|
Found a way to get around this. I will just pass strMsg (in String format) to the stored procedure and have the stored procedure to do the conversion from String to UniqueIdentifier.
Still want to know if there's a way to get GUID from OnCommand/DataGrid mechanism.
norm
|
|
|
|
|
Is there anybody knows how to retrieve the source code from
a certain web page? I've tried the Microsoft Internet Transfer
Control, but it seems for use in transferring file only!
Many thanks in advance
Jackal
|
|
|
|
|
Just remembered that Mark Nischalke[^] had this in his article: http://www.codeproject.com/aspnet/weather.asp[^]
So courtesy of him here it is:
WebRequest req = WebRequest.Create(strURL);
StreamReader stream = new StreamReader(req.GetResponse().GetResponseStream());
System.Text.StringBuilder sb = new System.Text.StringBuilder();
string strLine;
while( (strLine = stream.ReadLine()) != null )
{
if(strLine.Length > 0 )
sb.Append(strLine);
}
stream.Close();
********************
* $TeVe McLeNiThAn
********************
|
|
|
|
|
what are u thinking? i never heard you can retrieve source. Do u mean view menu>Source on your MS Internet Explorer? That's not source really. Code (ASP or whatever) has been complied to HTML before sending it to your browser.
norm
|
|
|
|
|
Msxml2.XMLHTTP will do the work for you  Look in MSDN for its description
Philip Patrick
Web-site: www.stpworks.com
"Two beer or not two beer?" Shakesbeer
|
|
|
|
|
Thank you very much, I've got what I want, to share with you,
'Create the Microsoft Internet Transfer Control
set oItc = server.createobject("InetCtls.Inet")
'Set the Timeout
oItc.RequestTimeout = 20
'Set the target URL
oItc.URL = "http://www.microsoft.com"
'Open it
strSource = oItc.OpenURL()
'Print out the result
Response.Write(server.HTMLEncode(strSource))
then you'll see the result
Jackal Jiang
|
|
|
|
|
please tell me how to set a web server,
is IIS server only for intranet .
if so then which server is used for internet application development.
How to configure the server.
i am new to the web domain.
please tell me the architecture of web applications.
regards
Anshu
|
|
|
|
|
IIS is used for intranets and Internets, and can be configured for both simultaneously. Your question is far too complex to answer in a forum, though, and you really should read the documentation that comes with IIS. If you have Win2K as your server, it is not installed by default unless you are upgrading from an OS that already had a web server installed. You can add it from the CD using the Add/Remove Programs Control Panel function. When you install it, it will set up a default website for you with no content, but all the documentation will be included. Spend some time with the documentation, try your hand at playing with the settings, then come back with some more specific questions. We have some really talented web designers here who will be happy to assist you.
Nobody wants to read a diary by someone who has not seen the shadow of Bubba on the prison shower wall in front of them!
Paul Watson, on BLOGS and privacy - 1/16/2003
|
|
|
|
|
Hi, I need to include a resource and I have tried all options:
<EMBED src="/pics/AppliedAlgorithms_logo.bmp" width=250 height=75><br>
<EMBED src="./pics/AppliedAlgorithms_logo.bmp" width=250 height=75><br>
<EMBED src="../pics/AppliedAlgorithms_logo.bmp" width=250 height=75><br>
The directory structure of my website is:
/webroot/myaspnet_application (That's where I made the EMBED call)
/webroot/pics (That's where the picture is.)
I have the same problem with Server.Transfer.
Please advise.
norm
|
|
|
|
|
Why not to use IMG tag instead of EMBED? 
And what is the root of your site? If the root is the "webroot" directory then the first and the last paths should work well
Philip Patrick
Web-site: www.stpworks.com
"Two beer or not two beer?" Shakesbeer
|
|
|
|
|
yea, "webroot" is the root directory of the website.
"/webroot/myaspnet_app" is the asp.net location where I made the <embed /> call.
"/webroot/pics/" is where the pictures are.
norm
|
|
|
|
|
For the past two days I have been trying to get a script to work, but I am failing. I am positive it has to do with the paths because when I write a test script to save some text in a file in the local directory (cgi-bin) no problem. If I try to write somewhere else I get the damn internal server error. Maybe I am stupid but someone please help me out a little. And yes I have an existing text file with chmod 666 set. Here is my information:
domain name: www.movietrack.net
(also accessed as http://server925.gisol.com/~georgiek/)
instructions from the server:
Path to Perl - "/usr/bin/perl"'
Path to sendmail - "/usr/sbin/sendmail"
Path to date - "/bin/date"
Path to your home directory - "/home/username"
Path to your web directory - "/home/username/htdocs" (accounts created before February 2002)
Path to your web directory - "/home/username/public_html" (accounts created after February 2002)
and when running a test script that gets all the ENV variables for the path of the cgi script I get:
SCRIPT_FILENAME = /home/georgiek/public_html/cgi-bin/first.cgi
Now this works for me:
open(OUTF,">outdata.txt");
It writes to the file in the directory cgi-bin.
