I'm using if for when the user deletes a record from the database. People using the website try and delete more than one record at a t time by placing commas between the IDnumber ie. 1,2,5,9 etc.
This creates an error. So instead of this error appearing, how can I get a small alert box telling hte user he/or she has entered the wrong data type?
The code for the form is :-
I just wanted to share it with you guys and ask your opinions. Code:
View Replies View RelatedIs there a script that change email adrdresses to prevent SPAM.
ex: ticul@myprovider.com
I want it to appear like this on my webpage ticul@xxxxxxx.com or something that look like this
In ASP classic pages,I want to know if it's possible to prevent
session variables from becoming zero length strings? I have tried
setting the Session.Timeout to a large value, but alwas, after 20
minutes, my session variable times out. I also tried setting the
session timeout in IIS manager to a high value, but this did no good
either.I just want to allow one particular session variable to last a long
time.
I have a permission tracking app that I am working on, and I have made the insert page for it. I am having issues on how to prevent duplicates from getting entered.
Currently the interface for the app has a mixture of select boxes, list boxes and checkboxes. The form submits the page to processAIMR.asp and then does the inserting. I am using a loop to insert a new record for each checkbox checked or listbox entry selected. Code:
Does anyone know how to prevent the browser from automatically adding the password to a form after a user name is entered? I need to be able to over ride the brower setting so turning off the option in IE is not really a solution.
View Replies View RelatedI have a form that sends info to a preview page, then to a thank you page. The thank you page gets the data passed from the rpeview page and sends an email.
How can I prevent the user from refreshing the page, so it doesn't send the email again.
I would like to prevent a user from logging in with their user/password combination on a different computer or even a different browser window, if they are already logged in. I have a login page, from which I use a DB check to verify user/password info. Also, I have a bit loggedIN field in the DB, which I use to see if they are currently logged in; if so, I prevent them from logging in a second time.
Unless they click the "Log Out" button, then the DB value does not get changed. Any suggestions as to how I can log them out, even if they simply close the browser window or jump to a different page?
For instance here's a simple select statement Code:
("SELECT a, b,c d, e, f FROM Table WHERE a = "&CInt(j)&" and c= 0")
j is a dimmed variable which is a and it's numeric. Is the above protected against any non numeric instances? Like j=2,345..i've tested this and it works i'm just trying to see if i've covered all my tracks.
How do people go about preventing the user from submitting a form for a 2nd time? For example, the user submits a form, clicks on the back button, and the submits the form again. I have used various techniques in the past (depending on circumstances) but I'd be interested in the techniques you guys currently use.
View Replies View RelatedIs there a way in ASP to prevent including the same file more than once?
Example:
dbutil.asp needs constants.asp, so I include constants.asp inside dbutil.asp.
transact.asp also needs constants.asp, so I include constants.asp inside transact.asp.
transact.asp doesn't need stuff in dbutil.asp, and dbutil.asp doesn't need stuff in transact.asp.
Then later I might have a main.asp that needs both dbutil.asp and transact.asp. So I include them both. However, the constants.asp will be found to be included twice!
What can I do to creatively prevent multiple inclusion of the same file in ASP? I know how to do it in C and C++, but I can't apply that to ASP, it seems.
I have created an Intranet in my office using ASP (of course). Within it is a booking system, allowing booking of conference rooms, digital camera and other equipment. It works perfectly...almost, as there is no way to prevent double bookings.
I really don't know where to begin with this one. All bookings go to an Access DB, into a single table. The bookings have a start time and an end time (24hr).
I would like it so that when the user submits the form, if there is a clash in times instead of saying, thanks for your booking, to redirect them back to the booking page saying there is already a booking for this time and that I am very sorry!
I guess I have to check some value in access and return the info back to the webpage before it chooses where to redirect the user.
I am developing a Simple ASP Website with a login page. I want to
know how can I change Session ID after login and also Close the current
Session after User closes the Window or gets logged out of the Website. So
that every time user logs in into the website, Session ID will be unique.
