im tryin to secure my application. i want the application to send the user back to the login page if they have not logged into the system. do i use the global.asa file or is there a simpler way to do this?
View RepliesI am building a website to pull data from a remote https site using xmlhttp. The data from the https site is behind a login screen. I can successfully get through the login screen with:
set objXMLHTTP = Server.CreateObject("Msxml2.ServerXMLHTTP")
objXMLHTTP.Open "POST", "https://website.com/validate-login2.asp", false
objXMLHTTP.SetRequestHeader "Content-Type", "application/x-www-form-urlencoded"
objXMLHTTP.Send "Username=uname&password=pwd&company=O"
That works great - but then, when I try to go to the next page (where the data is that I want to pull) - I use the same process and I get kicked back out to the login screen? Could there be some cookies, referer, strings being passed normally that I am not including in my second request - How do i find out for sure?
I have used the software IETrace and it looks like some cookies being passed, but how do I know for sure if (and what exactly) it is using?
When someone buys something on my site from a detail page, I show them a cart. When they hit continue shopping, the only option I have right now is to take them back to the detail page. What I really would like to do is take them all the way back to the catalog page they used to get to the detail.
View Replies View RelatedI have a html form which allows the user to select add, delete, update or view from a drop down list. Their choice is sent to an asp page.
My problem is how to send them back a form from the asp page depending on their choice and send the resulting input to the same asp page again for processing.
So if they choose 'add' from the html page then that is sent to the asp page and they are sent back another form, to fill out the new record details which is in turn resubmitted to the same asp page to carry out the 'Insert' statement.
I'm need to open a popup window from an asp page that calculates a value. This value must be returned to the input box on the asp page. I have managed to get the popup window to open and display a value so far but I am not getting the value back into the asp page.
Popup Window code...
I am creating my student website. I have completed with student registration parts (student enrolment form, personal details) but now my client requirement is that if any student come to my website , he/she needs to register first so if they log on next time , screen will comes up with their all details.
I tried to create login page and if they are not in database , they can register on my website. But I could not able to create in my website. There might be more users so need to have loop in my code.
Once user log in their name and password , it will search in database and if database found that record in it , that page will redirect to my website page which will comes up with perticular student information.
project details : XHTML (Front End), Java Script (Validation), ASP (Connectivity), MS ACCESS (DATABASE).
I'm trying to prevent a user to go back once on a particular page...i mean once the user reaches a particular page and he/she tries to click on the back button of the browser, the page does not go back. Is that possible please?
View Replies View RelatedI've created a asp form that the user submits, the information is wriiten to a database and the user is redirected to a thankyou page
The problem is, if the user presses their browsers back button the form the just submitted is still filled and allows them to resubmit the form.
How can I clear the form session once the user clicks the submit button? I've read about this before, but can't seem to find the darn webpage that explains this.
I want to track the steps the user has gone through to get to this page and then display links so they can click on them to go back to that page. I would do this as hard code but the problem is most of the pages can be accessed from several different pages.
ex.
a product page a home page and a specials page
the path to the product can be home -->product or
home-->specials --> product
exactly like the viewing link at the top of this page but in asp.net instead of php.
I want to empty the forms fields when a user clicks on the back button. I wrote some js that will do this, but I can't figure out the right time to execute the script. If I do it on the submit form event, the values entered do not get posted, if I do it on the <body> onLoad event, the form name isn't recognized (the page posts to itsself). I also tried putting the js in a <script> tag inline just after the form, but it doesn't seem to have any effect.
View Replies View RelatedI've read that one shouldn't include ADO objects in the Global.asa for the sake of performance, but would user-defined classes cause the same kind of performance hit? Assuming that they wouldn't, is it possible to do it?
I can't seem to figure out how to include them, nor find any reference to it in msdn.
Is there a way to do this? Or should I create a slew of Session variables? Code:
I've searched over 1 hour on Google and elsewhere and haven't found
anything.
I'd like to find a way to get the real active user count on our website.
THe main problem I have is when a user quit with the "X" the counter will be
decremented of 1 only when the Session.Timeout will be expired.
Are there ways to let browser forget about the previous submitted form data?
Or prevent user from pressing F5 to submit the same form again
Or prevent user from presising back on the browser?
I have fields on a datebase called user_info with fields name, acctid, pw and blah blah blah. On the website I asked the visitors to input 0000 if they were not a client. I don't
really understand how if...then, if...else works. How can I get it to validate the name, pw, acctid
and if it equals 0000 to i guess (request.redirect "/client.bronzefactory/")?
The next thing is... the client page, for them to sign up if they haven't yet. On the database their acctid is going to be listed but nothing else. I'm guessing I have to use the update syntax right?
How would that work? I enter aa123456 and it does a = seach and redirect to a page where they fill it out and sumbits a update right? Is the statement something like this "UPDATE user_info SET name, pw= '" & name &'", '" & pw &'" where acctid= '?' <---how do i get the acctid there?
