Password Protection - Folders/individual Files
I have been using two forms of password protection:
A) On working web sites I use an ASP script that is included in every page requiring protection: uses session - works fine
B) On quick test sites or temporary stuff I use the Windows Network Authentication provided by my web host. A whole folder is protected at once which is very convenient but it has a problem. If a user types the wrong password and is denied access, the next time they go to type the password, their browser sometimes remembers the wrong password as so they go straight to the 'access denied' 401 page.
How to proceed?
1) Does anyone know of a way of preventing all browsers from cacheing the login info.
2) Is there any way of using ASP to protect whole folders?
View Replies
ADVERTISEMENT
is there any way to protect files or a folder from unauthorised access, i.e.when a variable is false?
e.g.
when variable li = 1 then grant access to folder and files within
when variable li <> 1 then deny access
i have a folder with images and word documents i only want people with the variable set to 1 to be able to access them.is there a way?
View Replies
View Related
we have a folder with pictures of signed up users. we are trying to protect this folder from the public in two ways. hide the relative path
e.g. /welcome/images/544235432.gif
makes it easy for a user to easily download this file . put a password and access the folder through this passwords .
View Replies
View Related
After trying out 3/4 password scripts which I've used before and won't work today.I've come to the end of my tether! I need a ready made script asap to password protect a set of webpages, something simple with login and p/w for one user.
View Replies
View Related
help me with asp password protection? I need to have a login and register script as well as complete password protection.
View Replies
View Related
where can I get straightforward step-by-step instructions to password protect part of a site?
View Replies
View Related
I am developing a small e-commerce site that allows users to create an account, pay, and then download audio files.I have only been doing ASP for about 6 months and this is a new problem for me: I need to not only password protect the pages (using Sessions and checking usernames and passwords against an Access database), but I also need to password protect the audio files themselves, so that users can't just type in the absolute URL to the audio files and get them for free.
I'm guessing password protecting the entire folder that contains the pages and audio files would be the best way to go, but I have no idea how to do this, and haven't been able to find any info on it.the site is part of a larger already existing site which is on a Shared Windows hosting account, so I have no root-level access to install any new software or technologies.
View Replies
View Related
how do i password protect folders in my site. using asp. i run win2000 server.
View Replies
View Related
I need to be able to secure files on my web server. I am using asp to secure access to links and pages, for example:
<%If Session("manager")=FALSE Then%>
You are not authorized to view this page
<%Else%>
<<<Page Code>>>
<%End If%>
The place I'm running into problems is with files. I have a lot of charts and such in PDF version. I kind of doubt there is a way to secure these files with asp, but I thought it would be worth a try.
My biggest issue is that PDFs are stored in the browser's history, so once the page has been accessed, anyone using the browser can get to thatunsecured PDF. As a brute force fix, is there some way to simply erase the site from the browser history? If not, is there a way to secure the PDF, or does someone know of a better group to post on?
View Replies
View Related
I am trying to use the FileSystemObject to create a copy of a directory (including all sub-folders and files within this directory) but i just cant get me head around it.
Can anyone point me to a tutorial or some sourcecode that i can play with?
View Replies
View Related
Would this be a good idea... to create a thumbnail folder and a lg image folder... and then like link it somehow? How would any of you approach this? I want the website to load the thumbnail images into watever given category and then let the thumbnail have a link to a larger picture which clicked on...
Would this be easy to integrate with what i already have??? I'm using filepaths for the mysql database and the images are resized with html so you can see where the problem lies at...
View Replies
View Related
Is it possible to extract files and folders from a zip archive using ASP? If not classic, will .net do it as a standard task, ie no activex dlls, etc?
View Replies
View Related
I am wanting to create a search page that will search a folder in the company network (unc path) based on a pdf filename (01223233.pdf etc) and open the file in the browser. acrobat will take care of the rest ....
View Replies
View Related
I have a website which contains certain files (ppts, pdfs) in its root directory. By directly giving in the URL in the address bar, anybody can access the files. I want the users to be logged into the website in order to access them.
For example, if the file location is http://abc.com/my.ppt, I would want the user to be redirected to the login page of the website when he/she tries to access this link. If already logged in, the file should download. How can this be done?
View Replies
View Related
How can I password protect files so that no one can anonymously download it? I have windows 2003 server with IIS 6.0. Please explain the steps in detail.
View Replies
View Related
I have a client who has a password protected page (via session) that lists a bunch of pdf's. They are a little worried that you are able to browse and see the pdf's via the url without being logged in.
I'm not sure if it's possible or not but is there a way after their username and passord is verified to automatically grant them permisson to view the contents of the pdf directory?
View Replies
View Related
The Now() function returns the date and time. How do i get each individual values such as year, month, date, hours and minutes.
View Replies
View Related
I want my customers to be able to login using username and password. But I only want them to see their own page.Can I somehow set the URL in an Access database and then redirect them depending on their details Or am I going about it the wrong way completely? Also, can anyone explain all this "session id" stuff?
Just in case it's relevant I'm looking to insert the pages into a MS Frontpage 2003 website and using an Access 2003 database.
View Replies
View Related
I'm trying to design a voting page. The flow as follow:
1) there is a table filled with rows (data from db)
2) each row come with a button = "vote"
3) when user click the button "vote", db will UPDATE the value(Yes/No/etc) of the row + 1
example:
1. Yes "Button"
2. No "Button"
3. etc "Button"
Since there is three button, how can the button identify which value to UPDATE in db (when the user might just click any one of it)?
View Replies
View Related
I would like to remove individual elements from a vbscript array without just blanking out that element. Is this possible?
View Replies
View Related
I'm given a DB with everyone's particulars including emails which I'm supposed to retrieve all their emails and do a mass reminder email to the individual email addresses.
I don't want to send a email whereby all the email addresses is shown in the email. Can someone give me some ideas as how am I supposed to go about doing it using asp and vb. Is there any working codes I can refer to?
View Replies
View Related
I have an IIS v5.0 installed in a windows 2000 box hosting a set of asp pages. These pages are accessed by premium service subscribers only with a 5-hour timeout setting.
Now I need to build another jsp site for a special group of users which enjoys a longer session timeout of 8 hours. I have duplicated the original asp pages and this duplicated asp pages will be accessed and displayed by iframe in the jsp. (I hate to do this because I'm relying on an ocx for the page to work).
How do I control the session timeout settings of these 2 sets of asp pages so that they have individual timeout settings?
View Replies
View Related
I have announcements down the left hand column of a site and want to display contact info if it is available - if it is entered into the database. So I only want to display a space plus the data if there is data in the field. Code:
View Replies
View Related
I have a client who wants to password protect a learning course that is set up in modules. Each module needs to have it's own password protection so users can only access them as they progress through the course.
Each user should have their own password (for each module) and, said client would like the password to expire for the user at some (predetermined?) point. Is this possible? It seems like a lot (in terms of setup), but I don't know much about password stuff.
If it is possible, can someone give me an overview of how it works (theoretically) or where to find more specific info on setting something like this up (in ASP.net)
If it isn't possible, can someone suggest what is more reasonable in terms of protecting the modules?
View Replies
View Related
I have a site that currently is password protected, using a combination of ldap authentication and asp session management.
So for every asp page, I check the session to make sure they're authenticated, if not I send them to the login page.
BUT.... there is a robohelp componenet that is almost a website within this website. All these robohelp files are htm or html based, so I'm unable to put asp scripting (to check for session authentication).
So, my problem is, how do i protect these pages using my existing framework?
View Replies
View Related
I have a locally hosted (via an executable) asp application. Does anyone know what would be the best (cheapest) way to add copy protection in it?
The application is an exe web server with the asp pages embedded in the executable.
No one can copy the asp pages, but they can copy the executable and distribute it that way. I don't want them to do that.
If there is some sort of wrapper or asp code I could add to it for licensing or registration, please let me know.
View Replies
View Related
I have allways validated user input to pieces prior to integrating it into a SQL statement, in order to avoid SQL Injection attacs. A colleague of mine told me that binding my vars would make them SQL scalar, but I have been left in the dark as to HOW... The web left me none the wiser, as well, so here goes: Anyone got a brief example of binding vars in ASP to get me started?
View Replies
View Related
I have a webpage. However I only want people to access it if they are members of a certain group. When I say group I mean Active Directory group. The log into windows with their Active Directory username and PW, and lets say they are members of 'employee1' group in Active Directory. I'm pretty sure I use ASP, to restrict access to a webpage depending on the users group. how I would go about doing this?
View Replies
View Related
How do people protect input from forms submitted that are
dangerous such as scripts, etc..
View Replies
View Related
I have a webpage where user upload ms-word doc.. for supervisor, they can d/w the doc and print... but the normal user can just see the doc..
how to make ms-word password protetion only to normal user but not to supervisors?
View Replies
View Related
Can anyone find fault with this code? I wrote in in hopes of preventing users from "breaking" SQL queries and getting places they shouldn't by using SQL Injections.
Code: ....
View Replies
View Related
Can anyone help me with an ASP function to perfom the following:
Series of page like this
item.asp?ItemId=2345
news.asp?NewsId=23456
Sale.asp?SaleId=344444
I need a function i can include in lots of pages that basically says
if query string is "ItemId" then only allow numerics of a maximum of 4
if query string is "NewsId" then only allow numerics of a maximum of 5
if query string is "SaleId" then only allow numerics of a maximum of 6
In all of the above query strings of 1,2,3 etc numerals must also work.
Any help appreciated as I'm in deep "poop" battling Chinese hackers.
View Replies
View Related
I've recently had my ASP site attacked by these stupid bots and have tried a captcha protection, but it doesn't help.
Here's the problem:
I have a form where people send an enquiry to a client from my database (over 5000). After hitting the submit button, an email is posted to the client, a copy is sent to us and the info is published to a database for record / stat keeping.
I have put the captcha protection in the form, but although the tests show that the captcha form works, the emails are still sent off, therefore allowing the bot attacks.
There must be a gap I can plug with the captcha before the email is posted off or info sent to the database.
I have a formchecker running which forces required fields, and that works fine. I'd like the captcha to work the same. Before the form goes to the confirmation page, it must validate the captcha.
What can I do?
View Replies
View Related
