission denied error where a banner will be, Great software.
How easy would it be to copy the email address entered at registration directly into the login id field so that the user's email address is automatically used as the login id?
Also, where in the code can I turn off the random password generator - I'd rather force people to pick something they can remember themselves.
Thanks,
Nick , Okay, this also shows at the bottom of the import/export page
I've got the IUSR account with modify permissions on this data folder as well. Is the "this directory needs change permission" line just a general reminder?
Files are being stored in "D:\missourirealtor.org\members\aspprotect\data\export\\"
This directory needs change permissions for the anonymouse webserver account. Those permissions can only be set by your hosting company. These features will not work without those permissions being set.
, Just installed sofware everything works fine except I see no way to upload any photos. There is no reference or link to allow an upload on any of the asp pages (I have surfed them all). I am sure it is something simple, but I am not aware. I am using SQL2000., Now that I really think about it.. instead of logging that info to a text file and worrying about folder permissions you could probably just save the post info into an application variable during the paypal ipn.asp post like so
For Each Item In Request.Form formdata = formdata & vbCrLf & Item & "=" & Request.Form(Item) & vbCrLf Next
Application("PayPalPost") = formdata & " - " & NOW
then anytime you wanted to see if that info was there or when it happened you could make a simple asp page in your site to display the results like so
<% Response.Write "(" & Application("PayPalPost") & ")" %>
cwilliams38421.6747453704, humm
expiration dates in the aspprotect system are not used at all when using paypal subscriptions.. all date handling is done on their end actually
and they of course send notices from their system to the user regarding their subscription and when it renews,cancels, etc etc
so I am pretty sure any errors with that would have more to do with the info you used for the subscription setup and possibly any paypal settings associated with it
its hard to say at this point
The smart thing to do I think.. would be to sign up someone using another PayPal account (your allowed 2)... and while doing it be very careful about the subscription setup data.. and then as soon as the subscription is created review all the info in the paypal system and see if the length of the subscription / expiration.. etc etc in the paypal system info looks right..
at least then you can begin to troubleshoot what is going on... , That's excellent!
I did learn that parent paths were disabled on my test 2003 server...
But on the hosted server, it looks like parent paths are supported as I change the file location of the language file in the forum common.asp as such, and obviously moved the file as well:
from:
<!--#include file="language_files/language_file_inc.asp" -->
to:
<!--#include file="../language_file_inc.asp" -->
Everything seems to work fine and I thank you very much for you quick response!!! 
Ok, time to buy...thanks again!
- Jason
, 5 Computers in an office, random hardware and operating systems. Some wireless some wired - all the same ISP connection.
Some users do not see the PLACE A NEW AD hyperlink. How can this be hidden? There is no conditional statement yet some see it and others don't.
To make this problem even more confusing if I take an image and put the place_new_ad.asp hyperlink on that image the users don't even see that image any longer.
How can this be resolved? , I noticed that is grabbing the wrong URL for some reason. Even when i mouse over the URL its somehow getting the users sub directory. How.. i dont know... when i erase that users in the url it works perfectly.
I am looking at the code in the .vb file and i dont see anything that could be causing it to do that... but then again i am no programmer LOL
Its obviously kicking in that users subdirectory somehow... what are your thoughts? , YES.. you need to edit your SWF file to link to the aspbanner system...
example.. the link may look something like this http://banserver.powerasp.com/aspbanner/banner_redirect.asp? Banner_ID=60
of course you need to put in the right information for your site and whatever banner ID it is in your system
Like it says above.. if you save the new banner at least once and then come back to edit that link will be generated for you at the bottom of the edit page.
then when your flash banner is clicked on it will go track the click and then send them to the "link_url" specified for that banner when you edited it. (you need to enter the final destination url there if you want that to work) , Hello Chris:
Let me run some more test if it's working on your end it should be on mine? I have made some custom updates to the code but no in that area.
Thanks, -Ricardo
, Okay Chris, I wold like to get rid of the encryption then if it's not too much trouble.
I have no option of running the production server against an ms access db, since the db needs to be online and accessible from another system. , download the free version...
check out this tutorial... http://support.cjwsoft.com/code/moreinfo169-1.htm
If your application can post to the page and provide all the form variables needed to log in it may work out for you..
You'll have to try it out... all the form variables needed are in that login form example.