It's been a long time since I tried to solve this problem.I'm working for the INTRANET of my company, and I need to get the user login.I tried with Request.ServerVariables("LOGON_USER") or ("AUTH_USER"), but they don't work.The strange thing is that they work with Windows NT, but not with Windows 2000 Professional.
View Replies View RelatedHow can i tell which link has been clicked on a previous page, I have tried request.querystring, the thing is I have two different links posting to the same script ie
test.asp?site=main
test.asp?subsite=subsite
Or is there a away I can use the same query string and on the next page execute different sql querys. I hope This makes sense, if any more information is needed, feel free to ask.
I am trying to create a user login page that once a user has been logged in there name will appear on all pages in the top right hand corner. This is what i have so far the user logins in through my user page and then this page loads up Code:
View Replies View RelatedI have a page that logs the user in (the code will be below). When they log in correctly, or even incorrectly, they get directed to default.asp. The login is working correctly however because when I log in with a false name and password I cannot proceed to checkout. How can i direct the user (ONCE they are signed in correctly) to a customer page(custpage.asp) instead of my homepage(default.asp)? Code:
View Replies View RelatedI know how to grab the users windows login. I would like to use this to establish permissions for a user on my site. In order for this to be valid, I need for the user to have to verify their network password.
Is there any way to compare the password entered against the windows authentication? I would also like to be able to call the user by name instead of a login. Is there a way to get this from an Outlook address book or something?
i there i would like to ask how do i redirect the user to a page. Let's say i have an email sent to the user with a link and when the user clicks on it, the user will be brought to the loggin page and be directed viewAll.asp page. However, normaly hwne the user longs in the user will be brought to the view.asp page.
Cos currently when the user logs in the user is brought to the view.asp page regardless of the link
the database works is it checks over a database and verifies the username & pass with code. Then the user enters the site and there's a seperate table to keep a record of when users log in and log out.
Well basically I'd like to know if and how I could apply a filter using asp code? I'd like to filter out everything but <%Session("name")%> (which displays their username) so that user logged in can view their own records.
i have a log in page where the user has to log in to view any other files. when the user logs in i've set the default to view the view.asp page.however i realized that if the user was on the add.asp page and the seesion times out.. when the user relogs in again.. he would be brought to the view.asp page.
View Replies View Relatedi've developed a application in asp i want to restrict the user to login more than one at the same time i mean if user is already login then if he try to login on another window at the same time the message should b displayed u r already login.
View Replies View RelatedThe error i get is as follows:
Microsoft OLE DB Provider for ODBC Drivers
error '80040e4d'
[Microsoft][ODBC SQL Server Driver][SQL Server]Login
failed for user 'webuser'.
/dsn_inc1.asp, line 25
how can create user registration page and log in page. does anyone have any tutorials on this, links?
View Replies View RelatedI have been browsing the forums here and also on hotscripts.com and cant seem to find what I am looking for. I am trying to create a login form that will keep the user on the same page, give and error message on a bad attempt(got that part), and give a welcome message to the logged in user, and alow them to stay logged in based on their group access.
My site is .asp and my DB is Access. The registration form is already done. Cant figure it out from 3web either. Thanks for reading.
Is there a way to display NT login user name in a asp page?
View Replies View Relatedi've previously asked for a toturail or refrence to help me build up a user management :
login/register/remember passwoed / logout.
I need to display a URL that links to a password protected wiki (htaccess) on an apache server. I'd like to include the userID and password in the URL so that the user is not prompted for it on the wiki end. If I was linking to another ASP page I could send the login info in the querystring, but how is this done with apache? Is this even possible?
View Replies View RelatedWe have an intranet which is personalized using a cookie which we set. I have an outside vendor who is developing an application which will live on a seperate server. Is there a way they can read the cookie which we set to log user into their application so that we can make it a seamless transition?
View Replies View Relatedi have created a script that queries a database for a username and password, and if they are valid sets a session variable to TRUE and redirects to another page. the table which contains the user information is called "Users" with the fields "UID", "PWD", "FIRSTNAME", "LASTNAME", and "EMAIL". my question is, how can i set a session variable to use the FIRSTNAME record for the particular user that logs on? my code is below. I've already got a session variable to display the UID record in the BookingSysV1UserName session variable.
View Replies View RelatedI have an email containing link say (somelink.asp) A user clicks on this link (say from outlook). because this user is not logged into the site, the request goes to somelink/login.asp.
The user then logs in. After successful login I would like to take this user to the link he clicked on originally. Is this possible without having to pass the lionk url as part of the query string?
I have a simple ASP code that i am trying to use in order to get records from a database in SQLserver 2000 and display it in html format.
I named the file index.asp and placed it in the home directrory for IIS. When i type in http://localhost/index.asp, i get 500 errors. On viewing the IIS logs, i am noticing the following errors:
2005-10-31 20:05:16 W3SVC1 127.0.0.1 GET /index.asp |47|80040e4d|Login_failed_for_user_'test'
After searching on the internet, I have already checked "SQL Server and Windows" authentication in SQL Server security.
here is the code that i am using to connect to the database: Code: