Security :: Prevent Users From Submitting HTML Pages From Their Local Machine
I am trying to prevent users from submitting HTML pages from their local machine to our website and I was wondering what the best way of doing this was.
I was thinking about using the HTTP_REFERER server variable (to check where the user has submitted a page from) as a blanket fix however when you use the javascript document.location on a page the HTTP_REFERER is always blank, which makes that a flawed fix.
I have seen other sites protect against this, so I know it can be done. Whats the best way.
View Replies
ADVERTISEMENT
I am trying to send information that I collect using an ASP form to a fax
number that I specify somewhere. Can someone please tell me whether I can do
that using ASP code and if so, how can I do it and what kind of applications
I need to have if any.
View Replies
View Related
I would like to evaluate some shopping cart software to use on my next project. I am new to asp and as yet my hosting does not support it. Before I go ahead and upgrade my hosting I wanted to see how the various packages work.
I am running XP Pro SP2 and have installed IIS. The folders seem to be where they should be and I have access to the settings through the Administrative Tools.
When I put a htm file in the wwwroot folder it loads fine if I type http://localhost but the asp files are either downloaded or opened in dreamweaver.
Do I need to do something special to enable asp files to open on my local machine??
View Replies
View Related
I'm not a networking/IT guy, but I was put in charge of figuring out how to use ASP to tap into an Oracle db for my office. I am using a windows 2000 laptop, and I want to be able to run ASP code on my local desktop (without being plugged into a network).
I need a lot of help here. I know I have to turn my computer into a webserver, but I'm not certain what I need to do with the IIS. What do I need to do in general to make my computer a webserver? In addition, I will be using a local Oracle database. So I wasn't sure what I would need to do to make that db available for querying with ASP. What is the best way to make that connection?
Anyone who can point me to useful documentation.
View Replies
View Related
have an SQL DB which clients access via asp pages through the internet, in the case of a power outage I need to write that data automatically in the background to a txt file on their local machine, I would imagine it would involve a script of some kind.
View Replies
View Related
Am I now setup to view .asp on my local machine, or do I have to "upload" the pages to IIS? If the latter, how do I do this?
View Replies
View Related
I copied one of our websites to a CD and wanted to run the website off of the CD. However, it won't run the index.asp on Windows XP machine. Do I need to install some dll's or something?
View Replies
View Related
when i export a dbf file from Local machine to Access in Webserver i get a message :
Microsoft JET Database Engine error '80004005'
'C:WINDOWSDesktop' is not a valid path. Make sure that the path name is spelled correctly and that you are connected to the server on which the file resides.
what could be the reason.?
View Replies
View Related
I'm using WinXP Professional SP2, I've installed IIS, but am having a problem viewing the temp version of the ASP file IE makes when you go to view an ASP page.
So, I hit F12 to bring up IE and my ASP page, IE generates a URL something like, http://localhost/MyWeb/ACEI/TMP91g0dk4dw.asp ... but that always comes back as a "File Not Found" error, however if then I replace the TMP91g0dk4dw.asp part with the actual file name e.g demo1.asp..the page runs fine.
View Replies
View Related
I have written an asp page that is supposed to send email (using CDONTS). I think my code is correct, but I'm trying to test it from my local machine and although the ASP code runs I am not sure the email portion of the code works.
I have not yet received any messages from the code. Perhaps there is a delay of some sort - or perhaps it is because I am on a network behind a firewall. Whatever the case, could someone offer some suggestions in testing the emailing portion of my code? Code:
View Replies
View Related
im trying to create a intranet site which copies files to the server. im guessing i should use filesystemobject to achieve this but im not sure on how to accompish this.
View Replies
View Related
I have a cdo script to send an email from a web page hosted externally to my company. I want users to be able to attach multiple documents from their local machines.
How do I do this - do I need to upload them to the server first or does cdo do this automatically?
I tryed this: MyMail.AddAttachment "F:/images/test.gif" but get the error: 'The system cannot find the path specified.'
View Replies
View Related
Quick question - I would like to practice my ASP scripting and wish to be able to test my applications on my web browser on my local machine.
What piece or pieces of software would I need to enable this? I have Macromedia Studio MX and Edit Plus which I assume will act as suitable editors for ASP scripts?
Is it only some kind of Personal Web Server software that I will need to run my scripts on my local machine?
View Replies
View Related
i just wondering how to send email from my local machine. i mean the sending email by CDONTS is working good on the web server but not on my local machine. is it an IIS configration issue or some software i must install ?
View Replies
View Related
I need to know how to write a text file to a local machine. Here is my code:
Set myFSO = Server.CreateObject("Scripting.FileSystemObject")
Set WriteText = MyDrive.CreateTextFile("C: est.txt", True, False)
Right now it writes the file to the C: drive on the server.
View Replies
View Related
I have one .asp page with form and <input file> field on it.I want to copy selected file from local machine on server.But it doesn't work.
Should I use some component?
View Replies
View Related
I need to get list of users on a machine (can be from exchange or a domain controller). I'm not even sure where to begin. I need this so I can populate a dropdown list of all users of our network for a helpdesk system.
View Replies
View Related
We have an ASP application which links to various word and excel documents stored in a folder called attachments. The documents are extermely confidential in nature and we would like restrict the access to them through the application only. How can we prevent users from guessing the name of the document and reach it.
View Replies
View Related
explain abt copy files from IIS image path to local client's machine.
View Replies
View Related
Is there a way in ASP to prevent users from accessing a web page when the back button is pressed in the browser.
View Replies
View Related
I am looking at the ability for a user on my website to add/remove/edit windows user accounts, thus controlling access to my website. I have integrated windows authentication checked on the website and unchecked anon access in IIS, so I am always asked for a username and password.
I have seen some ADSI scripts that I can use in my ASP pages to manipulate local user accounts. However, when I try and use these they dont work as I need to have admin rights. Of course I don't wish to add the user to the admin group for security reasons....
Anyone have a code snippet to do this?
View Replies
View Related
I am working on a document management system for a client. I am planning to
set up the system so that documents are protected, sort of.. A user has an
access level and based on that access level, a list of available documents
will display as an HTML page and the user can click a hyperlink to download
or view the selected document.
I am planning to handle this all through a SQL database and ASP..
What I would REALLY like to do, though, is protect a set of directories so
that a user could not just enter a URL and download a document without being
prompted for a username and password if he/she hasn't already logged in.
I have done something like this using AuthnetiX from Flicks Software, but
this current client is trying to create a solution "on the cheap", and so
I'd like to see if I can build the solution using the secuirty mechanisms
built into the O/S.
What I'm thinking is that I'll set up the directories and assign a group
access to each directory.. My question then is, can I add users to the
"Local Users and Groups" for Windows 2000 via ASP?
View Replies
View Related
How will we convert the system date & time to other timezone for eg: Eastern Time zone using ASP?
View Replies
View Related
I have a client that wants to be able to search both our html and asp pages at the same time.I need to know if this is possible and if so any solutions that I can use.I am working in asp,and access.
View Replies
View Related
I am trying to get a poor mans mod-rewrite done on an IIS server which I do not have full access to.
What I have decided to do is literally copy the interpreted code from the asp page and create an html file with the name that I would like.
Other than manually doing this, is there an ASP or VB command to save the contents of a page after its been run on the client side, and save it as another file?
View Replies
View Related
I'd like to process HTML documents in an ASP script, i.e. to remove any unwanted
elements and extract desired element and attributes. I know how to do it on
client side within IE using its HTML DOM. But what I'd like is to do it
server-side. Is there a way, for instance, to reuse MSIE technology to retrieve
interfaces like IHTMLElement, IHTMLDOMAttribute, aso, or just built-in features
that would allow me to do the same?
View Replies
View Related
I have a large database of reviews, and the asp processing slows down the server a lot when retrieveing the information. I want an asp application to generate an html page everytime a review is entered into the database so people view static pages.Anyone have a clue on how to do this, i've searched everywhere i cant find the solution.
View Replies
View Related
I'm planning to design a comprehensive shopping cart in asp that will work on different pre-designed html templates. This means that for each html template, the various asp pages like categories (category.asp), products (products.asp), cart (cart.asp) and so on will have same appearance in terms of page background, top logo, company slogan, top links, copyright & privacy statements at bottom, etc. My question is --
Is it possible to divide the html code of a particular template in two parts, like header (header.asp or header.inc) and footer (footer.asp or footer.inc) so that for any asp page, I just include header first followed by asp scripts and then footer ?
If possible, how it is done ? I heard that it is possible in php pages with the help of 'Require' statement. Can anyone suggest any similar page on the web ?
View Replies
View Related
I have a couple of static HTML pages live, as a sort of family blog. Now I just found out how ASP could work, experimenting with WikiAsp.
What I would like to know is whether it is possible to include some DHTML in my static pages for gathering comments on blog entries, which are saved to a database for example on 1asphost.
Of course it would also be nice to read out the database again to see the comments to each blog entry in the static pages. Can this all be done using ASP?
View Replies
View Related
What I would like to do is build a page that displays HTML pages from a sub directory in one long page like an FAQ page.I have code to build a table of contents, I just need to know how to extrac the document tietle from the Meta tag and how to compile the content beloe the table of contents.Could someone point me to an asp routine that compiles FAQ's?
View Replies
View Related
I am running an ASP script which I require to get the source html from
some URL so I can pick out bits of this and include the data in my
webpage. So it should have a function something like this:
Function GetHTMLSource(String URL)
which retuns the source for example as a string or an array of strings
I'm not sure how to tackle getting the html source. I've tried setting
up an Internet Explorer object and also using the
createDocumentFromUrl function which have worked in VB but I can't get
to work in ASP
View Replies
View Related
I want to be able to log in a database any transactions my users perform. For example logging in, requesting a page, downloading a resource, logging out etc.
What is the most practical way to code this? I was thinking of trying to use an include file which would have a function to add a log in the database for each page on the site or when a particular action is performed.
View Replies
View Related
Using ASP I'd like to modify a string that contains HTML. I need to modify the content (the bit that the users see) but not the stuff in the tags. For example, if I had the following string Code:
View Replies
View Related
