Blog Entry: 3/25/2006 4:51:45 PM
Hallo,
What do I have to do for inserting around 6,000 new users?
I have all my user in an access file. I don't know the password of access database files. The same problem with the "aspprotect upgrade pack".
Sorry for my English

vaghelis38300.2319097222, Thanks, I know, I have it all figured out and have thought about it before. Just no time yet to do it. It will probably be an add-on/mod when I get time. ,
We do not have plans to support recurring payments via 2checkout because their system is not flexible enough to allow it to function correctly. Basically their system will not send notifications to our system when a recurring payment fails and therefore there is no way to automatically disable a user that cancels or does not pay. etc etc.. , I did try to redit the banner and the old link was there, not the new one. In addition I tried to ad a new banner to an account but it too was not saved.
Since I can see the banners from the aspbanner solution, does that not tell me that the solution is properly connected to the database? The only thing is the solution only appears to be able to read the data and not write or delete it.
The settings for the directory are read write execute and delete so I am not sure what I need to do to get it working again
, I'll give it a shot within the next day or so. I'm busy with a few other things right now. You're right about just saving a copy before I start. It can't really hurt anything.
Thanks Chris. I'll let you know how it turns out.
-john
, Hello-
I'd like to set up the system to redirect to a landing page (say home1) after the user logs in.
I have looked at all the documentation and can't find something that explains how to do this. I am thinking that I can set up a log in as the default in my root directory that will have a form with an action=check_user_inc.asp. I have looked at the code there but cannot find a place where I would place a redirect to home1.
Help please
Thanks
, Will purchasing an additional license resolve the issue which will allow another installation or is this a function of the application that it can only protect one site per server?, Glad your getting the hang of it.
no difference as far as that goes. It is just different ways to reference the server side include file and it's location on the server cwilliams38457.6019675926, Ok, I tried what you suggested but the program won't let me leave the
date area on the banner ad blank. I reset it to a date in 2010.
I deleted the Level 1 Access note in the notes area.
I then attempted to access the banner stats using the correct info and
the right link. Again, got this message:
ACCESS DENIED
INVALID Username & Password
Username HAS EXPIRED
Any ideas? Should I just delete the whole account and start fresh?
TIA,
Laura
, <%@ LANGUAGE="VBSCRIPT" %>
<!--#INCLUDE FILE="check_user_inc.asp"-->
<%
Response.Write(Session("Groups"))
%>
, sure (XP PRO), see my article on that
http://www.powerasp.com/content/new/windows_xp_pro_and_permi ssions.asp
, How about the option to add an unsubscribe link to the end of newsletters that are sent out and a function that will uncheck the newletter field for that record if they click on the link?
Please??? 
Thanks,
Michelle , Ok, for starters what is the real error ? Please read this.
http://support.cjwsoft.com/code/moreinfo11-1.htm
2nd I always recommend using CDOSYS before any other email component. All servers have it running by default and ASPProtect supports some a html editor if you use that component. I would give that a try as well. It's the best emailing option.
, I think I've got it to work somewhat. I modified the 2checkout1 & 2 asp file to use and pass Product_id. It now identifies the product correctly. I'm good fo now. Thanks for the info though.
-Jason
, This is what "John Evans" of CJWSoft has to say on the matter...
"I think that’s pretty much impossible. If the server sees a .JPG or .JPEG extension why in the world would it go and try to read it or do anything with it.
I believe there may have been some issues with Outlook and Outlook express that made it look like a vbs script sent as an attachment was actually a JPG because someone found an exploit in those programs and it would appear as if double extension files were one thing when in fact they were not.
Having a real time virus scanner on the server (which any good host will) should also catch anything infected being built on the server drives as the file uploads. Always worked for me and I had a lot of people uploading ZIP files on winxptheme.com at one point. Many had viruses in them although I suspect it was totally innocent on the end users part. Some people didn’t even know they had a virus on their rig.
Fact is anything is possible but I think chances of getting a virus or being hacked in some way from this sort of upload are really slim."
cwilliams38447.0602083333, Installing and running NET on a DOMAIN CONTROLLER is a BAD idea period.
Besides the security risks you will have nothing but endless problems
with that setup. Domain controllers ARE NOT and NEVER were intended to
be run as any sort of application server. Your best bet is to run your
asp and asp.net scripts from a member server or one set up just for web
apps. Of course if your in the mood to mess around endlessly it is
possible to make that work, but why would you want to when the prefered
solution is a heck of a lot easier.
, Christopher,
Thanks for the reply. I think I've found my problem, but can't test until later in the evening as it is on a live site.
Darrell
, When a user 1st signs up a proper case function is run on certain fields.
This is only once on user signup and never done in the admin area.
It's goal is to keep things entered in Proper Case,
so if someone enters "chris williams" it becomes "Chris Williams"
It's not perfect but it helps a lot to keep the data clean and more consistent. Since it only happens during registration those values can be changed later by the admin or the user if someone wants to.
The function is only applied to the fields that it makes sense to apply it to....
In your case adding a drop down menu means you want exactly what is in your drop down to appear so you wouldn't want it happening.
That being said, it is really easy to remove this situation from any field it is happening to during registration.
So edit "users/add_new_account.asp" with a text editor
find
CmdAddUser.Fields("Company_Name") = PCase(Company_Name)
and change it to
CmdAddUser.Fields("Company_Name") = Company_Name
That is all that is needed to made the change
cwilliams38421.5069328704, ok, here is what is going on
you are password protecting an ".asp" page that requires querystring info to run correctly (example - "somepage.asp?ID=3"")
that is something I never intended anyone to do.. while it does handle and repass the querystring info along during successful login it does not re-pass that info during a failed login as you have found out
this is all by design.. the only reason the system re-passes the querystring info at all is because I wanted to make it smart for the sake of the remember me/cookie feature.. so if someone was using that and bookmarked a page deep in your site with querstring info...then when they went back to that bookmark they would get authenticated and still see the page as intended with the querystring info in tact
it was a nice feature never intended to handle any situations other than what I just described...
now...
notice the url in the browser after failing a login.. then logging in successfully.. it is missing the querystring info
that more than anything is what is going on.. browser caching can cause some confusion when dealing with this because the browser likes to return you to the page minus the querstring info... when that happens a simple browser refresh at that time may very well solve the problem and then you see the page you are supposed to see...
To avoid all of this...
One solution to this is to always start people logging in to an ".asp" page that has no querystring info. That way this won't happen. Once they are logged in you can then offer them links to the pages they need to go to. (you of course still want to password protect those pages)
Another solution is to log them into a page with no querystring info and then do a response.redirect to the page with quersytring info.. thus accomplishing the same thing but without the possibility of the issue because of a failed login.
Another solutions is to do checks in your asp page for missing querstring info.. and if it isn't there do something about it like send them somewhere else.. or display a message about there being an error... etc etc
So,basically you don't want to tell people to login into such and such page with querstring info... and providing a username and password..... You can do it but like you found out it can cause an error if they mess up logging in the 1st time. The system just was not designed to handle that. There are complex reasons for that involving security that would just take me too long to explain.
I hope this makes some sense to you.. it is very hard to try and explain
, sorry your having so much trouble. A good host is a must.
Yes, that is most likely permissions related.
http://support.cjwsoft.com/code/moreinfo27-1.htm
You may want to read over my article on how permissions are set. It will give you a very good understanding of the process and may help yo when dealing with your hosting company.
http://www.powerasp.com/content/new/windows_2003_server_and_ permissions.asp
there is also an xp pro version of the article for people doing locl development and running iis on their xp box
http://www.powerasp.com/content/new/windows_xp_pro_and_permi ssions.asp
, I would like to delete the SQL tables and set them up from scratch using enterprise manager and sql query manager and see what happens
If that is ok with you let me know.
Something is wrong like I said... almost seems like the database is caching old password info from the field.,
ok, here's a test page:
http://www.galvinelectricity.org/download_link.asp
user: test
password: test
Our company just got new computers, so everyone here has the same set-up, all Dells, all about 3 weeks old, all Windows XP.
But I did realize after reading your post that I am using Firefox and everyone else was using IE. When I used IE, I was able to duplicate the error.
But, alas, I am unable to resolve it. Client will be using IE, no doubt.
, how about translating the error to english..
Looks to me off hand that it would have something to do with the SQL server itself not being run in an english lcid/format and causing some sort of date issue.
