|
Watch it mister. I catch this type of stuff again and I'm going to have to throw you in CP forum jail[^].
Norm Almond: I seen some GUI's in my life but WTF is this mess
Leppie: I made an app for my sister and she wouldnt use it till it was colorful enough
Norm:good point leppie, from that statement I can only deduce that this GUI must be aimed at children
Leppie:My sister is 25
-Norm on the MailMagic GUI
|
|
|
|
|
David Stone wrote:
I'm going to have to throw you in CP forum jail[^].
No not there, anywhere but there! Please Mr. Police Officer, I didn't know the shotgun was loaded.
"There are no stupid question's, just stupid people."
|
|
|
|
|
Alright. I'll let you off with a warning this time.
Norm Almond: I seen some GUI's in my life but WTF is this mess
Leppie: I made an app for my sister and she wouldnt use it till it was colorful enough
Norm:good point leppie, from that statement I can only deduce that this GUI must be aimed at children
Leppie:My sister is 25
-Norm on the MailMagic GUI
|
|
|
|
|
I hope the following makes sense.
I am submitting some data to a page using SSL however I would like all
subsequent transactions to be http rather than https
eg even though I submitted my form under https I would like the returned
page to be http://.../xzy.aspx in the browser address bar - is this
possible? I know I could use Response.Redirect however I lose any settings I
have applied to objects on the form i.e. error messages
Thanks for any help
Stupidity dies.
The end of future offspring.
Evolution wins.
- A Darwin Awards Haiku
|
|
|
|
|
Shaun Wilde wrote:
I know I could use Response.Redirect however I lose any settings I
have applied to objects on the form i.e. error messages
How about using cookies...?
"An expert is someone who has made all the mistakes in his or her field" - Niels Bohr
|
|
|
|
|
Shaun Wilde wrote:
I know I could use Response.Redirect however I lose any settings I have applied to objects on the form i.e. error messages
Possibly Server.Transfer?
Paul
Why don't you take a good look at yourself and describe what you see - Led Zeppelin, Misty Mountain Hop
|
|
|
|
|
Hey people
I'm a newbie in web page making, and i got cool font, but i find that the font will not display when someone that does not have the font, how do i set it so that the font will be downloaded automatically when someone visits my web site?
Thanks
Answers often leads to more Questions
|
|
|
|
|
I'm not sure, but I think it goes something like this:
@font-face {
font-family: New Metal;
font-ssize: 9pt;
src: url(newmetal.ttf); }
HTH
"An expert is someone who has made all the mistakes in his or her field" - Niels Bohr
|
|
|
|
|
Don't forget that when you start doing stuff like this, you're instantly creating a Windows/IE only website, so make sure that it still looks ok without using your custom fonts.
Or if you just use the cool font for titles and stuff, then it's probably best to make them into gifs, then it'll work for everyone
--
Help me! I'm turning into a grapefruit!
|
|
|
|
|
I'm playing with a .NET Server RC1 and having some problems when trying to setup IIS 6.0. Ok, I have lots of experience in past versions of IIS so, I'm to ask this:
My IIS 6.0 is working fine, processing ASP pages normally, serving normally HTML, GIF and so on. But, when I try to GET a .vbs file it fails with a 404 code. I've double-checked (triple-checked, in fact) security settings and the file is there!
If I rename this file to any extension with a known MIME type like .txt, .zip it works fine. If I rename to .xxx, it gives me a 404 error again.
So, what I am doing wrong ?!
Q261186 - Computer Randomly Plays Classical Music
|
|
|
|
|
Daniel Turini wrote:
So, what I am doing wrong ?!
Well I don't have access to IIS 6.0 at the moment so I am just shooting blind here but why not try and add .vbs as a new text mime type?
In IIS 5 you just go web, properties, http headers, file types, New Type.
I am guessing IIS 6 has tightened up because IIS 5 lets a VBS file through without any new MIME mappings. Could screw some people when they upgrade no?
|
|
|
|
|
Paul Watson wrote:
In IIS 5 you just go web, properties, http headers, file types, New Type.
Thanks, It's what I did a few moments ago, but this seems more to a workaround to me. There are some new "features" in IIS 6.0, like disabled ASP by default and all of them have nice wizards or interfaces for doing this.
I figured that it there should be a cleaner way of enabling this. It seems that in IIS 6.0 you have to explicitly enable all extensions you want IIS shares.
Q261186 - Computer Randomly Plays Classical Music
|
|
|
|
|
if i remember, IIS6 comes locked down - kind of like running URLScan or IIS lockdown on an IIS5 site. In XP/2000 look under the winnt/system32/inetsvr or something like that for a urlscan directory. You can set the allowed extensions here. It overrides IIS and is like putting a condom over port 80. Never run a web server with out it!!!! It's the best, cheapest protection you can get. But hopefully, by the time IIS6 comes out, you wont be using VBscript.;)
|
|
|
|
|
James Saville wrote:
But hopefully, by the time IIS6 comes out, you wont be using VBscript
Didn't they say something similar about COBOL once?
Thanks for the lockdown stuff BTW, never heard of it but am sure to try it out now.
|
|
|
|
|
Paul Watson wrote:
Thanks for the lockdown stuff BTW, never heard of it but am sure to try it out now.
I think that is the same thing that says if your webserver is connected to a network port, it is not safe. DOPE!
"There are no stupid question's, just stupid people."
|
|
|
|
|
I am considering buying a editor control form a web project I am doing that will allow people to post text to a site and format it using HTML. I know how hazzardous this can be if someone places a nasty javascript tag or somethign in the message, that's why I am asking this here.
I want to allow the formatting tages (bold, ul, lists, tables, etc...) but strip out all the tags that can cause troubles (IE Javascript and vbscript).
Does anyone have a good listing of what I would have to strip out before I store the text?
Also, this has more to do with the actual storeage... Does anyone have a list of the characters that I have to watch out for that can give SQL a headache? I know about '"' already but are there any others that I will need to escape?
|
|
|
|
|
I tend to allow people to use tags like [b][/b] for bold rather than <b></b>. If they enter HTML-looking tags then it gets converted to use lt/gt tags.
The basic tags I allow are headers, bold, italic, underline. I also allow [link *url*], [mail *url*] and [font *face* *color* *size*] (I keep meaning to improve this last one so that you don't need to enter face and color to change the size but I haven't done it yet).
I also replace line feeds with "<br>", except after a header close and translate ampersand, less than, greater than, pound and quote.
Here's some C# code... it's far from perfect coding (serious lack of comments for one thing and I didn't know about Regex when I wrote this - in fact it was adopted quickly from an old VBScript where RegEx wasn't an option) but it works and you can fiddle it to your needs.
private string Format2Html(string Formatted)
{
string[] hdrTags = {"h1", "h2", "h3", "h4", "h5"};
string[] nmlTags = { "b", "i", "u", "center" };
string[][] splTags = { new string[] { "link", "a", "href=\"%\"" },
new string[] { "mail", "a", "href=\"mailto:%\"" },
new string[] { "font", "font", "face=\"%\"", "color=\"%\"", "size=\"%\"" } };
string rtn = Formatted.Replace("&", "&").
Replace("<", "<").
Replace(">", ">").
Replace("£", "£").
Replace("\"", """).
Replace(Environment.NewLine, "<br>" + Environment.NewLine);
int next = 0, start = 0;
for (start=rtn.IndexOf('['); start > -1; start=rtn.IndexOf('[', start + 1))
{
string replacement = "";
next = rtn.IndexOf('[', start + 1);
int end = rtn.IndexOf(']', start + 1);
if (end == -1) end = rtn.Length - 1;
if (end > next && next > -1) end = next;
int length = (end - start) + 1;
string tag = rtn.Substring(start, length).TrimEnd(']').TrimStart('[').Trim(' ');
string[] tkn = tag.Split(' ', ',');
for (int i = 0; i < hdrTags.Length; i++)
{
if (hdrTags[i] == tkn[0])
{
replacement = "<" + hdrTags[i] + ">";
}
else if (hdrTags[i] == tkn[0].TrimStart('/'))
{
replacement = "</" + hdrTags[i] + ">";
if (rtn.Substring(end + 1, 4) == "<br>") end += 4;
}
}
for (int i = 0; i < nmlTags.Length; i++)
{
if (nmlTags[i] == tkn[0])
{
replacement = "<" + nmlTags[i] + ">";
}
else if (nmlTags[i] == tkn[0].TrimStart('/'))
{
replacement = "</" + nmlTags[i] + ">";
}
}
for (int i = 0; i < splTags.Length; i++)
{
if (splTags[i][0] == tkn[0])
{
replacement = "<" + splTags[i][1];
for (int j = 1, k = 2; (j < tkn.Length) && (k < splTags[i].Length); j++, k++)
{
while (tkn[j].Length == 0) j++;
replacement += " " + splTags[i][k].Replace("%", tkn[j]);
}
replacement += ">";
}
else if (splTags[i][0] == tkn[0].TrimStart('/'))
{
replacement = "</" + splTags[i][1] + ">";
}
}
if (replacement.Length > 0)
rtn = rtn.Remove(start, (end - start) + 1).Insert(start, replacement);
}
return rtn;
} HTH
Paul
Why don't you take a good look at yourself and describe what you see - Led Zeppelin, Misty Mountain Hop
|
|
|
|
|
C# code to remove HTML tags:
System.Text.RegularExpressions.Regex r = new System.Text.RegularExpressions.Regex(@"<[^>]*>|</[^>]*>");
r.Replace(s, "");
|
|
|
|
|
Daniel Turini wrote:
"<[^>]*>|]*>"
God don't those RegEx patterns make your eyes bleed? RegEx pattern builders are a must IMO.
Thanks for the pattern BTW, quite a useful one.
|
|
|
|
|
UGH! But all I want to do is remove things like ... as well as any of the inline code that can be inserted.
I assume that I could just so a regex.replace on all the ... stuff, but then I have to deal with all the inline code as well...
The other problem I see is what heppens if someone wants to post code (in a
... block.. that I would want to leave...
UGH!
|
|
|
|
|
Regular expressions is the way to go. You need to escape all script , object , applet , embed and param tags, and remove any event handlers on other tags.
using System.Text.RegularExpressions;
...
static bool IsLikeRe(string src, string pattern)
{
return Regex.IsMatch(src, pattern,
RegexOptions.IgnoreCase | RegexOptions.Singleline);
}
static string ReReplace(string src, string pattern, string replace)
{
return Regex.Replace(src, pattern, replace,
RegexOptions.IgnoreCase | RegexOptions.Singleline);
}
static string ReReplaceAll(string src, string pattern, string replace)
{
string ret = src;
while (IsLikeRe(ret, pattern))
ret = ReReplace(ret, pattern, replace);
return ret;
}
static string StripScript(string html)
{
string res = ReReplaceAll(html, "<script(.*)>", "<script$1>");
res = ReReplaceAll(res, "</script(.*?)>", "</script$1>");
res = ReReplaceAll(res, "<(object|applet|embed|param)([^>]*)>",
"<$1$2>");
res = ReReplaceAll(res, "</(object|applet|embed|param)([^>]*)>",
"<$1$2>");
res = ReReplaceAll(res,
@"<([^>]+?)\son(?:[^>]+?)=(['""])(?:[^>]+?)\2([^>]*?)>",
"<$1$3>");
return res;
}
|
|
|
|
|
In an asp file,
First the following in the html head section:
<% if request.querystring("action") = "postupload" and bError = False then %>
<META HTTP-EQUIV="refresh" content="1;URL=<%=sValidatedBaseURL%>/thread-view.asp?threadid=<%=iThreadID%>">
<% end if %>
second in the body section:
<% if not ( request.querystring("action") = "postupload" and bError = False ) then %>
<div align="center"><a href="<%=sValidatedBaseURL%>/thread-view.asp?threadid=<%=iThreadID%>"><img src="<%=sValidatedBaseURL%>/images/back-button.gif" border="0"></a></div>
the whole body part:
<body style="margin ">
<!-- #include file="includes/header.asp"-->
<% if vForumInfo(FI_showquotes) = 1 then%><hr width="90%" size=1><div align="center" class="smalltext"><%=sBBSRandomQuoteText%> <%=GetRandomQuote%></div><% else %><BR><% end if %>
<hr width="90%" size=1>
<div align="center" class="error"><%=sError%></div><BR><BR>
<% if not ( request.querystring("action") = "postupload" and bError = False ) then %>
<div align="center"><a href="<%=sValidatedBaseURL%>/thread-view.asp?threadid=<%=iThreadID%>"><img src="<%=sValidatedBaseURL%>/images/back-button.gif" border="0"></a></div><BR>
<form ENCTYPE="multipart/form-data" method="post" action="attach-file.asp?threadid=<%=iThreadID%>&action=postupload">
<table align="center" width="50%">
<tr><td colspan="2" class="messagecellheader">Attach a file</td></tr>
<tr><td colspan="2" class="messagecellbody2">Thread: "<%=ValidateField(sThreadSubject)%>"</td></tr>
<tr><td class="messagecellbody">File:</td>
<td class="messagecellbody"><input type="file" name="attachment" size="40"></td></tr>
<tr><td class="messagecellbody2">Instructions:</td>
<td class="messagecellbody2">Attachments must be less than <%=vForumInfo(FI_MaxAttachSize)%>KB<BR><BR>If this thread already has an attachment,<BR>uploading a new attachment will overwrite the old one.<BR><BR>If you leave the file blank, the attachment will be deleted.</td></tr>
<tr><td class="messagecellbody"> </td>
<td class="messagecellbody"><input type="image" src="<%=sValidatedBaseURL%>/images/submit-button.gif"></td></tr>
</table>
</form>
<% end if %>
<!-- #include file="includes/footer.asp"-->
</body>
please I want help,maybe the questions are very simple,so take some trouble to answer me.
<small><b>this is my signature for forums quoted from shog*9:</b>
<b><u>I can't help but feel, somewhere deep within that withered, bitter, scheming person, there is a small child, frightened, looking a way out.</u></b></small>
|
|
|
|
|
I want to set up my home page in such a way that, it should go to the localhost or to the website, depending on the net connection availability.
Any idea?? I use dial up serviece.....
Tahnks in advance,
SPS
|
|
|
|
|
howdy all,
busy designing a new web application that would be perfectly suited to a webclass application.
ie. one template page that defines the layout and within that layout tokens to define where runtime generated content should be placed.
my question is this ...
how should we be doing this kind of thing in asp.net ?
should we build server controls and drop these onto the aspx pages ?
should we build one page that serves as a template and the other pages inherit from this ?
should we still use something similar to token substitution ?
please help, any ideas ... suggestions ... guidance would be hugely appreciated
cheers
Ryan
|
|
|
|
|
Page Templates in ASP.NET[^]
ASP.NET is far more powerful in this manner than vb6 webclasses
You can also use user/custom/server controls for this, but in reality you will find yourself using both technologies.
|
|
|
|
|