we have a folder with pictures of signed up users. we are trying to protect this folder from the public in two ways. hide the relative path
e.g. /welcome/images/544235432.gif
makes it easy for a user to easily download this file . put a password and access the folder through this passwords .
Would anyone have a way to access certain Exchange public folders that
contain news group emails, perform a query on the folders for keywords and
return a list of those emails?
Basically, I've been asked to put a simple
single field on a web page that will query a list of exchange public folders
and return a list of those emails that have a key word match.
sort of like the MS Index server does on folders with files where one has an
asp interface to query the index data base.
we would like to be able to put a simple query field on a webpage whereby users could enter keywords and then have some of the msx 5.5 public folders searched and return a list of those emails that match the criteria. would anyone know how that might be done useing asp and mapi?
View Replies View RelatedI have been using two forms of password protection:
A) On working web sites I use an ASP script that is included in every page requiring protection: uses session - works fine
B) On quick test sites or temporary stuff I use the Windows Network Authentication provided by my web host. A whole folder is protected at once which is very convenient but it has a problem. If a user types the wrong password and is denied access, the next time they go to type the password, their browser sometimes remembers the wrong password as so they go straight to the 'access denied' 401 page.
How to proceed?
1) Does anyone know of a way of preventing all browsers from cacheing the login info.
2) Is there any way of using ASP to protect whole folders?
is there any way to protect files or a folder from unauthorised access, i.e.when a variable is false?
e.g.
when variable li = 1 then grant access to folder and files within
when variable li <> 1 then deny access
i have a folder with images and word documents i only want people with the variable set to 1 to be able to access them.is there a way?
Im coming from a visual basic 6 background.
I am making an ASP script with vbscript language.
anyways, in vb6, you can create a 'module' and put "public" functions and variables there.
how do I do that in ASP? i have a couple of functions that will be basically used on all pages (a function to prevent SQL injection).
So how do I create a page with all the public functions and use them on other pages?
Can I create a Function or Sub in my GLOBAL.ASA file for all pages of my application to use? If not, how does one do this? For example, I have an "IIF" function since it isn't natively implemented in ASP. Currently I have an Include directive on every page that includes the scripting for this function. I'd rather just declare it once, globally.
'--- Provide IIF functionality to ASP -------------------------------
Function IIF(eval, trueVal, falseVal)
if (eval) then
IIF=trueVal
else
IIF=falseVal
end if
End Function
how we can add appointment to public folder in ms exchange from asp page.Can anyone give some pointer or sample code how to do such a thing.
View Replies View RelatedI have a VB script Sub() that is used by several ASP pages. How do I make it
globally available rather than having to replicate the source code in each
ASP page that uses it?
What's the difference between a private function and a public function?
What's the difference between a function and a sub-routine?
I'm creating a web application for my company now. This application has 2
parts. 1 part for the customers to access. The 2nd part is for our staff to
access only. My director hopes to make the 2nd part to be something like an
intranet, such that only our company's computers (maybe only 1 or 2 in the
company) can login to this part of the application.
1. My company's intending to put the application on shared server with a web
host. Windows Authentication is NOT allowed.
2. My company doesn't have a static IP address.
3. My manager suggested using Network Card number (which I don't really
quite understand. Is there a way to get the Network Card number that's on a
client PC?).
How??
Some ISP told us that they can provide a firewall management feature such
that it will restrict access to the website from anyone that is not coming
from my company's network. This requires Static IP.
Another told me that IIS Manager has the security feature that restrict
access based on IP address. This requires Static IP again.
Is it possible to implement the 2nd part (the part that is to be accessed by
my company's PC) as a windows application instead? Then we only put the
windows application on one computer. So, 1st part (for the public) will be a
web application, 2nd part (for my company) is a windows application, both
accessing the same database server from an ISP. Will the ISP allow the
windows application to access its database server? I've no experience in
making a windows application at all, is it the same as making a web
application?
I am trying to take all the messages that are in a public message folder and export them to a database and then from there I can output to a webpage. I have it set up so I can do it all manually.I have to copy them all to a persoanl folder and from there I can export to a database.
I am looking for a way to automatically. Is it going to be possible to do, or will I need to take a look at making a Macro to do it? I havent done any real VB in quite some time, just VBScript in ASP's. I am trying to avoid doing the macro thing.
Is it possible to access Exchange 2003 public calendar through ASP (Exchange & IIS will be in separate machine)?
View Replies View RelatedI am going to construct a housing search website ... similar to www.mls.ca ... is there anyway I can populate the data(s) stores in their database? So when my user search for one kind of house, my website will return the data from the MLS database? Or there is similar way to get data from public websites?
Also, if a user search "sport" in my search text box, it will returns all the related links ... just like those search engine ... how can I acheive that? Or I need to pay or register to get the function?
I have a site that currently is password protected, using a combination of ldap authentication and asp session management.
So for every asp page, I check the session to make sure they're authenticated, if not I send them to the login page.
BUT.... there is a robohelp componenet that is almost a website within this website. All these robohelp files are htm or html based, so I'm unable to put asp scripting (to check for session authentication).
So, my problem is, how do i protect these pages using my existing framework?
I have a locally hosted (via an executable) asp application. Does anyone know what would be the best (cheapest) way to add copy protection in it?
The application is an exe web server with the asp pages embedded in the executable.
No one can copy the asp pages, but they can copy the executable and distribute it that way. I don't want them to do that.
If there is some sort of wrapper or asp code I could add to it for licensing or registration, please let me know.
I have allways validated user input to pieces prior to integrating it into a SQL statement, in order to avoid SQL Injection attacs. A colleague of mine told me that binding my vars would make them SQL scalar, but I have been left in the dark as to HOW... The web left me none the wiser, as well, so here goes: Anyone got a brief example of binding vars in ASP to get me started?
View Replies View RelatedAfter trying out 3/4 password scripts which I've used before and won't work today.I've come to the end of my tether! I need a ready made script asap to password protect a set of webpages, something simple with login and p/w for one user.
View Replies View RelatedI have a webpage. However I only want people to access it if they are members of a certain group. When I say group I mean Active Directory group. The log into windows with their Active Directory username and PW, and lets say they are members of 'employee1' group in Active Directory. I'm pretty sure I use ASP, to restrict access to a webpage depending on the users group. how I would go about doing this?
View Replies View RelatedHow do people protect input from forms submitted that are
dangerous such as scripts, etc..
help me with asp password protection? I need to have a login and register script as well as complete password protection.
View Replies View RelatedI have a webpage where user upload ms-word doc.. for supervisor, they can d/w the doc and print... but the normal user can just see the doc..
how to make ms-word password protetion only to normal user but not to supervisors?
Is there a way to display a calendar created in a public folder? We are
using Exchange 2003 and have an intranet and I would like to pull the daily
view form the calendar and display it at the bottom of my daily
announcements page.
Can anyone find fault with this code? I wrote in in hopes of preventing users from "breaking" SQL queries and getting places they shouldn't by using SQL Injections.
Code: ....
Can anyone help me with an ASP function to perfom the following:
Series of page like this
item.asp?ItemId=2345
news.asp?NewsId=23456
Sale.asp?SaleId=344444
I need a function i can include in lots of pages that basically says
if query string is "ItemId" then only allow numerics of a maximum of 4
if query string is "NewsId" then only allow numerics of a maximum of 5
if query string is "SaleId" then only allow numerics of a maximum of 6
In all of the above query strings of 1,2,3 etc numerals must also work.
Any help appreciated as I'm in deep "poop" battling Chinese hackers.
where can I get straightforward step-by-step instructions to password protect part of a site?
View Replies View RelatedI've recently had my ASP site attacked by these stupid bots and have tried a captcha protection, but it doesn't help.
Here's the problem:
I have a form where people send an enquiry to a client from my database (over 5000). After hitting the submit button, an email is posted to the client, a copy is sent to us and the info is published to a database for record / stat keeping.
I have put the captcha protection in the form, but although the tests show that the captcha form works, the emails are still sent off, therefore allowing the bot attacks.
There must be a gap I can plug with the captcha before the email is posted off or info sent to the database.
I have a formchecker running which forces required fields, and that works fine. I'd like the captcha to work the same. Before the form goes to the confirmation page, it must validate the captcha.
What can I do?
Using ASP in a VBScript environment, how can I check the protection on a directory, or a
particular file?
I need to be able to secure files on my web server. I am using asp to secure access to links and pages, for example:
<%If Session("manager")=FALSE Then%>
You are not authorized to view this page
<%Else%>
<<<Page Code>>>
<%End If%>
The place I'm running into problems is with files. I have a lot of charts and such in PDF version. I kind of doubt there is a way to secure these files with asp, but I thought it would be worth a try.
My biggest issue is that PDFs are stored in the browser's history, so once the page has been accessed, anyone using the browser can get to thatunsecured PDF. As a brute force fix, is there some way to simply erase the site from the browser history? If not, is there a way to secure the PDF, or does someone know of a better group to post on?
I have a domain www.company.com and also a sub domain like
forum.company.com I have learned that the sub domain is actually a
folder under my main domain so if I typed www.company.com/forum - it
would go to the same file as if I typed the sub domain, unfortunatly
all the files in the subdomain point to root paths eg:
/Images/logo.gif
This isn't a problem as the subdomain is seperate and I treat it like
its a new website.
I was wondering before I spend more money and activate a 10mb SSL
folder - how would I actually code for this folder?
Is the SSL on a seperate server, or just a folder off the main domain
name?
I want to do a register system "username" etc & some personnal details
through a sercure line.
Can anyone point me to where I can get more info?
My web site is entirely based on XML/XSL. Transformation of XML into HTML is a
server-side process. All my URLs are like this:
http://host/Application/?Document=AnyDoc&Chapter=3. There is only one script,
default.asp, in the root web that processes requests and displays HTML content
based on the query string.I'd like to intercept calls to http://host/Application/Catalog and translate into http://host/Application/?Document=Catalog before it is passed to the custom
error 404 handler. Can it be done - do I need a HTML filter or something?
I am writing an intranet and want to be able to hyperlink to all files
within a specific folder AND it's subfolders. Whilst I can hyperlink to the
files in the specified folder AND I can also iterate through the subfolders
and list them, for some reason I cannot hyperlink to the sub folders. I am
writing this software at home using a computer that has IIS and Windows 98
and am accessing this as my server from another computer on my network.
My Home Page on the Server is http://maxitek (the name of my Windows98
Computer) and when I look at the value of the variable "PathSpec" - it
becomes C:Inetpubwwwroot which when I try to create links to the sub
folder it is probably here where the problem is. The files themselves link,
but not with their full subfolder names, i.e., for a file called
"C:Inetpubwwwrootmytestmytest2mytest.txt" I am getting a link that just
looks like this Code:
I've looked everywhere and can't seem to figure out how to create folders. I've got a tonne of other stuff sussed and am about to attempt creating text files, but folders elude me still.
View Replies View Related