Basically you'd be posting to a protected (.asp) page.. and providing the following for the most part.. how your app creates it post data is on your end...
<input type="hidden" name="Status" value="Checkem"> <input type="text" name="Username" value="Yourusername"> <input type="Password" name="Password" value="YourPassword">
As an alternate scenario...
Now, by default the "check_user_inc.asp" file is looking for posted form data... for security reasons it is not looking for querystring info..
If you change this bit of code in that file
from
Username = Replace(Request.Form("Username"),"'","''") Password = Request.Form("Password")
to
Username = Replace(Request("Username"),"'","''") Password = Request("Password")
It will then grab either form or querystring data...
Meaning you wouldn't necessary have to create a true post to the page with form data. You could just access the page via a querysting like so
http://www.mysite.com/somepage.asp?Status=Checkem&Userna me=Yourusername&Password=Yourpassword
Of course that introduces security risks as the username and password would be passed in plain text over the net
Another option is... You can also make a copy of the "check_user_inc.asp" page called whatever with those modifications just to use in pages you need your little application to post to... thus reducing the security concerns a a bit as the rest of yoru site could still have its pages protected under the normal scenario.
I hope this answers your question... I havent really ever tried any of this but that is how I think it would work... , I wonder what that ENDSQLMail send failure is all about ? I dont use anything regarding SQLMAIL in the ASPProtect code.
I think I might need to go in so I can debug a bit. Everything seems to work fine with a SQL installation here so I just don't know at the moment.
If that is ok with you I would need ftp access or something so I can trry a few things and hopefully figure it out. Admin access to the aspprotect admin area as well so I can see what you have set up in there.
PM me with that info if you want me to take a look.
, Attached is a SQL script to create the ASPProtect Database with the Option Pack Changes already applied. This lets you create the database in one step and you wont have to make the option pack changes as they are already there.
This only applies to people using MSSQL and doing a new installation.
This scripts are run via SQL Enterprise Manager.
You make a new database then run this script on it in query manager.
2004-06-14_180056_aspprotect_w_option_pack.zip cwilliams38152.7522569444, You are not supposed to use "../" with a virtual include
Thats goes against what a virtual include is and makes no sense. When using a virtual include you give the path as if accessing from the root of the main web / virtual directory
I find it very hard to believe it ever worked like that and if it ever did it was wrong.
cwilliams38434.6703356481, Thought that was already done....
Back to the drawing board... , Just wanted to say how much I like the program! I hunted for days and finally purchased a Perl based product. After several days of goofing with it I gave up. ASPPhoto worked right on first install!!!!
Way to go! , Humm.. that should have worked fine
why are you getting a "OLE DB" error I wonder ?
I need more information.
Database being used and version ? Server OS Version? Connection String being used ?
etc etc , The ASP error on the home page has been solved -There was aproblem with the path that was including the home page file and we fixed it.
However the error on the member page remains - any ideas/suggestions would be appreciated. This is the error:
Microsoft OLE DB Provider for ODBC Drivers error '80004005'
[Microsoft][ODBC Microsoft Access Driver]General error Unable to open registry key 'Temporary (volatile) Jet DSN for
process 0x748 Thread 0xad8 DBC 0x214734c Jet'.
/aspboard/forum/global.asp, line 15
, Chris,
Ok new puzzle . I have now managed to gonfigure it to get the admin screen and update members. All excellent news. Seems to work a treat.
But have used the code you give in your getting started guide to add at
the very top of an aspx page to be protected. The path is configured
correctly I am sure. the aspx file is in the root, the protect program
is in a folder now configured as an application (hence the steps
forward to get to the admin screens) on the root, so address should be
foldrname//protectpage.ascx.
Proble when I load that aspx page is as above. The exact same config error ,oww!
I am sure its a setting on my server now, but I dont know what to ask for, Any ideas...
So close now!
Andy
, This first one may be an obvious one, but is it only .asp files that I can protect as in no HTML files.
Can the program be set to protect my whole https directory contents (though the answer to the last question may have bearing here - there are html files as well as .asp in there) as in http://secure.mydomain.com
Thanks in advance , Connecting user is dbo of database.
User_ID is primary key with auto increment identity.
SQL Script of current table: CREATE TABLE [dbo].[Security_Users] ( [User_ID] [int] IDENTITY (1, 1) NOT NULL , [First_Name] [nvarchar] (100) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Last_Name] [nvarchar] (100) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Company_Name] [nvarchar] (100) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Username] [nvarchar] (75) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Password] [nvarchar] (15) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Access_Level] [nvarchar] (30) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Notes] [nvarchar] (1000) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Admin] [bit] NOT NULL , [Active] [bit] NOT NULL , [Expiration_Date] [smalldatetime] NULL , [Email] [nvarchar] (100) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Address] [nvarchar] (100) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [City] [nvarchar] (100) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [State_Province] [nvarchar] (100) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Zipcode_Postal_Code] [nvarchar] (20) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Phone] [nvarchar] (20) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Counter] [int] NULL , [Last_Access] [smalldatetime] NULL , [Login_Limit] [int] NULL , [Custom1] [nvarchar] (255) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Custom2] [nvarchar] (255) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Custom3] [nvarchar] (255) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Custom4] [nvarchar] (255) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Custom5] [nvarchar] (255) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Custom6] [nvarchar] (255) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [ValidateEmailCode] [nvarchar] (50) COLLATE SQL_Latin1_General_CP1_CI_AS NULL , [Date_Created] [datetime] NULL , [Validated] [bit] NOT NULL ) ON [PRIMARY] GO
ALTER TABLE [dbo].[Security_Users] WITH NOCHECK ADD CONSTRAINT [PK_Security_Users] PRIMARY KEY CLUSTERED ( [User_ID] ) ON [PRIMARY] GO , My guess is they are not going to allow you to run your own oledb connector out of your own personal bin directory.
I don't think your going to be able to modify aspprotect to work under
that environment very easily, but I would give 1&1 a chance to
explain their reasoning and they might actually be able to provide a
simple fix who knows.
I have never seen a situation where a host goes messing around with
.NET that worked out good for anyone. I'm sure they have a reason, but
the entire world writes code to work on the platform as Microsoft
shipped it not as someone decided was a better way to set it up.
, Not without changing a lot of code. If you didn't want encryption you really should have went with version 6. Encryption is a big new feature of Version 7 and it is inter-mixed with it the code in a lot of places.
As for doing the export and import you have to create a valid export file and then read through this very thread which explains how to import an export file with clear text passwords.
This is from the admin area regarding the text file format The import/export file must be tab delimited with no text qualifiers. The 1st row containing field names and the following each being a new user. To create your own import file it must be in this exact format. To find out what field names and their order are simply create an export file using ASPProtect and take a look at it.
Generating an import file from your own database requires good knowlege and understanding of Access's Importing and Exporting functions. It is not something I cover as the process is different for everyone and not really very hard. ,
Timecard Entry: 3/25/2006 1:49:37 PM
C.E.R. Towers - can't dial in, problem with 5000 numbers in Lowville?, Daily routine, A few expired accounts showed up. Other than that, radlog was quiet as well. , Breaking down Dell boxes, taking out garbage, breaking down furniture boxes,, did some radlogs, lunch, Work with Randy and Andy on what we need to complete a requested network job at knowltons., Daily routine, answering phone, taking sign ups, callbacks from voicemail, checked emails, cc report, cancellation of invoices, , training, invoices, phones, Trained Gisele because there wasn't a computer or phone for me. Showed her some other tech tips and helped her when needed, Reading new interconnects, A few calls in regards to accounts. Really did no cleaning cause of all the cleaning I did the night before, felt everything looked fine..Did some major reading in the Office 2000 book., chow, Lunch with the wife, Letter to Linda Dobransky re: Best Machine & Lynn's Doll Cottage-document payments made, balance due., *TaskForce: ColligoNet Development (Saving Items, User Creation, Events), cvx training, Amy in office about modifying riverratcheese secure checkout to handle seperate ''ship to'' addresses for each item in shopping cart., phones, radlog, call backs, ask us a question, voicemail, Dial up issues, , Meeting with NYAB concerning VPN and current network, Daily Crystal Reports, Updating graphical navigation bar on left side of partners site to have and link to calendar of events, Very busy. Long hold times. Couldn't surf, no answers and so on. Slowed down at about 525pm, Driving back to Watertown. Miles = 65, callbacks. Switchboard. General billing., Watertown business Fair work and Meeting, Travled to Potsdam for a meeting with the chamber. Mileage= 70 (I drove), Seth,WAN updates, Lunch,
|