I have a webpage. However I only want people to access it if they are members of a certain group. When I say group I mean Active Directory group. The log into windows with their Active Directory username and PW, and lets say they are members of 'employee1' group in Active Directory. I'm pretty sure I use ASP, to restrict access to a webpage depending on the users group. how I would go about doing this?
View RepliesI have a site that currently is password protected, using a combination of ldap authentication and asp session management.
So for every asp page, I check the session to make sure they're authenticated, if not I send them to the login page.
BUT.... there is a robohelp componenet that is almost a website within this website. All these robohelp files are htm or html based, so I'm unable to put asp scripting (to check for session authentication).
So, my problem is, how do i protect these pages using my existing framework?
I have a locally hosted (via an executable) asp application. Does anyone know what would be the best (cheapest) way to add copy protection in it?
The application is an exe web server with the asp pages embedded in the executable.
No one can copy the asp pages, but they can copy the executable and distribute it that way. I don't want them to do that.
If there is some sort of wrapper or asp code I could add to it for licensing or registration, please let me know.
I have allways validated user input to pieces prior to integrating it into a SQL statement, in order to avoid SQL Injection attacs. A colleague of mine told me that binding my vars would make them SQL scalar, but I have been left in the dark as to HOW... The web left me none the wiser, as well, so here goes: Anyone got a brief example of binding vars in ASP to get me started?
View Replies View RelatedAfter trying out 3/4 password scripts which I've used before and won't work today.I've come to the end of my tether! I need a ready made script asap to password protect a set of webpages, something simple with login and p/w for one user.
View Replies View RelatedHow do people protect input from forms submitted that are
dangerous such as scripts, etc..
help me with asp password protection? I need to have a login and register script as well as complete password protection.
View Replies View RelatedI have a webpage where user upload ms-word doc.. for supervisor, they can d/w the doc and print... but the normal user can just see the doc..
how to make ms-word password protetion only to normal user but not to supervisors?
Can anyone find fault with this code? I wrote in in hopes of preventing users from "breaking" SQL queries and getting places they shouldn't by using SQL Injections.
Code: ....
Can anyone help me with an ASP function to perfom the following:
Series of page like this
item.asp?ItemId=2345
news.asp?NewsId=23456
Sale.asp?SaleId=344444
I need a function i can include in lots of pages that basically says
if query string is "ItemId" then only allow numerics of a maximum of 4
if query string is "NewsId" then only allow numerics of a maximum of 5
if query string is "SaleId" then only allow numerics of a maximum of 6
In all of the above query strings of 1,2,3 etc numerals must also work.
Any help appreciated as I'm in deep "poop" battling Chinese hackers.
we have a folder with pictures of signed up users. we are trying to protect this folder from the public in two ways. hide the relative path
e.g. /welcome/images/544235432.gif
makes it easy for a user to easily download this file . put a password and access the folder through this passwords .
where can I get straightforward step-by-step instructions to password protect part of a site?
View Replies View RelatedI've recently had my ASP site attacked by these stupid bots and have tried a captcha protection, but it doesn't help.
Here's the problem:
I have a form where people send an enquiry to a client from my database (over 5000). After hitting the submit button, an email is posted to the client, a copy is sent to us and the info is published to a database for record / stat keeping.
I have put the captcha protection in the form, but although the tests show that the captcha form works, the emails are still sent off, therefore allowing the bot attacks.
There must be a gap I can plug with the captcha before the email is posted off or info sent to the database.
I have a formchecker running which forces required fields, and that works fine. I'd like the captcha to work the same. Before the form goes to the confirmation page, it must validate the captcha.
What can I do?
Using ASP in a VBScript environment, how can I check the protection on a directory, or a
particular file?
I have been using two forms of password protection:
A) On working web sites I use an ASP script that is included in every page requiring protection: uses session - works fine
B) On quick test sites or temporary stuff I use the Windows Network Authentication provided by my web host. A whole folder is protected at once which is very convenient but it has a problem. If a user types the wrong password and is denied access, the next time they go to type the password, their browser sometimes remembers the wrong password as so they go straight to the 'access denied' 401 page.
How to proceed?
1) Does anyone know of a way of preventing all browsers from cacheing the login info.
2) Is there any way of using ASP to protect whole folders?
I need to be able to secure files on my web server. I am using asp to secure access to links and pages, for example:
<%If Session("manager")=FALSE Then%>
You are not authorized to view this page
<%Else%>
<<<Page Code>>>
<%End If%>
The place I'm running into problems is with files. I have a lot of charts and such in PDF version. I kind of doubt there is a way to secure these files with asp, but I thought it would be worth a try.
My biggest issue is that PDFs are stored in the browser's history, so once the page has been accessed, anyone using the browser can get to thatunsecured PDF. As a brute force fix, is there some way to simply erase the site from the browser history? If not, is there a way to secure the PDF, or does someone know of a better group to post on?
is there any way to protect files or a folder from unauthorised access, i.e.when a variable is false?
e.g.
when variable li = 1 then grant access to folder and files within
when variable li <> 1 then deny access
i have a folder with images and word documents i only want people with the variable set to 1 to be able to access them.is there a way?
I want to create a dynamic website hosted on a CD. It would be based on ASP and have a database. Is this possible? How would I approach such a thing?
I'm sure I could by a runtime version of Access and build an application, but could that be implemented within the website? Any thoughts? I don't want the user to install anything on their hardrive if possible.
I have a asp website and am wondering is it possible to place the website on a cd-rom?
View Replies View RelatedI have a little asp.net website which works great on the local machine
but I cannot seem to access it from a remote machine. It is not a
connection problem because my remote machine (which is on the network)
has a share on the local machine using name resolution. The message I
get on the remote machine's explorer is the classic "Page cannot be
displayed". It seems I have looked every where on the net for
possibilites without succes. Both machines have XP SP2, firewall turned
off. The remote machine runs IIS 5.1. Both machines are under the same
workgroup. Any help highly appreciated, will send french chocolates if
you sort my problem out. I have also tried creating a simple "Hello
World" html page. Same think. Workd locally but not remotely.
I have classes defined in both VB & C#, and would like to make them
accessible ASP Website construction. I could not put them both in the
App_Code folder, what should I do?
I would like to build a simple asp based website. I would like to create a webgallery with some pictures i have.Can I use a MS Access database to do it? And create an asp based site? How can I do it? Is there an example
View Replies View RelatedI have a little asp.net website which works great on the local machine but I cannot seem to access it from a remote machine. It is not a connection problem because my remote machine has a share on the local machine using name resolution. The message I get on the remote machine's explorer is the classic "Page cannot be displayed". It seems I have looked every where on the net for possibilites without succes. Both machines have XP SP2, firewall turned off. The remote machine runs IIS 5.1. Both machines are under the same workgroup.
View Replies View RelatedI searched and couldn't find any threads that answered this question: can I have an ASP (classic) page at my site (www.mysite.com) that includes an FSO for reading the files and folders of another, unrelated website (www.anotherURL.com) ?
When I say unrelated, I mean I own both and have control over both. The primary one is at my ISP hosting and the other is a home machine running Server 2003. I want to load up the one at home with photos in folders and then create an album on the other one that uses the pictures on the home machine. I have the following working fine when all is on one server:
Set fso = CreateObject("Scripting.FileSystemObject")
Set folder = fso.GetFolder(myPath)
Set files = folder.Files
Set subFolder = folder.subFolders
I have forums and are running for my clan I have made the website now and I would like to add that login and logout form to my website so that the users dont have to go to forums to login they can login from the website and the form will direct them to the forums.
View Replies View RelatedHow can I transfer the ASP and HTML files from PWS (Personnal Web Server) to my website?
Microsoft OLE DB Provider for ODBC Drivers error '80004005'
[Microsoft][ODBC Driver Manager] Data source name not found and no default driver specified
/wheelofgod/deuteronomy.asp, line 13
1. all the content (i.e. the text) is located in an XML file
2. the XML file would then be styled with an XSL stylesheet
3. and finally, the XML/XSL files will be outputed via an ASP script (for all the browsers)
that's all fine and good. the problem is, that for every ASP page, i have to have a separate XSL file. so, for 3 ASP pages, i'd have to have 3 different XSL files. this could become a hassel.
so, my question is, is it possible to have:
- 1 XML file (which holds all the content)
- 1 XSL file (which extracts the appropriate info for each of the 3 ASP pages)
- 3 different ASP pages (which call the appropriate info)
I am running a website on anintranet on one domain and trying to connect to a SQL database that is in another domain. The server that is running the website does not have SQL Server installed on it. I've looked at many different variations to set this up but none have been successful so far.
View Replies View RelatedIs it possible to transfer a dynamic, asp site built on top of an Access database onto a cd for demonstration purposes?
View Replies View RelatedI've to migrate website from IIS 2.0 to IIS 6.0.
Simple asp pages are working, but pages with visual interdev 6.0 controls
not work ! HTTP 500 (internal server error)
Visual Interdev 6.0 is it compatible with II 6.0 on W2003 server
I am trying to burn copies of our website on CDROM's and
having problems because the ASP's cannot work without the
existance of a server that supports ASP's.
Does anyone have a suggestion or know of a way I can make
this work?
Based on the user's input, I want to redirect him/her to another website, but I want to keep my page open and open the new website in a new window. For example:
response.redirect ("http://search.yahoo.com") redirect the user to Yahoo site in the same window as my web site. I need to have yahoo site to be opened in a new window? what is the command/option?
This is going to sound strange, but this has been bothering me for some time now.
The site is administered through MonsterCommerce. I recently started working with the owner who just purchased the site. There is one other person helping the owner out and he is doing some web work, I do more of the business side.
All the files previously were html files in the root directory with an "images" directory and a "ProductImages" dir. Now all of the sudden the files are coming up with an index.asp?PageAction=VIEWPROD*** extension. How could this have been done and what exactly is "Aspin"