My client received an email from a user who mentioned that by accident they had been typing (over the querystring I guess), and the url had become:
default.asp?pageid='asd
They then received a SQL Server error message.
My client contacted their webhost, who came back to them promptly and talked of 'SQL Injection', they said that we would need to secure the code as well as the permissions on the database(which I believe they have done)..
This is something I had over looked, and started to write a fix for a couple of nights ago...but I dont think its 100%....
Basically I now do this at the top of my default.asp page ...
I've seen plenty of articles and utilities for preventing form injections for ASP.NET, but not too much for classic ASP. Are there any good input validation scripts that you use to avoid form injection attacks? I'm looking for good routines I can reuse on all of my form processing pages.
View Replies View RelatedWe have 2 domains for internal purposes: one for users (have to login
and domain has SSL) and another for sponsors (have to login and domain
does NOT have SSL).
Now when a user logs in and there are pages that have info from the
sponsors domain, users are asked to login again with a warning message
saying if they want to see secure and nonsecure information. How can
I bypass the second login? Is there something I can do in active
directory, IIS, or ASP to not have the second login appear?
How can I prevent this from happening? For example when the asp
application works in a public terminal where we don't want successive
users to know the login password and user name of the previous ones?
SSL cert on our site is for www.mydomain.com.
When you enter our site with just mydomain.com (without the www) and then proceed to a section of the site that is https, the user receives a cert warning since mydomain.com doesn't match up with www.mydomain.com.
What is the easiest way to globally and seamlessly redirect users from mydomain.com to www.mydomain.com to prevent this? The site has about 3000 pages so changing every page with request_querystring isn't really an option.
It would be great if it would work off of child pages too, i.e., mydomain.com/somepage.asp would also redirect to www.mydomain.com/somepage.asp.
I am trying to configure apache::asp on apache2 and when i try to serve an asp page I get an internal server error. I get this in the error logs
66.249.65.228 - - [10/Jan/2008:12:57:57 -0500] "GET /asp/includes/functions.asp HTTP/1.1" 500 603
66.249.65.228 - - [10/Jan/2008:12:58:38 -0500] "GET /asp/includes/feed.asp HTTP/1.1" 500 603
66.249.65.228 - - [10/Jan/2008:12:59:06 -0500] "GET /asp/includes/contactField.asp HTTP/1.1" 500 603
66.249.65.228 - - [10/Jan/2008:12:59:19 -0500] "GET /asp/includes/encryption.asp HTTP/1.1" 500 603
66.249.65.228 - - [10/Jan/2008:12:59:33 -0500] "GET /asp/includes/LogonEdit.asp HTTP/1.1" 500 603
66.249.65.228 - - [10/Jan/2008:12:59:47 -0500] "GET /asp/includes/header.asp HTTP/1.1" 500 603
We've been expriencing periodic database connection errors with ASP code
talking to an MS Access database. Every once in a while, the code can't
connect to the database.
Usually there are no log entries that might point
to difficulties, but early this morning the Application Log was filled with
the 2 errors below. Once we did an IISRESET, the problem cleared. Does IIS
need to be re-installed, or??
Since upgrading to Windows 2003 Server from Windows 2000
Enterprise Server we have had alot of ASP problems. The
problems are centered around asp pages which are one level
or more below the main folder within a web site. We have
many web sites which have used the database interface
wizard in FrontPage which puts these pages up to three
levels deep inside the folder hierarchy of the main site.
The pages will not work with IIS 6. I have had to re-
engineer many of these sites without the database
interface wizard. My solution at this point is to put all
ASP pages at the root level which seems to work but
negates all version of Frontpage management including
FrontPage 2003 Beta. This is a serious problem!
Especially for us who teach FrontPage and ASP!
first, in NS (version 3, don't ask), get a
Code:
HTTP Error 400
400 Bad Request
Due to malformed syntax, the request could not be understood
what's that?
second, how do you turn the pop-up error alert window in IE for Mac off so that we can see the error in the browser window?
just for the record, the app works in windows fine, seems to have troubles on the Mac side.
I have a classic ASP application that runs fine on IIS on win 2000 or IIS on XP. But recently a client installed it on Win 2003 and now consistently gets an Internet Explorer-side error:' syntax error line. char 1' when he browses to it with IE 6.0.
When client moved the whole app as-is to an XP machine and then browsed to
it, he had no problem. I suspect the error involves client-side javascript. Iam looking into it; in the meantime:Are there a known issues of this kind involving IE 6.0 and windows 2003?
I recently finished a project for someone and they are getting 500 errors. What's driving me nuts is the application works fine from my location. All I can think is it could be a firewall issue but I've messed with my firewall and I can't reproduce the error.
What's ever more annoying is they are getting this error from more than one location. I don't see anything that would cause this. This is an admin application that uses Session and adds/updates an access DB. Works fine here.
Before we upgraded our intranet server to Windows 2000, when I had an ASP error the page used to load up to the point where it was crashing out and then I would get an error message. This allowed me to response.write values to find out where the error was happening.
Since we upgraded, all I get now is a 'page cannot be displayed' with the error message on it. This means that I can't response.write values anymore and makes debugging a lot more difficult.
Is there a setting somewhere that controls how the message is displayed? Is this in IIS or is it a browser issue?
I'm afraid I have a technical problem here. Basically what happens is that I'm getting some random errors(like Type mismatch... etc) that shouldn't under normal circumstances occur. Then I connect to my server via remote desktop and Recycle the application pool on which my asp pages run. Errors then disappear
View Replies View RelatedAll across my site i am getting 0x80020009 errors every so often.
they point to lines of code like
where FolderNAMEIN is a string such as "Botswana" and the
VarFolderNameLength is 150
if len(FolderNAMEIN) > VarFolderNameLength then
and
RS("Company") where Company is a valid field in the database.
I've get a problem in browsing .aspx pages locally.
I'm using Windows 2000 Advanced Server with IIS enabled
and .NET framework SDK installed, as well as Visual
Studio.NET.
But when I browse .aspx pages locally, I.E. shows "Server
Application Unavailable" message. In the Event log, I find
error event of ASP.NET 1.0.3705.0 with the description :
aspnet_wp.exe could not be launched because the username
and/or password supplied in the processModel section of
the config file are invalid.
I have written a script on an include page which pretty much will write all the required ServerVariables and session variables into a string and email off to me incase a page happens to error out.
I have the code working as I want it to using the folllowing:
If Err.Number = <> 0 Then
'RUN INCLUDE
End If
My issue is, where do I include this on the pages? If I put it at the top will it only run if there is an error at the start of the page or will it be assigned no matter how far down the page the error exists.
Or do I need to put in On Error Resume Next at the top then put the include at the bottom?
example,
I have 3 drop down boxes n a page.
1st box contains all countries,
2nd box contains all locations in that country selected from the 1st box
3rd box contains all items at that particular location selected from the 2nd box
Despite trying the codes given, I am still not getting it right!
Error Type:
Microsoft OLE DB Provider for ODBC Drivers (0x80004005)
[Microsoft][ODBC Microsoft Access Driver]General error Unable to open registry key 'Temporary (volatile) Jet DSN for process 0xf14 Thread 0x4a4 DBC 0x10bbfcc Jet'.
/sanbookshop/searchtest.asp, line 22
I am trying to write a search script in my spare time at work. We have a knowledge base consisting of 200+ .mht files. My script was working ok when I was testing it on just a few files but I am getting out of memory errors trying to search through the whole KB. Here is the search code:
View Replies View Related3 workstations previously installed and able to access server.
4th workstation am able to map to server access files but when
attempting to log in receive the following error.
EXTERNAL DATABASE OPEN FAILURE
Error: -2147467259[Microsoft][ODBC SQL Server Driver][Shared Memory]SQL
Server does not exist.
The workstation that is unable to connect is running XP SP2, MDAC 2.7..
the difference btwn this and the others is that it is running wireless.
Ruled out wirelss as being the problem because hooked LAN cable and
receive the same error. Code: