I often use a querystring in my ASP pages.for example:
if val > 1 then
Response.redirect "val1.asp?val=1&user=UserID
End if
Is there a way to encrypt the querystring so anyone trying to mis use the web site will not know what the encryption stands for also when people view the page source they should not be able to see the QueryString value. How best can I handle this . Using hidden values still expose the value in the page source. Does HTMLEncode help any?
When using the QueryString of the request object the actual values are exposed to the viewer of the site and often user pickup on these values and start changing them . This can lead user to see data that they are not supposed to or even data that may be erroneous.
Is there an easy way to encrypt the querystring values that get displayed on the location bar / other than not using querystring. Can I use java script to disable the status bar, at the bottom of the page to not expose the URL's of various links on a page?
Can i know how to encrypt and decrypt the connection string which is include with database id and password within the global.asa?
View Replies View Relatedhow to encrypt my code? and do you know which site that i can learn the encrypt style?
View Replies View RelatedHere is the SQL Query string that gives me an error.
mySQL = "SELECT * From tblSuperQ Where (DCR Between '"&DCRF&"' And '"&DCRT&"') And Where (Inductance Between '"&indf&"' And '"&indt&"')"
Can you not combine Wheres together?..
If I use UNION ALL between the two where queries, it returns all the results between DCRF and DCRT, AND all the results between indf and indt. I want it to query only those that have values only in both where queries.
This is a pretty basic question which I've been unable to find an answer for from searching Google - I'm trying to query my msql database to return all news stories where the field "smonth" is equal to January, and "syear" is equal to 2004.
<%Response.write "<a href='news_detail_monthstest.asp?smonth=January&syear=2004'>"%>
and on my news detail page, the query is:
SQL_query = "SELECT * FROM tblpages WHERE smonth=" & Request.QueryString("smonth") & "& syear=" & Request.QueryString("syear") & ""
This returns the error:
Unknown column 'January' in 'where clause'
so it's seeing the value I want to pass and assuming it's the column name, instead of the column name "smonth". The fields in the d/b all exist and are named correctly.
I've obviously made a mistake in my select statement or my query string but I'm not sure what.
I have small problem with query string on Internet explorer 7 since I updated and I saw that problem with other browsers before. My code to search is :
<input name="client_id" type="text" class="style34" id="client_id2" style="background-color: #DCFCE1;padding: 3px;border-left: #A0A0A0 1px solid;border-bottom: #A0A0A0 1px solid;border-right: #A0A0A0 1px solid;" size="30">
</span><span class="style47">
<INPUT name="fillButton" type=image class=noneInput onClick="javascript:location.href('contacts.asp?cid='+clien t_id.value);" value=submit src="images/but_search.gif" align="bottom" width=22 height=21>
But I cant push the button it does not work, what's wrong with it ??
I'm getting a QueryString on a page. From this query string, I need to query a database, get a bunch of file names, attach them to an e-mail and fire it out (no problem). The problem is, I want it to happen when a user clicks a button.
I've been using .NET for so long (this isn't a problem at all in .NET obviously)...that I've forgotten how to handle this. Am I going to need a second page to post an array of the file names to and then handle it there? It just seems awfully redundant to need a second page to handle all of this, but I guess it wouldn't shock me.
I know how to use [field LIKE '%keyword%'] to pull up all records that contains the keyword, but what about not containing the keyword? I've tried NOT LIKE but i get
Arguments are of the wrong type, are out of acceptable range, or are in conflict with one another.
I have heard about a piece of software that can be installed on your server convert unfriendly search engine ASP query strings to friendly strings that search engines can read
EG Before
www.mysite.com/defualt.asp?productID=98283?etc...
EG After
www.mysite.com/product/ID/default.asp
It basically takes the question amarks and weird characters out and replaces them?
Does anyone know where i can get ths peiece of software or what has to be done on my server?
someone please help me :S
Chris
In asp how How can i pass a parameter value with a space in the value like this:
test.asp?catalog=aValue&lineitem=ladies cloths
I get a %20 as a space in the browser window,
I'm trying to encrypt query strings.
For Example...
I want this...
http://whatever.com/?clientID=5
to be something like this...
http://whatever.com/?[encrypted string]
I've seen the 4guysrfromrolla's version. Its fine "but" I don't know
if it would be practical in this case. I would need to encrypt many
urls on a single page and every link on a displayed page would be
pulled from a database. the "rolla" version I came across requires
that a text file be created and key written for each encoded string
everytime the page is called. This doesn't seem that practical to me
because I would be writing files and keys dozens of times everytime the
page is called.I've also seen aspEncrypt but they want 250 bucks and I was hoping to
avoid this. I also see that .Net has a method for this but I'm only
working with classic at this point.
I want to pass a querystring in two files using frameset. I'm using Frameset. I'm using this query string. MY question is this can we pass a single value to (2 different files,) using querystring? Code:
<%
response.Write("<a href=""grid1.asp?strID="&rs.Fields("alphabit")&""" target = ""grid1""grid2.asp?strID="&rs.fields("alphabit")&""" target = ""grid2"">"& a &"</a>")
%>
It only show the value of rs.fields("alphabit") in grid1.asp and nothing show in grid2.asp
Actually I'm using "FrameSet". I just want to pass this value in two frames(in two files).
In short i want to get the value of rs.fields("alphabit"). in 2 Frames.
I am working on a site to provide displaying and navigation of images from
several groups and have the following code that changes to displayed gif
based on the query string passed in:
Call: <a href="ShowImage.asp?group=01&image=01&max=28">Group 01, Image 04,
Max 28</a> Code:
i have designed a website that is using an asp shopping cart script and has a flash header which i have designed to display different content depending on the query string that gets passed to it in the page url. now my problem is that my script has a lot of pages and there are many ways of going from one page to another.
what i im wondering is if ther is away that i can make an asp page directly append a query string to the url when the server generates the page and sends it to the browser.
So basically if say i had a page called home.asp when i opened this page a some code in the page make the page serve as home.asp?page=home&content=logo which would make my flash script display content according to the query string it has received.
I have a search page with 7 different field options to search upon. The user
can use any or all options. On the results page I'd like to put at the top
of each column and ASC and DESC link to resort the results in the user's
choice.
How do I save that original query string to reuse in the sort links?
My results could spread across many pages, so I'm guessing that I would have
to query the database again for each sort.
I have encrypted query values to pass from page to page.I then decrypt them on the other side.On one such pass I use the value to select all the records that match.
encrypted value:
/results.asp?club=!#@(yT5$$
decrypted value:
club=Wildcats
The encryption/decryption works great but when I try to select on the decrypted club=Wildcats the select statement pulls the encrypted value club=!#@(yT5$$ and therefore returns empty query results.
fp_sQry="SELECT * FROM Results WHERE (Club = '::Club::') "
How can I pass the decrypted value through the select stmt?
I am using asp.net and have a page that does various Database calls based on the query string the I send in. I am also providing a link to the same page, but with one of the variables in the query string changed. The problem is that the page will not reload when I click it, it simply brings up a page with the exact same information.
View Replies View RelatedI always see people do something like that, and when the link is clicked, it
will open a new page.
<P><a href="profile.asp?id=493">Item 1<a>
<P><a href="profile.asp?id=495">Item 2<a>
<P><a href="profile.asp?id=497">Item 3<a>
I want to know if is implemented in this way:
In profile.asp
<% If Request.Form("id") = "493" %>
contents for item1
<% ElseIf Request.Form("id") = "495" %>
contents for item2
//etc...??
We put all contents in profile.asp, and open different one based on the
query string value for id?
I need to ask for all articles where article number is NOT "0" as in...
select * from posts WHERE ArticleNo" ??? "order by PostNo Desc", dcnDB, 1, 3
I don't imagine operators will work, how you guys doin it?
Would like to redirect the results of a form and pass the information in two fields ("x_amount") and ("x_description) on the form to that page.
Response.Redirect "../cgi-bin/test.asp?Request("x_amount")&Request("x_description") - this is not working.
Can anyone advice if the following is possible: -
...srch=my&srchlist=search+query&submit=search....etc
srch and srchlist are the names of a textfield, and list/menu
Is it possible to amend the URL, so that the URL QS reads
...srch=my+search+query&submit=search....etc
strSrch = Trim(Request.QueryString("srch")) &" "& Trim(Request.QueryString("srchlist"))
This is the snippet I use to achieve the above example, which is fine, when I use this snippet, and make the &""& without space between the quotes, then it returns: -
...srch=mysearch+query&submit=search....etc
I need to pass an integer as a query string when reloading a page - ie:
If Request.QueryString("record") <> "" Then recordNumb = CInt(Request.QueryString("record"))
...
...
recordNumb = recordNumb + 1
<A HREF="add_records.asp?record=recordNumb">next record</A>
I get
Quote:
Type mismatch: 'CInt'
any thoughts?
When you see sites using a file id system such as this:
www.website.com/?id=11515
how are they doing that?
I know its a query string but do they have each and every file include or what not written in or are these files entered into a database/SQL
and they have an ID assigned to them that calls certain files?
Is it possible to pass an -- & symbol --- in a query string.
ie: varialbe = Purple & Pink
page.asp?var=varialbe
-->> With this I get: Purple%20&%20Pink Passed through and the query string only picks up on the Purple.
I am looking for some method to capture, into a variable, the entire URL of an http request and redirect to SSL. For example, if a user opens a browser and typed in
http://myserver.com/application/som...=893bdgt0248991
I want to be able to redirect to an SSL connection
httpS://myserver.com/application/so...=893bdgt0248991
I want to do something which must be very simple. If I open default.asp, it creates my frameset and opens my home page. This is what I want to happen.
However, if I create an URL along the lines of
http://www.domain.com/default.asp?r..._page=page2.asp, then I want it to open
page2.asp, but still within the frameset.
Is this possible?
I have an image gallery in a database and I display one item at random with each refresh. I also have 2 buttons "next" and "previous" to show next or previous items in my recordset. Everything works well except for the fact that once the user has used either "next" or "previous" it leaves my query string in the url bar:
index.asp?action=previous
therefore, if I click "refresh" it continues to display either the next or previous entries instead of dislaying at random like it should.
How can I clear the query string from the url if the commend comes from the refresh button?
I have a problem in that I am trying to use the values from a select object that are referenced when i click a button that is designed to run an onclick.
This onclick runs a url and the rest of my code looks at the query_string and runs accordingly. I have attached the code below for what I am trying to do. Code:
I have four pull-down menus and a GO button. Each menu contribute a parameter to an URL query string (like asp?a=1&b=2&c=3&d=4) where variable a is return from menu1, b returns from menu2 etc.
I created the four menus using Dreamweaver's INSERT JUMP MENU function and I find it difficult to modify its auto-generated javascript code to suit my needs. Does anyone has the complete code to accomplish this?
i have designed a website that is using an asp shopping cart script and has a flash header which i have designed to display different content depending on the query string that gets passed to it in the page url. now my problem is that my script has a lot of pages and there are many ways of going from one page to another as well as link as dynamicall generated.
what i im wondering is if there is away that i can make an asp page directly append a query string to the url when the server generates the page and sends it to the browser.
So basically if say i had a page called home.asp when i opened this page some code in the page would make the page serve as home.asp?page=home&content=logo which would make my flash script display content according to the query string it has received. Code:
I am trying to alter a text string to create a valid boolean query for
an index server search.
At the moment because the text string is created using combo boxes it
can have 2 or more 'AND's in succession.
Like This (strInput):
"Company AND Credit AND AND London AND AND Richmond Short Term AND AND
Intercompany AND Investment Bank AND Covertible AND AND "
what I want to do is change the above string to (strOutput2):
"Company AND Credit AND London AND Richmond AND Short Term AND
Intercompany AND Investment Bank AND Covertible"
I am trying to do it with the code below:
However this code produces problems as I loop through the various
search items.
It works fine in VB but fails when I try to port it to ASP. Code:
I have this page with photo thumbnails that are clickable. Each photo has corresponding info saved on a database. When the thumbnail is click, im trying to show the data in an asp page called info.asp.
sample:
Photo #1 when clicked goes to: info.asp?no=1
Photo #2 when clicked goes to: info.asp?no=2
so on so forth..
the database fields are:
no
picname
date
details
I only know how to display ALL info from a database.
But i cant figure out how to display SPECIFIC info triggered by a query string. Example. Photo #1 is clicked. I only want the data that corresponds to Photo 1 to be displayed. How can i do this?