I would also suggest you start off with a brand new blank SQL ASPBanner database and make sure that works before you attemp t to import any data into it.
, This is amazing. You replied to question within minutes. Thanks for showing such a professionalism.
,
The only reason no one else
asked this many questions is possibly because they didnt NEED the functions i
am TRYING to do. 
We offer tech support for
installation of the base application purchased in it's native form.
In other words were not planning on spending weeks holding your hand and
teaching you how to build your application or modify the one you bought. Not
because anyone wants to make it hard on you but because there is a practically infinite
number of things someone could be trying to do and the only way to give you the
exact answer would pretty much involve either writing it for you or having a
look at your code to see what the heck your doing. Sorry but my time isn’t cheap
nor do I have a lot to spare. I already gave you my approach on what to do and
what you should be looking at but obviously you’re not catching on. SO ONCE
AGAIN, PLEASE LOOK AT THE SOURCE CODE AND DECIDE HOW YOU WANT TO HANDLE YOUR
END OF THINGS BASED ON HOW THE APP DOES ITS THING. I really don’t know how I
can be more clear that that. I don’t have a crystal ball that can tell me where
you’re going with your own code, what the final requirements are... what field
you want to add or remove for the database etc. There is a demo up that
everyone can look at and play with so they can get a feel for how the things
behave and look. It’s not my fault your naivety led you to believe you could do
anything with it in ten seconds. I mean if I just add some wings to my car
maybe it will fly, and if you just add a shopping cart and a few products maybe
you can start your own Amazon.com with that software right? Sounds good to me…
It would take me longer to re-write YOUR code
than it would to have LEARNED ASP.NET and made MY OWN. 
Well thats one thing we both agree on, I bet it would take you a long
time to rewrite the code when you dont know how to write it in the
first place. By you own admission you dont know enough about what your
doing to be messing
with a .NET app at this point. Maybe you should take your own advice
and LEARN
SOMETHING ABOUT IT. What’s even worse is that application isnt even
complicated, its 101 stuff honestly. One class, thats it! Your not
looking at thousands
and thousands of them that you will have to read and comprehend. If you
can
actually “read” the code we kept it lean and mean and to the point.
Nothing
strange or random, no references to a zillion things all sprinkled here
and
there. Its reads like a book if you know the language. That’s why
developers
buy these apps all the time. Not because they couldn’t write one
themselves,
but because they know their time is valuable as well and for $150 which
is less
than most get paid an hour they couldn’t be bothered. Furthermore we
both spend a lot of time making sure these apps are "dumbed down" so
that the average programmer without a lot of object oriented background
can pick up the coding style tweak it if they need to. Some people do
modify things to suite their needs and
others are
happy with our apps "as is".
Just to recap we already wasted two days yappin about your
jacked up servers and after you went through THREE of them and finally got one
working you said the code was working. Red lights started flashing in my office
by the time you got to the second screwed up machine, but hey weird things
happen so at that point I wasn’t 100% concerned. Technically we could have and
possible should have cut you off there as the policy in place is pretty clear
about us not being your tech support crew when it comes to getting your machine
working properly (especially one we cant even look at). Go check those posts
again both Chris and I were answering your questions and being as helpful as
anyone could possibly expect.
Several more days have been spent answering questions about
how to modify your application and again that’s not our responsibility and we don’t
support modified versions of the software for all the reasons that should be
obvious. No software company does and if I have to explain why that is well this
conversation is beyond hope.
Bottom line is the responsibility to support that
application ends the moment you get it running the way it was shipped. Were
pretty damn decent about going above and beyond and a lot of the time we go
into things we shouldn’t have to. If you have well thought out and specific
questions by all means ask, this isn’t some sort of thanks for your money now
get lost operation. CJWSoft has been around since the beginning of Microsoft’s
entrance into the web application market. We have thousands and thousands of
happy customers because we are developers and enjoy working with other
developers along the way.
You’re not the first N0oB to show up, but you’re the first
one I can think of that ever tried to tell us we didn’t write the apps we sell and essentially
wanted to argue that we don’t know what were talking about. Meanwhile you
should have been done with your thing days and days and days ago, not in here
yapping off and showing your ignorance to the other developers that regularly
browse these forums. You trying to tell me how CafePress works is a joke, I happened
to have been part of the team that worked on the first few revisions of that
site and again you really didn’t even understand what I was getting at in that
last post. LINK TO LOGIN PAGE not link to every protected page on the site.
If you think I am pissed off at you, your wrong. I'm
just irritated with the whining about this and that and rather than
admit your over your head you come back with half baked remarks that
only make sense to you. If you think you can
google
a few terms and come back here talking smack like you’re actually
someone that
knows what you’re talking about your just making a fool of yourself.
You sound like a guy from China trying to tell me how to speak
English... My
advice
is get a few books and start learning or try actually reading up and
listening
to the other bazillion knowledgeable developers out there that do a
great job
posting articles about the subject. You might just learn something and
actually
get your project finished before 2010 and when you do please come back
and
re-read your posts with "enlightened eyes" so you can see what a goofball you are for saying half
of the
things you have said. I am not in the mood to keep helping you get your
project done step by step. I have huge projects of my own going on and
if I thought you could actually provide a descent project specification
I might offer to make the changes for you at a serious discount so you
could go away and everyone would be happy. Problem is I dont get the
feeling you could explain your way out of a paper bag let alone provide
a group of programmer the techinal specs for your project.
Your best bet is to post a link to the start of
this thread at www.AngryCoder.com I'm sure a few of people over there would be more than willing to give you a ton of usefull advice 
Google 4GuysFromRolla… a great resource site with example, just
dont come back here telling me those guys/ladies posted things
that dont work either.
Chris has written hundreds of articles on PowerASP, a great
place to start looking as well… www.powerasp.com
I've been spitting out code for longer than I can remeber and I still look
thing up on this site because its LOADED with great info. That happens
to be one of the very first ASP sites that went up on the net so lets
just say he knows a bit or two about the subject.
I'm sure your frusturated but
your pushing your luck
seriously. 38 posts about this subject in a week and your over there
hacking away on your virus infested WaReZ machine which isnt exactally
the ideal development rig. I mean we provide the code and your supposed
to provide at
the least a very basic knowlege of what your doing and a production
grade platform to test it out on. To me thats like buying a
car and then asking how to drive it... then bugging the dealer to teach
you and when you smash the thing complaining because no one told you
that your not supposed to drive into a wall. I have the same policy as
the dealer, show me something wrong with the car from the factory and
we will fix it for you NO QUESTIONS at all with our appoligies, but
really once you take it off the lot what you do with it is your deal
and its not our responsability in the least.
, I am not sure. I can tell you that I run windows 2003 server and I have never had any issues setting permissions for ASP.NET files and folders. This very server is 2003 and the ASPProtect.NET demo runs on this server as well.
Course, I can't say that I have specifically tried to remove ASP.NET READ permissions on the database folder as it's just not something I would not have a reason to do. Why are you trying to do that? The ASP.NET account needs that permission. If you are trying to stop file browsing and downloading in that folder that is not how you do that. The best way to do that is by keeping the database somewhere else on the server that is not part of the http web. , Did you do what that thread said so you see a more detailed error ?
Can I see the site and look around.. ?
I just am not sure what is going on from what you are explaining ?
If so private message me with the admin account details and tell me what to do to reproduce the error. , There are problems with your sql server database then. It was not set up correctly.
The 1st problem relates to having "used stored procedures" checked in the settings page.. but not actually giving those stored procedure execute permissions which they need to run. That is something that must be done on the SQL enterprise manager side of things either by you if you are allowed or your hosting company.
If you can not get the execute permissions set on the stored procedures for the sql database user you are using then turn off that option in the settings page and try things without it.
The 2nd error I am not sure of at this point so correct the 1st issue and we will go from there. It could be another sql database issue (not created correctly) or it could be an asp code issue of some sort though I doubt that or other people would have had problems on that page as well. I also just tested it out and looked the code over and I did not have any issues here. , Christopher
Thanks for a speedy reply. This is what I have used most recently...
ListingsConnectionString = "DSN=longreach;UID=lradmin;PWD=skipper;"
DatabaseType = "SQL"
but that throws an error of:
[Microsoft][ODBC Driver Manager] Data source name not found and no default driver specified
I have private messaged you my SQL server IP address. I am a fast learner with ASP (I think!) but some things really catch me out!
, Also, I notice you are using iframes to load the banners. That is probably your issue more than anything. That browser probably does not handle them well.
Possibly try other methods of displaying the banners and see what happens. The XML parser is usually one the best methods to try as it will output just your banner code straight into your html. , you actually dont touch any of those
UploadDirectory = CmdGetConfiguration("UploadDirectory")
They get set from the config table in the database which gets edited in the admin area.
so...
I am talking about the settings area in the admin area of the applicaton.
Every setting there is descibed in detail. You get there and change serttings there via the web browser and by logging in as the admin.
Log in to the online demo as admin and check out the settings area if you are confused.
http://www.aspphotogallery.com/demo_pro.asp
, Great suggestion, routing the banner click through an intermediate page before the destination. We use Deepmetrix LiveSTATS.xsp V7 and I should be able to configure a filter to capture the stats of the intermediate page.
Thanks for the help!
Lance
, yes, dont worry about that. It is not checkking permissions just explaining things.
and dont worry about the extra slash it seems to be adding at the end of the path. That is normal. I guess I need to fix that so it does not add that extra slash., also.. the log out page shouldnt really need this
but you can try adding this to it where all the other ones are set to nothing..
<% Session("Groups") = "" %>
cwilliams38341.7215046296, SQL Database Creation (NEW INSTALL)
If you are creating a new database do so using SQL enterprise manager.
Create a new database called whatever you like and keep all the default settings. If using an existing sql database skip that step.
Now open up SQL Query Analyzer
unzip the following sql script and open it in query analyser.
2005-02-20_132116_aspprotect_v7_sql_script.zip
VERY IMPORTANT
On the drop down box at the top right make sure your intended database is selected. Otherwise your changes may effect the wrong database in your SQL server.
Then load the script into the Query Analyzer. Click the green play button at the top. If everything goes well the response should read something like this.
******************************************************
(1 row(s) affected)
******************************************************
If so the tables have been created in your existing database.
Now make sure an existing or new SQL user has (public / datareader / datawriter) permissions for the new tables. You will be referencing this user in the asp code connection string so this user must be set up correctly. You may need your SQL server admins or hosting company to help you on this step as you may not have access to do this. You may not need to create a user and set permissions as the sql user you were logged in as to use query analyzer may by default get the correct permissions on anything you create.
Regardless, as you can see from this screenshot I made a SQL user called "aspprotectuser" and proceeded to set the permissions for that user. Under database access giving him (public,datareader, and datewriter permissions).

Now, in the ASP files provided with ASPProtect edit "dataconn_inc.asp" with a text editor and modify the connection string info. Be sure to change the info to match your server,username, and password.
Below is an example of valid connection string.
ConnectionString = "Provider=sqloledb;Data Source=poseidon;Initial Catalog=aspprotect;User Id=aspprotectuser;Password=temp;"
The "Data Source" setting is either the Network Name for the SQL Server or the IP Address. For local servers you can sometimes use an IP of "127.0.0.1" or the name of the local server.
"Initial Catalog" is the name of your database.
Now, in the ASP files provided with ASPProtect edit "dataconn_inc.asp" with a text editor and set the DatabaseType variable to SQL like so.
DatabaseType = "SQL"
cwilliams38403.6834953704, Just as an FYI, I found the problem. FP2003 has an "Optimize" feature that removes so called not needed spaces and comments from the pages. It also completely screws up .ASP code.
I turned off the optimization feature and all the pages I was having problems with worked. However, I would still recommend not using it too!
, this issue has been resolved.. see following thread
http://support.cjwsoft.com/code/moreinfo316-1.htm
, Hi,
Ok, well... you have a lot of stuff going on there.
More importantly than that.. you cant even log into the admin area using the admin account. There is something majorly wrong with the installation.
I also notice you havent even saved any path settings in the settings page of the admin area. I am looking that over now and filling in the missing info. That information needs to be populated.
, I receive an error that jscode is undefined. The banner will not display.
I dont understand why I would get an error? -- I'm not sending the email from internal - so why would it try to validate?
I'm trying to send an email to an independent place - just like I would send an email to you
Am I using the wrong email setting - should I be doing something other than using "remote server"
,