I have the same file in the directory: /public_html/outdata.txt
With the info given above can some rewrite the open statement for me so I can understand how to access files in other directories. Here is what I have tried and failed with:
open(OUTF,">/home/georgiek/public_html/outdata.txt");
open(OUTF,">/movietrack.net/georgiek/public_html/outdata.txt");
open(OUTF,">movietrack.net/home/georgiek/public_html/outdata.txt");
open(OUTF,">/home/georgiek/public_html/outdata.txt");
open(OUTF,">http://server925.gisol.com/~georgiek/public_html/outdata.txt");
open(OUTF,">http://server925.gisol.com/~georgiek/outdata.txt");
Someone please point it out to me!!!!! Thanks.
|
|
|
|
|
you could try "../public_html/outdata.txt"
[edit]
Also make sure your public_html folder is writable if you expect the script to be able to write there (and that the outdata.txt file is also writable)
[/edit]
Debugging cgi scripts on a remote server can be an utter pain in the arse. Here's a handy script that I use, which gives you a shell style prompt on the server:
http://www.rohitab.com/cgiscripts/cgitelnet.html[^]
Run that, CD into your cgi-bin folder (it'll probably default there, as that's where the script itself will be) and run your cgi from the prompt
i.e.
./myscript.cgi <enter>
This should actually give you sensible error messages from the perl interpreter, rather than a generic "script failed" message
--
Help me! I'm turning into a grapefruit!
|
|
|
|
|
Thanks so much for the link, that's probably one of the most useful programs someone has ever pointed me to. I got my cgi-script running at 5 AM Yes! I have a question: I wrote a test script which is supposed to open a file write to it and then close. When I use the cgi I get an error (500) yet the file is written to no problem. I checked with telnet and syntax was OK. The code:
<br />
$datapath = "/home/georgiek/public_html/Database/database.txt";<br />
<br />
open(OUTF, ">>$datapath");<br />
<br />
print OUTF "This is only a third test\n";<br />
<br />
close(OUTF);<br />
and I accessed it by: www..../cgi/...cgi
I assume I am getting the error because after it writes to the file then it has nowhere and nothing to show because when I enter some HTML to be written all is well. Am I correct in assuming this?
|
|
|
|
|
Hi
Any idea how to make appear my own icon on the
address toolbar of Internet Explorer ???
Thanks
|
|
|
|
|
You need to add a link element in your document's head:
<LINK REL="SHORTCUT ICON" HREF="http://www.mydomain.com/myicon.ico">
|
|
|
|
|
I have searched and searched and can't find specific answers to these questions on LDAP. If you respond to this thread, please be detailed, and thanks very much for your help!
I have a ActiveX LDAP component that I am using from within an ASP page to authenticate users (by doing a bind a search). I have a two part question:
a) is it necessary to have a component to perform this? Is there no VBScript or other way of authenticating and passing the results to an ASP page?
b) what is necessary to perform this securely. Other than pointing to port 636, I know that I have to have SSL cert installed on my IIS, but is that it? I have SSL and I point to 636 (assuming 636 is listening).
Any help is greatly appreciated, I just can't seem to find much on this PARTICULAR situation. I have no experience with PHP, but if there is a way to do it and pass the LDAP response to ASP, that's fine with me too!
|
|
|
|
|
I think the follow snippet is fairly self explanatory:
<SCRIPT language="VBScript">
Sub SetNum(num)
document.some_form.AddHiddenVariable("var5", "value="&num) QUESTION 1: I want to do something like this. If you dont suggest this, perhaps you can show me how to add hidden form variable and "submit" on server side script?
document.some_form.submit
End Sub
</SCRIPT>
<html>
...
<body>
<form name=some_form action=page2.asp method=post>
<input type=hidden name="var1" value="1">
</form>
<table>
Dim num
num=3
<tr OnMouseDown="SetNum(num)"> QUESTION 2: Is it okay if SetNum() client side and num is server side? But to "submit", SetNum() needs to be client side... dilema.
<td>....</td>
</tr>
</table>
</body>
</html>
Thanks a bunch!
norm
|
|
|
|
|
I have four variables. A,B,C,D.
I want to check as below (ie) I NEED TO SELECT RECORDS ONLY IF THE BELOW CONDITION SATISFIES.
A < 0 AND B < 0 OR A > 0 AND B > 0.
I have written a code like.
IFF A<0 AND B<0 OR C>0 AND D>0. (ie.) even if A is greater than 0 and B is less than zero, it should not select records. So I coded like this.
I would just like to know whether the above is right or the below one which my colleage is insisting about (ie).
IFF (A>0 AND B>0) OR (C<0 AND D<0).
Basically what is he insisting is that there should be a bracket, whereas I am telling it is not required since those are logical operators and logical operators rule whatever it is OR FUNCTION WILL PRECEDE THE AND FUNCTION, so
need not put brackets.
Which is correct? If both are correct, which one is recommended from a good coding standards perspective?
Deepak Kumar Vasudevan
http://deepak.portland.co.uk/
|
|
|
|
|
Deepak Kumar Vasudevan wrote:
A < 0 AND B < 0 OR A > 0 AND B > 0.
I have written a code like.
IFF A<0 AND B<0 OR C>0 AND D>0. (ie.) even if A is greater than 0 and B is less than zero, it should not select records. So I coded like this.
I would just like to know whether the above is right or the below one which my colleage is insisting about (ie).
IFF (A>0 AND B>0) OR (C<0 AND D<0).
I admit I'm slightly confused because your condition seems to keep changing, but if you're just asking whether to use brackets or not then YES, use them, always and everywhere. It doesn't matter if they're unnnecessary, it makes them easy to read.
If you say
Condition1 AND Condition2 OR Condition3 AND Condition4
then it's impossible for me to know whether you intend to say
(Condition1 AND Condition2) OR (Condition3 AND Condition4) [AND precedence]
or
Condition1 AND (Condition2 OR Condition3) AND Condition4 [OR precendence]
or
((Condition1 AND Condition2) OR Condition3) AND Condition4 [NO precedence]
If I remember correctly, different languages will react different ways, but I put unnecessary brackets everywhere so I don't need to know if a given language requires the brackets or not.
Remember, the compiler will not act in a negative way when encountering unnecessary brackets, so what harm can there be in clarifying your intention?
Paul
And you run and you run to catch up with the sun, but it's sinking
Racing around to come up behind you again
The sun is the same in a relative way, but you're older
Shorter of breath, one day closer to death - Pink Floyd, Time
|
|
|
|
|
Hi, I have this simple ASP app that maintain login status information "bLogin" by "posting" bLogin as hidden form variable. The site is not a ecommerce site, but it'd be nice to know there's some way to make this more secured. To attack the site, simply view the source code to find out what state variables are there, then post values (trial and error) to the ASP page and make your way in.
But this is rather simple - and this means that the ASP application is wide open to attacks. Any suggestion?
btw, I try to avoid Session variables as much as I can.
Thanks.
norm
|
|
|
|
|
norm wrote:
btw, I try to avoid Session variables as much as I can.
The way I'd prevent a brute force attack like that would be to verify the logon information (name, password, etc) and if not valid create a session variable holding the time the logon failed and the number of attempts, and then increment the latter on each failed attempt. When you've hit three failed logon attempts within, say, one minute, you'd block that session from logging in either till it expires or for a set period of time. (Make sure you feed the block information back to the user in case they have a legitimate reason for getting the information wrong). When the user logs in correctly, check if those two variables exist, and if so delete them. Then store the result of the log in in a session variable rather than put/getting it from the client every trip.
If you really don't want to touch the session object I suppose you could encrypt some of the logon information at the server and store it in the document as a key, (but keep one field, i.e. the name, plaintext so you have something to recalculate the key with), then in future trips fetch the information on the user however you currently are, encrypt the key and compare it with the one the client is sending you.
|
|
|
|
|
My problem is, this mechanism protects the site AT "login.asp". All scripts behind this gateway is protected only by bLoginStatus "posted" from one page after another.
hacker can trick the "subseqent" pages by "posting" "bLoginStatus=1" - making subsequent pages thinks that the person has cleared "login.asp" when in fact it isnt.
norm
|
|
|
|
|
I think that you are approaching your problem from the wrong angle. I can see what you are trying to do, but if you are relying on a single variable sent with the document like that which you are not able to encrypt somehow and that is used solely to determine of the client is authorised then there will always be that risk. That's probably why no one does it like it. 
Why are you so unwilling to use session variables?
What about the second example I gave, with the encrypted key?
In either case you can protect scripts other than login.asp by simply checking the user's status at the top of each page and returning them to the logon sript if they are not logged in or have timed out, etc. As a rule of thumb you should never rely on the client to provide state information like that because there are always ways it can be faked.
|
|
|
|
|
How can you tell if a checkbox is checked? I dont have an ASP book, and all tutorial on the internets tells you:
but NONE tells me how to retrieve the state of the checkbox. So, I tried this:
If document.unreg_form.bAreUSure.value="1" Then
MsgBox("Please confirm your intention to un-register.")
End If
But unfortunately, this condition is always met.
Thanks.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
