Is this safe to store important/critical information in session objects by security point of view, like userID, or any primary key which I dont want users to see.
The scenario is, I'm using XMLHTTP, and server.Execute to include files' outputs dynamically. so I can't share any code variable with them, session is the only way I can share variables with.
After reading several articles on securing web applications, hackers can not only perform SQL injection attacks easily but can get hold of the information in the global.asa.
This really worries me because the connection string is stored in this file and it contains critical information such as uid and pwd. Most people suggested that we should encrypt this information but the solutions that are provided are all in ASP .NET. Does anyone know how to do this or is there any better and easier way?
Dear all, anyone know how to include a window media player in asp so my
user can listen to sample music on my website?? Or anyone know where I
can find the code?
The problem is I don't have access to the server that my code will be uploaded to, and I don't know what's on it.
So if I use adovbs.inc do I have to put the file with my scripts ?
It's a 15 KB file, Is using it feasible?
When I try to save any ASP page, I get the message that "The page will not save correctly". Even though I go ahead and when I go offline the space of images is blank.
I have this website also where I am using ASP pages and my users are facing the same problem. HTML page is created but images are not saved.
What changes are required in ASP code so that images are also saved.
how i can place a media player on my asp page to allow user to listen to sample songs, etc? or anyone know where to find the code?
View Replies View Relatedi kept on recieving error message like asp 0194. can i hard code this one and stop the sending of mail to my inbox?
View Replies View Relatedi have created a simple asp page with sendimg mail using CDO and the message that will be sent must be HTML rich how to do that.
here is my code for the email section:
Set myMail=CreateObject("CDO.Message")
myMail.Subject =Request.Form.Item("lstSubject")
myMail.From = Request.Form.Item("txtEmail")
myMail.To = Request.Form.Item("txtEmail") &",emansalem@hotmail.com"
myMail.HTMLBody = Request.Form.Item("Comment")
myMail.Send 'commands CDO to send the message
I recieved an FTP address and found no files in html, but in asp. The source code of the site looks like normal html and I updated it locally but don't know how to save it to .asp and replace the file on the server. I can't open the .asp file. What do I need to do this?
View Replies View RelatedHow do I load and save a UTF-8 document in XML in ASP/VBS?
Well, the loading* is not the problem actually -- the file is in UTF-8,
and understood correctly -- but once saved, the UTF-8 is replaced by
what seems to be iso-8859-1 (which Flash doesn't understand, but that's
another problem).
i am encountering some problems in converting some data into CSV format..i have alreadi retrieve the data however i do not knoe of ani methods of converting to CSV...is there ani method to save the directory to .csv
View Replies View RelatedI'm currently doing some work with ASP and XML DOM.
Is there any way when saving XML to get ASP to save it in a formatted way? Similar to PHP's formatOutput setting? At the moment my xml is being appended on line e.g
<test>1</test><test>2</test>
Is there a setting to get ASP to save XML like:
<test>1</test>
<test>2</test>
The XML document I'm working on is fairly large and its proving very difficult to read through the xml at the moment.
I am using this :
---------------------------
<IMG SRC="calendar.gif" Align="center" Border="0" onMousedown="alert('Please! Do not download this image. Thanks!')">
-----------------------------
Now what this thing does is that it displays a dialog saying "Plz DO ..." ...
What should i do if i want that NOTHING should happen when a User right clicks on IMAGE ..absolutely nothing should happen ...
Is It POSSIBLE?
Another thing ... When the MOUSE moves over the image a FLOATING TOOLBOX kind of thing appears which has buttons likes SAVE,PRINT,EMAIL and things like that ... so what should i do so that NOTHING happens when the mouse moves over the IMAGE ...
i can't seem to think of a way around, this maybe more of a security question but htought i'd give this forum a shot first.
I have server A and server B
IIS on A but not on B
I have a webapplication that needs to save a file on server B. I can't set up a virtual directory with B since it doens't have iis i believe. If i were to do shortcuts or mapped drives those i think would use the credentials of the internet user i believe which won't have access to the directory, at least that's why i think it won't access them.
Can any one think of a clever workaround this? Can i just set the permissions to allow internet users to write to a folder on server B and it'll save that way?
I am using the following:
---------------------------
<IMG SRC="calendar.gif" Align="center" Border="0" onMousedown="alert('Please! Do not download this image. Thanks!')">
-----------------------------
Now what this thing does is that it displays a dialog saying "Plz DO ..." ...
What should i do if i want that NOTHING should happen when a User right clicks on IMAGE ..absolutely nothing should happen ...
Is It POSSIBLE ?????
Another thing ... When the MOUSE moves over the image a FLOATING TOOLBOX kind of thing appears which has buttons likes SAVE,PRINT,EMAIL and things like that ... so what should i do so that NOTHING happens when the mouse moves over the IMAGE ...
ive got a feature on my site where i need to save the time and date into a database i woud like it to be written like Friday 6th August 2004 13:34:02
View Replies View RelatedIs it possible to remove just the session.sessionID, I have other session variables that I would like to keep?I use this for saving cart information but it needs to be different each time.
I have an asp application that should allow the user to enter Unicode characters.
The characters appear correctly in the browser. When saved in sql 2000 thought they are converted to question marks
etc.
When I enter the characters directly in SQL (using enterprise manager),
they appear correctly in sql as well as in the browser when the asp
page retrieves them.
As soon as I hit save they get overwritten in sql incorrectly.
does anyone know if there is a way to save a webpage to file after the user presses a button?
View Replies View RelatedI am using IIS as a remote configuration tool to modify an XML config
file on the server. So I pull my XML config file through XSLT to give me
an HTML file with forms on. Something like this: Code:
Forme time to time, when attempting to save a webpage in IE6, I see the
error:
------------------------------------
Error saving web page
The web page cannot be saved to the selectged location
------------------------------------
It would not save on any other location.
What is the reason for this error?
Is this a code (server side or client side) to prevent a page from being
saved
I made a website for my work and we have it secure to where you have to login when you come to the site. But for some reason when you use the check box to SAVE PASSWORD it will not save the password.
So each time a client comes back to the site they have to put thier password in (and they arent happy about it) Just wondering if there is a setting I can turn off or turn on to enable the passwords to be saved.
I live in the UK and thus our standard date format is:
DAY/MONTH/YEAR
In my ASP page, when i try to save a date value to a date field in my MS ACCESS database, it will switch the day and month around if the day value is less than the month value. EXAMPLE:
Try to save the 1st of February 2004 as 01/02/2004. When this is saved in to the database, it is saved as 02/01/2004. This plays havoc with my search pages as they cannot find that date since half of it has been swapped around. Ive tried saving it as a string in to a text field and it still does the same.
i have been trying to save data collected from a form to a access db. The problem is that whenever the page refreshes the asp script to save the data is executing. how
can i make sure that the insert statement is executed only if the button is clicked.
ive got something on my site where if they visit a page that does not exist a asp page will come up where you can inform me about it if its a broken link ive got a code which i have took from a registration form in a login system but it still runs a query im quite new to asp and dont know how to remove it if ne1 can help the code is below! Code:
View Replies View RelatedI am building a site using ASP & MS Access. I will be migrating the database to Oracle 8i when it is built. I have some date fields on one of my pages which are optional, i.e. users don't have to put dates in them. However, when the date fields are left blank, the information does not get saved to the database, because the SQL statement is incorrect.
what value do I put in my SQL statement in order to save a date as 'Null'?
I have created an access DB with a few BLOBs in it to upload files to, all good and well this is working fine.
However found out I can not write the data directly to the BLOB as I have to upload the file first to the server and than read it with the ADODB.Stream object.
This is like a double action:
first I have to write the file to the server and only then I can read it to the DB...
Is there anyway to do this all at once, I.E. read a file from the client and as I am reading it to actually write it to the DB???
I have to allow users to download files after checking users validity and I
cannot give full URL of file to download e.g www.myserver.com/mydoc.doc
I have seen ASP code some where in MSDN where users has to enter URL like
www.myserver.com/mydoc.asp and this will download the doc file.
I have been playing with some things and with lots of help from Doug and Techniweb I have a script that parses data from a sports web page and returns the results of a table with all the html stripped out - or most of it anyway.
Now I have been working on saving the info to a file so that I can input it to my DB. As far as I can tell the script info is in an array called "myarray" and I have come up with the following code to try and save it:
if Not objFSO.FileExists("nbastats.txt") Then objFSO.CreateTextFile(Server.MapPath("nbastats.txt"))
Set objFile = objFSO.GetFile(Server.mapPath("nbastats.txt"))
Set objWrite = objFile.OpenAsTextStream( 2,-2 )
'Response.Write( myarray )
'Response.End()
objWrite.Write( myarray )
objWrite.Close()
Set objFile = Nothing
Set objWrite = Nothing
If I change obj.write and response.write to any of the other named process of the script i get results - obviously they are not completely parsed. When I try it as it is above - which should be the completley parsed data. I get this error:
Microsoft VBScript runtime error '800a000d'
Type mismatch: 'Write'
/scrapes/nbaleaders.txt, line 52
Line 52 is in bold.
i have an ASP Page that generates a PDF document. After the generation i save the generated document as a file. all works fine.the only strange thing is, that my document is stored twice on the filesystem.
View Replies View RelatedI need to publish and save the output of my .asp page as .htm
View Replies View RelatedI need to build code to download automatically image to my local disk.
somethink like
i will specify url in code and it fetches image from that location and save
in my local disk.
for example
http://www.xyz.com/images/test.jpg
and it will store test.jpg in my local folder.
how to achieve this?
I would like to know how I can save my current ASP page
to the server side in html file format.
Then I would like to stream it back to the client side.