I'm trying to limit access to certain portions of our intranet application from certain user levels. For example, an admin user would have full access to the site while a data entry users could only access small portions of the site. What is the best way to restrict pages? I have a UserLevel field in the database for each user and have already added this value into a session variable. What about pages that should allow Admins and Managers, but not data entry users? I am using a SQL Server 2000 database .....
I am running a contest in which people can vote for a villain, but I had to take it down to figure out a way so people are only allowed one vote (at least per day or something) Does anyone know a way that I can restrict access to the people voting to one per day? I know how to get the users IP address through ASP, maybe something to do with that? I am short on time for this
I have a .asp page which is protected by a username & a password. Only people having the required details can view that but I wanted to know is that possible somehow that even if the user has username & password he should not be able login from every machine but only through machine from where we authorise.
The IP address of that machine will not be static so i cannot make restictions through that.
I'm doing a web page with Admin rights to a MS Access database. So far when the admin logs in they are directed to the admin page. However if someone knows the name of the admin page they can still type it into the address bar and it will pop up with no restriction. Any ideas how to restrict this access to administrators only?
I'm creating a web application for my company now. This application has 2 parts. 1 part for the customers to access. The 2nd part is for our staff to access only. My director hopes to make the 2nd part to be something like an intranet, such that only our company's computers (maybe only 1 or 2 in the company) can login to this part of the application.
1. My company's intending to put the application on shared server with a web host. Windows Authentication is NOT allowed.
2. My company doesn't have a static IP address.
3. My manager suggested using Network Card number (which I don't really quite understand. Is there a way to get the Network Card number that's on a client PC?).
How??
Some ISP told us that they can provide a firewall management feature such that it will restrict access to the website from anyone that is not coming from my company's network. This requires Static IP.
Another told me that IIS Manager has the security feature that restrict access based on IP address. This requires Static IP again.
Is it possible to implement the 2nd part (the part that is to be accessed by my company's PC) as a windows application instead? Then we only put the windows application on one computer. So, 1st part (for the public) will be a web application, 2nd part (for my company) is a windows application, both accessing the same database server from an ISP. Will the ISP allow the windows application to access its database server? I've no experience in making a windows application at all, is it the same as making a web application?
I've created a search page that gets complete addresses based on postcodes, and name, suburb and address.Almost 6000 entries in the db.I want to limit the amount of times a user can search, i tried cookies but anyone can delete cookies and off they go again.The reason behind this is to prevent the opposition from collecting stuff and cold calling them.
I am developing a voting system. How to preventing a user votes continuously? Maybe cookie is useful here, but I don't know how to use it. Could you give me a example?
here is the code for the asp that basically handles the uploads, how could change it so that the uploading form will only allow .doc or .xls files? Code:
Is there any way to use asp to determine a users SQL Server database access rights. I.e I have given a users data read only/ data write only in SQL server, how can I pick that up in an application so that only write only users can see a hyper link. I know I could create a few more pages with a table in a database with various rights but I just want to read rights directly allocated from SQL Server.
Is there a way to keep an other application from opening a link in a browser where I am running an ASP application?
For example, I have an ASP application open in a browser. If I click on a link in an email message, Outlook "hijacks" the open browser and opens opens the link in it. Is there a way to prevent this? To somehow identifiy that browser window as "off limits" to another app?
I'm looking for a way to allow only one user to access my web form at a time. so that if there is a user using my web page / html form.. then the next user is directed to another page. So only one user is allowed access at any given time .I was hoping there is a way to do this with Application variables.
I want to create directory and set access permission to specific user.
i tried with wscript but it's not working, i used "cacls" command it's working only NTFS partition but i used to fat32 . how to set directory permission with asp script on fat32 so anyone help me?
my form contains two text fields(name, address) and two file field control where user can insert image(photo1 and photo2), i want to insert this data in to ms access when the user submits the form?
this is my code for insert text fields to access data base.but i have no idea about the code for image fields. In my access data base i set photo1 and photo2 as herf (binary data). Code:
I have written an ASP.NET 2.0 application that uses Active Directory or ADAM to manage account users - the site has a page that allows people to create an account (much like any site). The page populates the AD with all the information and the user account but I am unable to enable the account. Microsoft has information on how to do that here --> http://msdn.microsoft.com/library/d...ting_a_user.asp (the sample is for Visual Basic) - and I am unable to complete the bottom portion of the script. Can some one point me in the right direction - or can you tell me how I can add a snippet of VBscript code to an ASP.NET page.
I am using the Active DS Type library - not sure why there are multiple ones (System.DirectoryServices) but it is rather confusing - I seem to accomplish one thing with one and another with the other (they did have trouble co-existing however). Anyway my script works very well but I am not able to access the properties required to enable the account.
Here is a simple version (no error checking) of the code.....
how to go about setting up an asp script or flash action script to take the input from a user of his/her username and password then send an email to the user with the information. I am able to do all of this but the problem is that the users pc is the one sending the email. I want the server to send the email instead.
I have a Development server that is running Win2k, IIS 5.0, and ASP enabled. I am trying to gain access to an Access 2000 DB located on a file server within my domain. I'm pretty sure I have all the correct permissions set, but I am having problems when trying to access the DB.
The error is similar to:
The Microsoft Jet Database engine cannot open the file '******'. It is already opened exclusively by another user, or you need permission to view its data.
I'm looking for ways to fix this... Microsoft suggests turning off the ability for IIS to sync passwords. Unfortunately, this is not a viable solution for me.
Is it possible to create a new virtual server that is a share to my file server? Put my ASP and MDB file in there and have it work? Anyone have any other ideas?
I'm working on a site that inserts records into an Access database and Access assigns an auto-incrementing id for the record. How can I quickly figure out what id that was just created? I seem to remember there being a function for this....
I want to move my only window shosted client to linux. The site they have access a Microsoft Access database with the below code but i can't get it to work under Linux.
I'm trying to access a table in a MS Access database using ASP but the name of the table is causing me some trouble. The problem is the table name has a space in it eg, "My Table".
If i try and access it using a query "SELECT * FROM My News", it says i cant find table "My". If i remove the space from the name (to MyTable) it works fine. But the trouble is its a customers database and i cant easily rename it because its linked to other tables and db's.
How can i access a table with a space in its name? I've tried "SELECT * FROM My_News" but that doesnt work either.
I have an ASP page needs to access a remote MS Access2000 database, I got error "The Microsoft Jet database engine cannot open the file 'F:Collect.mdb'. It is already opened exclusively by another user, or you need permission to view its data. ".
The 'F:' is a mapped drive from remote machine where the access database loactes. If I copy the database back to local box, no problem.
I'm looking to make an online multiplayer game which will utilize Access Database... basically I require thousands of people writing and reading from the same database... I was wondering if this is possible for that... or is mdb file restricted to 1 person at a time...
If it is limited what would you suggest as the best way to control an interactive online environment? .txt files possibly?
What is this all about? Generally I run against SQL Server but now I have to use access. The query I want to run is a simple double join
SELECT tblArtists.*,tblGenres.name AS genreName,tblPages.pageId FROM (tblArtists INNER JOIN tblGenres ON tblArtists.genreId = tblGenres.genreId) LEFT JOIN tblPages ON tblArtists.artistId = tblPages.artistId ORDER BY surName ASC, firstName ASC
Now If I run this question in access against the database it accurateley returns two posts. BUT When I paste the same query into an asp document and runs it with a fileDSN against the same database it returns nothing!? Is this some kind of joke from Microsoft?
I have an Access DB which contains couple of link tables. All these tables are from different databases. So each one has it's own database password. Since there is no way to save the password during the DSN creation. Then you need to manually type in the password each first time when open the table.
This causes the problem in ASP code during run a query. Since the table cannot be accessed due to the password protection. Is there any statement than can open a table and meanwhile pass the password in? Does anyone experienced with the similar situation?
I'm having a real tough time getting a User's NT login after they submit a form.
I have Anon. Login disabled. I'm using Digest Authentication (although I've tried everything).
Every time I run the page, I get a blank string instead of the requested information.
The information is in a hidden field, with the value set to: <%=Request.ServerVariables("LOGON_USER")%>
The icing on the cake is that when I run this on my PWS, I can pull the information and it shows up in the SQL DB I'm sending it too. But, when put on our live box, it doesn't show up. The setting on each box are exactly the same.
I have a classic ASP program running on a server in the DMZ. I need to consume a web service so that I can consume data from that web service. However I am not able to call the web service from the DMZ since the server can not send messages out on the internet.
Thus, I need to send the call to another server running within the internal area of the company's internet. I need to send this message to an IIS server and then from the IIS server call the web service. I was thinking that I need to call the service on the IIS server with an ADO.NET connection. This ADO.NET connection object would be generated just long enough to call the web service, get a response from the web serice, and return the message to the server running in the DMZ.
Let me know if you think this would be a good solution and tell me how you would setup this interface. (Should C#.NET or Visual Basic.NET be used or some other lanaguge.)
Also after this solution works, I will need to implement this similar type of solution to call other web services.
does anyone know a way to show a users USER name instead of just there login name its for a school intranet currently we retrieve a lot of data based on the login name by using this script:
[code] <%=Request.ServerVariables("LOGON_USER")%>
it would be a lot more functional if i could pull the full name, we are using Active Directory 2003 and iis6, and all the logins have the full username inputted in the AD?
I'm developing an ASP form registeration system. The details of the form must be added to a text file not the tradional database. Each time a new user adds a record it should be added to the list at the bottom to the previos adder. Does anyone have a script sniplet of how i could do this. Remember details from the form i.e. name, firstname should be added to a text file...
I am new to .NET and I am trying to get the user name from a kerberos ticket and I have no idea how to do that. There seems to be some ability to do it using WSE 2.0 but I cant really see why there is not an easier way. how to do this?
