| Blog News Main Page NEWS FROM 2006-03-25
Blog Entry: 3/25/2006 4:53:46 PM
When did you download the ASPProtect Version 7 zip file ?
what did you enter as a wrong password to make that happen ?
does it it do it when other wrong passwords are entered ?
cwilliams38452.722037037, its that server, it's way underpowered when it comes to running dynamic code and databases.. and that other app is probably stealing all the leftover odbc resources..... did you try doing the import on another machine running ASP? Thats the way to go.. I am afraid I won't be much help at the moment.. I am battling with a crashed system and a lot of lost data,
ASPProtect protects ".asp" pages only.
That is your problem. , no, there is not not.
If you wanted to to that you would have to add some code to check their album count in the database and not allow them to make a new album if they were at the limit. cwilliams38433.0233680556, Now that I really think about it.. instead of logging that info to a text file and worrying about folder permissions you could probably just save the post info into an application variable during the paypal ipn.asp post like so
For Each Item In Request.Form formdata = formdata & vbCrLf & Item & "=" & Request.Form(Item) & vbCrLf Next
Application("PayPalPost") = formdata & " - " & NOW
then anytime you wanted to see if that info was there or when it happened you could make a simple asp page in your site to display the results like so
<% Response.Write "(" & Application("PayPalPost") & ")" %>
cwilliams38421.6747453704,
Both
the NET and Classic ASP versions of this application are designed for
fine granularity protection of individual apsx extension files.
ASPProtect.NET is not designed or intended to protect sub directories,
or non aspx content such as Adobe Acrobat .pdf files etc etc.
I
completely disagree with your statement that “most sites” have a login
box on the left hand side of the page. I suspect you thinking of the
ever popular php based forums and “Nuke” type CMS systems which are set
up that way but if you look at any site written entirely using .NET
that’s rarely if ever the case. (Granted I cant say for sure because I
personally haven’t looked at >50% of the estimated 18 billion + web
pages on the internet) Just off the top of my head www.CafePress.com
come to mind as a pure .NET site. If you take a look the login button
it takes you to its own login page there is not global login form used
throughout the site. Reason being that .NET introduced this thing
called a “view state” which is used to store things like your session
ID (and way more) and must be posted back to the server in order to
keep track of visitors. This technology comes in especially handy when
you have a web farm in place and your content is being spit out out by
more than one server at the same time
I
can think of loads of scenarios where the web servers need to know who
you are even though you are never directly contacting them via http.
This approach is a very smooth and actually very clever solution for
enterprise level websites that simply can’t be handled with a single
web server.
On
a practical level I know what you are saying but that application sets
up all sorts of things when a protected page is accessed and the user
is not yet authenticated. That’s the entire reason you need to put that
snippet of code at the top of a page you want to protect. That code
snippet calls the ASPProtect.NET class and runs through all the logic
to see if you are able to access the page. If you are the subroutine
exits and the server continues to process the remaining logic on the
page. AKA you are able to access its content. If you are NOT
authenticated ASPProtect will setup all the proper session and
viewstate info and redirect you to the login page for authentication.
You may have also noticed a parameter on the login page called
ReturnURL. The application looks for that info and if you do have a
user ID and password the application automatically redirects you to the
page you were trying to access in the first place.
Really
I have no idea what you are trying to do, but there is a world of
difference in how something looks verses how it works. Lets just say
there was a simple way to do what your thinking, what are you going to
do with that login form after the person logs in? Just keep displaying
it on the entire site so people get confused and don’t know if they are
logged in or not? Just that little part of the equation will require
making some changes to either ASPProtect.NET or your application will
have to have some logic built into it to stop displaying the login
forum.
It
sounds to me like your basically looking for a super simple 101 type
deal that allows people to sign up for an event and you the admin can
see that information? I’m guessing they can also log in again and check
out their details and see what event they signed up for?
If
that’s the case you’re trying to take a very sophisticated protection
application and downgrade it into something that would be one heck of a
lot easier to write all from scratch in about an hour.
Your
not going to be able to “plug and play” a simple form into a page and
turn that application as a magic universal login solution for a
website, while its 100% possible to use the application that way if you
choose, you need to check out the source code and plan your custom
integration accordingly.
, its no different than linking to an image or another page. you have to adjust the path to the include file based on what directory you are in.. or you get an error
This is noted in the admin area on the code generator page which also gives you 2 examples of ways of calling the server side include. (Virtual or File include)
These threads below are also full of info. I found them by doing a quick search and they should help you out as well.
http://support.cjwsoft.com/code/code_info.asp?TID=349&KW =The+include+file
http://support.cjwsoft.com/code/code_info.asp?TID=303&KW =The+include+file
http://support.cjwsoft.com/code/code_info.asp?TID=236&KW =The+include+file ,
grrrrrr
As far as the users thing... my fault that was setup wrong in the settings of the admin login page.
but still dont have a solution for what im trying to do , while technically that shouldnt be showing that with two slashes that is actually valid and will not effect whether that feature works or not.
so if you are getting an error that is not the reason.. as far as windows is concerned // is the same as slash in that scenario?
what is your error? I need details. Like some code and an error at a line number ?
99% of the time it is permissions and sometimes it is related to the filesystem object being disabled on the server or script blocking software such as norton antivirus , False alarm. Dumb user alert (both the classifieds customer and me).
When I test fixes, I need to be looking at the right Ad_ID to get correct results  , well, assuming that function works and is vbscript not vb (if it is vb code it may need some conversion work)
anyway
in "users/add_new_account.asp"
you would put the code for that function anywhere in the page.. it does not matter where as long as it is in code tags <% %>
then.. right under this part of the same page
If Zipcode_Postal_Code_Required = True Then If Zipcode_Postal_Code = "" Then ErrorMessage = ErrorMessage & Server.URLEncode("You need to enter a Zipcode_Postal_Code.\n\n") End IF End If
add this
If Check_Postcode(Zipcode_Postal_Code) <> True Then ErrorMessage = ErrorMessage & Server.URLEncode("You need to enter a Valid Zipcode_Postal_Code.\n\n") End If
No guarantees but that is the gist of it cwilliams38381.6456828704, Thanks for the info. We'll do as you suggest.
NPA , SQL Server Database Information Mod
This mod is only for customers running SQL server. It is a new stored procedure and a new version of the "server_info.asp" file that will display information about your SQL database on the Server Info page.
Purchase Page


This is for Advanced SQL Users only that understand how to add a Stored Procedure to a SQL Database as well as assign permissions and what not.
To install this mod you should have access to SQL Enterprise Manager and Query Analyzer as well as be able to grant your SQL database user EXEC permissions on the new stored procedure. , Thanks for that.
I have tried InStr("*2*",>"0") in the query design window but it does not return any members.
I have orded a Access Bible to help me in furture , Hello,
I really need more infomation..
for starters
what is the server ? iis4,5, or 6 ?
what is the version of aspbanner.. aspbanner standard or aspbanner unlimited ?
what was the error message before you removed the "on error resume next"
was the sql database created using the sql creation scripts we provide as that is VERY important.
and lastly what are the the regional settings of the server ? what is the date format ? , I have seen that happen before though it usually just happens once and then after that it doesn;t show up. It's the asphttp component doing it. The ASPBanner system is not doing it. I would try using banner calling method such as the xml parser method. It's usually installed by default on 200 and 2003 servers. cwilliams38248.6400115741, Its not a known issue.. I would try the original code before you made any changes and see if it still happens to you.
It seems to be working fine here for me in amy test web.
I am going to look into some more in the meantime.cwilliams38341.7166782407, O.K. , I register myself as a user. No problem, Iget an e-mail saying account active. No problem. I click the link in the e-mail. No problem. I click sign in and get this message. Big problem!!
Microsoft VBScript compilation error '800a0411'
Name redefined
/aspprotect/config_inc.asp, line 15 Dim Address_Required,CDONTS_Installed,City_Required,Registration _Type,VerifyURL,Log_Off_Page ----^ cwilliams38456.0969444444, Still not having much success. I am using SQL server. I changed the permission in the following directory :sql server data\mssql\data. Is that the database directory you are referring to?, It's just a generic error that means one of 1000 different things is wrong.. there is a lot of information on in in these forums as well as links to articles about it.
http://support.cjwsoft.com/forum/forum_posts.asp?TID=27& PN=1
usually it means permissions to the database folder are incorrect or the physical path you are specifying for your dsn-less connection is invalid..
everything has to be perfect
cwilliams38370.5271296296, Thanks for that. The upload size is just as effective and possibly a better solution to maintain server space.
What about individual gallery permissions. So only 1 member can post in only 1 gallery. I have a forum of 500 plus members so if they want to add a gallery than setting a permission would be idea for each gallery. , But can you guess as to why the following might be happening:
1) The password is still "temp", and we verified that by checking dataconn_inc.asp ; 2) People are able to place new ads, etc. ; 3) We then download the DB. Sometimes we are able to open up the DB just downloaded with the password "temp", but only see the USERS table. At other times, we cannot open the same DB with any password, and get a "password not valid" message even when using the password "temp".
So what can the problem be? , I am getting closer.
This error actually does not have anything to do with the forgotten password feature or your database.
It has to do with the settings you chose for emailing.
it relates to aspmail and it not liking the remotehost you used, or something like that.... etc etc , This server is sitting in my den on a DSL circuit, so I don't have a hosting company. The install for Windows 2000 server is with default settings for all components installed.
I am not sure what you are referring to when you say:
"Does emailing work under the simplest scenario ? (directly from the users screen"
What user screen?
What settings are you referring to that I may have chosen? , ok, that probably means the physical path you have set for the logfile directory (in the admin settings area) is not correc t
the error pretty much means just what it says
, Yeah, its working great witht he Access database. Now I just need to get it all set up. I like how the config file is set up with all the comments, it really helped allieviate the 40k thumbnails,  .
One quick question though, and I haven't looked through all the code yet... Is there a quick way to have pic_window.asp open full screen by default? I just want to minimize having to either scroll through, or maximize, the screen
Thanks!!!
- Jason , Is there a way to set various members to upload a limit of photos. So, one member can only upload 5 photos in 1 album and another can upload 30 photos in 2 albums. Even if you just set a permission for the number of uploads for each member.
Thank you , I agree -- don't use the code as is. I provided it only as an idea for a work-around if your ASPProtect users with Internet Explorer complain about the Page Expired message.
I did not test it to be sure the parms coming into the target page (which would be part of the URL when bookmarking) are properly preserved. It would be easy to make sure they are preserved, but I am not sure the code in the example does that. I also customized the code with my own page header and footer.
I have the Option Pack but the site does not need it yet so I haven't applied it. I don't expect many problems re-applying my few lines of modifications.
The IE behavior is not a big deal if you provide an explicit login page, since users would have less interest in paging back to that. In my case, I simply gave a link to a protected part of the site, and when they take that link, they instead get the login form if they aren't logged on. Once they log on, they get their desired content page, to which they sometimes want to page back later on.
From searching the Microsoft Knowledge Base and other sources, I could not find a way (using HTML) to turn off IE's behavior of refusing to quietly reload a page containing form data. Netscape does not do this. So my IE workaround is to ensure my target page does not contain the login form. It does not solve the cause of the problem, but in this case it gets rid of the Page Expired error message for my IE users.
I also purchased ASPProtect for another site, and I'm using that "out of the box" unmodified. I'm very pleased with ASPProtect's functionality and the fact that it works completely without the need to customize. However, I've found it is very easy to customize if I want to.
Jim
Puli Club of America , Makes sense to me. I used the ASPProtect_access2002.mdb supplied.
(I am using 2003). Only added more names and other personal info
to it for test. Uploaded the amended db with FTP. This did not
restrict someone not listed in db from logging in.
Would each individuals' information need to be added to the code in
order to have it check the database first to find out if the person is
authorized to view?
Part of the problem is I dont know which ASP page or script links the
db to the rest of the web, or how one page relates or links to the
other.
Sometimes I wonder if problems I encounter originate with the server.
Thanks for patience.
, Hi Chris,
I've got a page with a form that includes an input field with
'type="file"' for uploading an image. The page posts back to
itself to save the info to the database and run the code necessary to
upload and resize the image.
I need to limit this page to a group. So like usual, at the top of the page I put:
<% GROUPACCESS = "1" %>
<!--#INCLUDE FILE="../check_user_inc.asp"-->
This gives me the error: "Cannot call BinaryRead after using Request.Form collection"
I have used ASPUpload and SA-FileUP before and know that this is caused
by the components having their own .form collection. This script
is using "Pure ASP File Upload" from DMXZone for the upload which I'm
not familiar with.
So...my question is, do you know a way around the BinaryRead problem wtih ASPProtect?
Thanks,
Michelle
P.S. PLEASE don't send me to DMXZone for help....they've got notoriously bad support!
, Thanks dude, I'll figure it out. I've been ripping apart pieces
of the code to get it. I'm in the process of pulling some things
out to make functions that do specific tasks based on your code.
I actually had a lot of luck yesterday with it.
, We have upgraded to IIS 6, but as I recall aspbanner continued to
work fine for at least 3 months after the upgrade. I would like
to reinstall, but I cannot find the zip file.
Cookies are turned on in my browers, I've tried both Internet Explorer and FireFox, niether stay logged-in.
Jason S.
, Excellent.
Payment now taken in £.
Pasted <input type="hidden" name="currency_code" value="GDP"> into
paypal_signup/paypal2.asp
Thanks Folks.
, Is there a limit to how many access levels the program has? We were thinking of having a different access level for each client that logs on our site so we can customize their web experience. We see 6 in one place of the program, 8 in another, but is there any reason why we couldn't make 100 more?
Thanks again for the help! , When using the paypal subscription feature with ASPProtect for a new user the expiration in ASPProtect is actually not used. It is set to Null. This is because the PayPal system takes care of everything on their end.
So I can't see this happening because that field is not supposed to be used and the default PayPal subscription code we provide with the system does not populate that field.
Unless you populated the expiration date field on your own ?
Now that I re-read your post. The ASPProtect 6 reference was confusing me.
Now, if you have users that were never on a PayPal subscription that then sign up via PayPal subscriptiion that may indeed be a different story. Is that what you are saying? I am looking at the code right now and it seems to me like it sets the expration date field to null on any new subscription activity regardless.
Let's forget about ASPProtect 6 as I don't think that matters. Please explain exactly when this happens and does not happen and exactly what sort of user we are talking and what their expiration dates are set at before they sign up for a paypal subscription.
Please be as detailed as possible so I really know what is going on ?, Hi,
1. Two months ago, we have set up to use the Subscription services exclusively for all new members and renews. and removed the regular payment service, a carry-over from v6. 2. Many from the "pre-subscription" service have yet to expire, thus have a populated expiry field. 3. With a 10 month bridge before we get all the members onto the Subscription service the "Send email to users that are soon to expire." is used to remind these. 3. When members RENEW using the subscription service, the Expiry Field is not Nulled and they become targets for future reminders although they have renewed as Subscribers.
XYZ signed up on Nov. 05 2004, we send him a reminder in Oct 2005 and he renews as a SUBSCRIBER. His expiry date field is not nulled and he will keep getting notices although he has paid for another year.
Hope this is clearer... Thanks
, I dont know about the unspecified errors. I really need more detailed information. (Since it has been working fine for quite a long time you might want to consider installaing the application from scracth again and see if you still get errors)
As for the log in not persiting. Did you by chance turn off cookies in your browser ? They are required for forms based authentication to function. Otherwise, yes you would need to log in to each and every page as you moved around. cwilliams38414.6054166667, Just got back 10 minutes ago.. Missed plane yesterday because of traffic and the flight today was 3 hours plus 4 hours of driving
The fact that you are using Server 2003 is not relevant. I am very familiar with it and all my sites run on it.
The ASPNET account will be there by default once the .NET framework is installed. It won’t just show up in the list, you have to search for it like my article mentions.
http://www.powerasp.com/content/new/windows_2003_server_and_ permissions.asp
That error really means exactly what it says. You have to give that account permissions correctly. , no, and none of the ASP based systems I know of can do anything like that.
A zone can only produce 1 banner at a time.
What your are talking about I have mostly only seen done using very complex javascript code available freely on the web if you search. , Perfect exactly what I was looking for.
Thanks ,
Timecard Entry: 3/25/2006 4:53:46 PM
met with adam about bram site, humes proposal, misc call backs, email, production meeting, biilling meeting, Filled out Modem Maintenance Log., a cancellation around 6:15, but no calls before that. took out some trash, softmls brochure..., email, same as above, Travel to Watertown - Randy drove, trvl to watertown (w/ed), readied money for clayton; printed, reviewed and mailed invoices; answered phones; researched online office supply companies and pricing, Checking e-mail. Checking voice mail., Travel to Carthage, 16 miles, WOrked on revisions to the company brochure- tried to contact bethany, wan projects, gave billing options to a potential customer. signed up a customer and did a setup, E-Mail, Voice-Mail, Setup, enter deposit, take to bank, pull invoices, E-Mail, Voice-Mail, Etc., Lanzs Motel - - Modifications to ad in Vacation Guide, lunch, Fixed FP error in Frenchcreekmarina.com and changed a password for claytonbaptist.org, lunch, signed up a new customer. helped another with email, Backing up servers, resetting a couple of open modems., Problems with mail server , Called expiring users., added email and url section to physicians admin area at Samaritan Health web, steady morning, radlog, dial up issues, email, slow all night.
,
|