Security :: Prevent Users From Submitting HTML Pages From Their Local Machine
I am trying to prevent users from submitting HTML pages from their local machine to our website and I was wondering what the best way of doing this was.
I was thinking about using the HTTP_REFERER server variable (to check where the user has submitted a page from) as a blanket fix however when you use the javascript document.location on a page the HTTP_REFERER is always blank, which makes that a flawed fix.
I have seen other sites protect against this, so I know it can be done. Whats the best way.
I am trying to send information that I collect using an ASP form to a fax number that I specify somewhere. Can someone please tell me whether I can do that using ASP code and if so, how can I do it and what kind of applications I need to have if any.
I would like to evaluate some shopping cart software to use on my next project. I am new to asp and as yet my hosting does not support it. Before I go ahead and upgrade my hosting I wanted to see how the various packages work.
I am running XP Pro SP2 and have installed IIS. The folders seem to be where they should be and I have access to the settings through the Administrative Tools.
When I put a htm file in the wwwroot folder it loads fine if I type http://localhost but the asp files are either downloaded or opened in dreamweaver.
Do I need to do something special to enable asp files to open on my local machine??
I'm not a networking/IT guy, but I was put in charge of figuring out how to use ASP to tap into an Oracle db for my office. I am using a windows 2000 laptop, and I want to be able to run ASP code on my local desktop (without being plugged into a network).
I need a lot of help here. I know I have to turn my computer into a webserver, but I'm not certain what I need to do with the IIS. What do I need to do in general to make my computer a webserver? In addition, I will be using a local Oracle database. So I wasn't sure what I would need to do to make that db available for querying with ASP. What is the best way to make that connection?
have an SQL DB which clients access via asp pages through the internet, in the case of a power outage I need to write that data automatically in the background to a txt file on their local machine, I would imagine it would involve a script of some kind.
I copied one of our websites to a CD and wanted to run the website off of the CD. However, it won't run the index.asp on Windows XP machine. Do I need to install some dll's or something?
when i export a dbf file from Local machine to Access in Webserver i get a message :
Microsoft JET Database Engine error '80004005'
'C:WINDOWSDesktop' is not a valid path. Make sure that the path name is spelled correctly and that you are connected to the server on which the file resides.
I'm using WinXP Professional SP2, I've installed IIS, but am having a problem viewing the temp version of the ASP file IE makes when you go to view an ASP page.
So, I hit F12 to bring up IE and my ASP page, IE generates a URL something like, http://localhost/MyWeb/ACEI/TMP91g0dk4dw.asp ... but that always comes back as a "File Not Found" error, however if then I replace the TMP91g0dk4dw.asp part with the actual file name e.g demo1.asp..the page runs fine.
I have written an asp page that is supposed to send email (using CDONTS). I think my code is correct, but I'm trying to test it from my local machine and although the ASP code runs I am not sure the email portion of the code works.
I have not yet received any messages from the code. Perhaps there is a delay of some sort - or perhaps it is because I am on a network behind a firewall. Whatever the case, could someone offer some suggestions in testing the emailing portion of my code? Code:
im trying to create a intranet site which copies files to the server. im guessing i should use filesystemobject to achieve this but im not sure on how to accompish this.
I have a cdo script to send an email from a web page hosted externally to my company. I want users to be able to attach multiple documents from their local machines.
How do I do this - do I need to upload them to the server first or does cdo do this automatically?
I tryed this: MyMail.AddAttachment "F:/images/test.gif" but get the error: 'The system cannot find the path specified.'
Quick question - I would like to practice my ASP scripting and wish to be able to test my applications on my web browser on my local machine.
What piece or pieces of software would I need to enable this? I have Macromedia Studio MX and Edit Plus which I assume will act as suitable editors for ASP scripts?
Is it only some kind of Personal Web Server software that I will need to run my scripts on my local machine?
i just wondering how to send email from my local machine. i mean the sending email by CDONTS is working good on the web server but not on my local machine. is it an IIS configration issue or some software i must install ?
I need to get list of users on a machine (can be from exchange or a domain controller). I'm not even sure where to begin. I need this so I can populate a dropdown list of all users of our network for a helpdesk system.
We have an ASP application which links to various word and excel documents stored in a folder called attachments. The documents are extermely confidential in nature and we would like restrict the access to them through the application only. How can we prevent users from guessing the name of the document and reach it.
I am looking at the ability for a user on my website to add/remove/edit windows user accounts, thus controlling access to my website. I have integrated windows authentication checked on the website and unchecked anon access in IIS, so I am always asked for a username and password.
I have seen some ADSI scripts that I can use in my ASP pages to manipulate local user accounts. However, when I try and use these they dont work as I need to have admin rights. Of course I don't wish to add the user to the admin group for security reasons.... Anyone have a code snippet to do this?
I am working on a document management system for a client. I am planning to set up the system so that documents are protected, sort of.. A user has an access level and based on that access level, a list of available documents will display as an HTML page and the user can click a hyperlink to download or view the selected document.
I am planning to handle this all through a SQL database and ASP..
What I would REALLY like to do, though, is protect a set of directories so that a user could not just enter a URL and download a document without being prompted for a username and password if he/she hasn't already logged in.
I have done something like this using AuthnetiX from Flicks Software, but this current client is trying to create a solution "on the cheap", and so I'd like to see if I can build the solution using the secuirty mechanisms built into the O/S.
What I'm thinking is that I'll set up the directories and assign a group access to each directory.. My question then is, can I add users to the "Local Users and Groups" for Windows 2000 via ASP?
I have a client that wants to be able to search both our html and asp pages at the same time.I need to know if this is possible and if so any solutions that I can use.I am working in asp,and access.
I am trying to get a poor mans mod-rewrite done on an IIS server which I do not have full access to.
What I have decided to do is literally copy the interpreted code from the asp page and create an html file with the name that I would like.
Other than manually doing this, is there an ASP or VB command to save the contents of a page after its been run on the client side, and save it as another file?
I'd like to process HTML documents in an ASP script, i.e. to remove any unwanted elements and extract desired element and attributes. I know how to do it on client side within IE using its HTML DOM. But what I'd like is to do it server-side. Is there a way, for instance, to reuse MSIE technology to retrieve interfaces like IHTMLElement, IHTMLDOMAttribute, aso, or just built-in features that would allow me to do the same?
I have a large database of reviews, and the asp processing slows down the server a lot when retrieveing the information. I want an asp application to generate an html page everytime a review is entered into the database so people view static pages.Anyone have a clue on how to do this, i've searched everywhere i cant find the solution.
I'm planning to design a comprehensive shopping cart in asp that will work on different pre-designed html templates. This means that for each html template, the various asp pages like categories (category.asp), products (products.asp), cart (cart.asp) and so on will have same appearance in terms of page background, top logo, company slogan, top links, copyright & privacy statements at bottom, etc. My question is --
Is it possible to divide the html code of a particular template in two parts, like header (header.asp or header.inc) and footer (footer.asp or footer.inc) so that for any asp page, I just include header first followed by asp scripts and then footer ?
If possible, how it is done ? I heard that it is possible in php pages with the help of 'Require' statement. Can anyone suggest any similar page on the web ?
I have a couple of static HTML pages live, as a sort of family blog. Now I just found out how ASP could work, experimenting with WikiAsp. What I would like to know is whether it is possible to include some DHTML in my static pages for gathering comments on blog entries, which are saved to a database for example on 1asphost. Of course it would also be nice to read out the database again to see the comments to each blog entry in the static pages. Can this all be done using ASP?
What I would like to do is build a page that displays HTML pages from a sub directory in one long page like an FAQ page.I have code to build a table of contents, I just need to know how to extrac the document tietle from the Meta tag and how to compile the content beloe the table of contents.Could someone point me to an asp routine that compiles FAQ's?
I am running an ASP script which I require to get the source html from some URL so I can pick out bits of this and include the data in my webpage. So it should have a function something like this:
Function GetHTMLSource(String URL)
which retuns the source for example as a string or an array of strings
I'm not sure how to tackle getting the html source. I've tried setting up an Internet Explorer object and also using the createDocumentFromUrl function which have worked in VB but I can't get to work in ASP
I want to be able to log in a database any transactions my users perform. For example logging in, requesting a page, downloading a resource, logging out etc.
What is the most practical way to code this? I was thinking of trying to use an include file which would have a function to add a log in the database for each page on the site or when a particular action is performed.
Using ASP I'd like to modify a string that contains HTML. I need to modify the content (the bit that the users see) but not the stuff in the tags. For example, if I had the following string Code:
