Which directories and files are visible and readable for a (hacking) user at a Website:
a)directories in the default website (obviously: YES)
b).asp-files in the default Website
c).asp-files in any diretory outside the default Website
d)virtual directories, with files, referred to in the Website
e)any virtual directory, with files, set up in IIS
f)any other directory and file on the server computer that you know the local physical path to
g)any other directory and file on the server computer that you know a valid URL to.
I have a form with three <textarea> and one <input> element. When either of these are changed I want an "Update" button to be visible at the bottom of the form. I've tried this:
On every element I've added this trigger: onChange='jsVwBtn()'
Function like this: function jsVwBtn() {document.form1.btnupdate.type = "button";}
Default the btnupdate type is set to "hidden". Some of you might start to laugh now, but as you continue do that please give some "state of the art" way to do this
I created a label, a textbox and a button when i build the webform and try to see it with the explorer it only show the label
The other 2 objects (textbox and Button) at the Visual Basic.Net editor at the properties are visible and in the code i have <asp:TextBox id="TextBox1" runat="server" Width="122px"></asp:TextBox>
Some pages wont display dynamic data from the SQL DB unless the data is in a certain order, when I move the dynamic element up the page it becomes visible.Does the layout in the SQL DB determine the layout on the page?
how to make an onmouseover:visible area in the page? i mean ie. i have an output page, and list of datas from database. i want buttons releated its appear when i get my cursor over area of any data. but my buttons are called from includes file.like this:Code:
which doesn't seem to be visible through out the site. If I use <% Response.Write(Session("UserLevel")) %> on the login page then it shows that the session in is present and the correct value. but when I use <% Response.Write(Session("UserLevel")) %>. on any other page through out the site it returns nothing
I'm actually wont to use sessions to protect admin pages.
As I am new to sessions, is there anything I am missing?
I have a form in which if i check one checkbox it makes 2 textboxes invisible. Thats working fine.( I am using java script to perform this)Now when user fill the form and hit submit and if some required field is missing than it forces the user to go back to form and complete it. While going back it retains all the values for all the fields.It also retails the checkboxs but even though the checkbox is checked now but textboxes which should be hidden are visible.
i have searched through a ton of past posts in an effort to find the answer to my problem but so far have come up with nothing. The problem I am experiencing is with VS6, visual interdev on windows 2000, with IIS.
When ever i attempt to debug my asp web app the debugger will step into the code and will start an Iexplore.exe process, but not actually make internet explorer visible.
Does anyone know any way round this I have spent loads of time trying to sort it already.
I was wondering if there was any way to grab all the visible text off a page using asp and xml. I can get all the html of a page. Can anyone help we be able to grab the visilble text.
I have several folders on a test web server that are not visible in the directory structures of several programs, including Visual Interdev and Stac ReachOut. All these folders have one thing in common: they are shared. I tried turning sharing off to fix the problem - no good.
The only way to make these folders visible to my project is to manually add them. But every time I refresh my project view, the folders go back to not being visible and I have to add them again. Any ideas?
I have a survey/member form that gathers information. I would like to have a drop down list on a page that a user selects, either 1, 2 or 3.If 2 or 3 I would like to show on the form another field for information gathering ie:if a user has 1 cat, fields for cat name, sex & age show.
if a user has 2 cats, 2 fields show instead of one for each, and the same for 3.....
I have a website that we display images we have saved into a SQL Server 2000 database as binary BLOB. This is on a Windows 2003 Server. Just recently (a week ago) this website began to save the images it is displaying on the website as ASP pages in the Temporary Internet Files > IE.Content > Folder.
We have other websites where we use the exact same code and these do not save files on the server when they are displayed.
Here is the code to display the image: Set rs = objConn.Execute( SQL ) Response.ContentType = "application/octet-stream" Response.BinaryWrite rs("Product_Image")
SQL is the SQL String to get the image from database
When I add this code:
Response.ContentType = "image/jpeg"
The images still display on the website, but now are saved in the Temporary Internet Files folder as JPG's.
Can a php file be executed inside an asp file? I need to execute a php file in another asp file but i'm not so sure it's possible. My server can run both asp and php and they run without any problems... I just need to find a way to include the execution results of the php file in the asp one. Is it possible to use SSI and include the executed php file and then the executed asp file in a main ssi file?
I have installed PWS in windows 98 in each of the system at various places and put my Sales program files in the WWWROOT directory in all the branches. I'm afraid that the users may tamper my ASP files. Is there any way of converting .ASP files to .exe files so that the dont see my program.
I was wondering how some sites let you search by using a form, then present the results as static .htm files.
The reason I ask is that I tend to use ASP to process form information, then give the user a list of results presented on an .asp page. The list is simply drawn from a database in real-time and formatted into a template page.
The problem with this is that search engines can't see any of the information in the database, since they can't do the form submission. Is there a way around this?
When DLLs are compiled in VB, in addition to the dll, there are also exp and .lib files created. Can somebody tell me what these are for? Do I need to include them when I deploy my application?
I want to include just the result of a PHP file within an ASP file. <--#include won't work, it just imports the text.Is there an alternate way to do this?
Checking our IIS log files we often get the chinese bots probing our sites. My only concern at the moment is that when an item is called by ID (i.e. select category from table where categoryid = id) and the id is called from either a querystring or a form request, I use CLng (i.e. CLng(request.querystring("id")) to convert the id to a long int to prevent the bots injecting the variable with any non-numeric characters.
IYHO, if I have say 10 different product categories that extract their data from say 10 text files or an Access DB, is it more efficient to have an ASP for each product category to query each section or 1 which parses the lot?? The only reason I am asking is for multiple user access I have this strange belief that if 1 page is getting requested and queried by 10 simultaneous visitors then 'spreading the load' on different pages would help. Is my logic correct or do the ISP fairies have this in hand??
when the user submit a form, all the form data's will be saved as a pdf file is it possible? yes means. by what way we can get this..? For doing this we have to use any third party tools..?
i want to know what is the difference between using a .asp include file and .inc include file.I know how an Asp Include file works , but some place i have seen .Inc as Include file. What is the difference?
Does anyone know of a COM object, or if it is possible to display content in the browser of a file in a zip file.
In other words, I have a zip file with like 100 images. I have a script that will knows which zip to look at and what the file name is inside the zip. What I want is to display in my browser the image that is in the zip file .Not sure if this is possible or not, I've been searching the web for a way to do this. Any help would be great.
I'm looking into ways of creating zip files on my server without components to install. It's so I can let users of my site select files they would like to download and zip them up on the fly and download.
I just upgraded to Office 2003 and none of my .mdb files open! Double-clicking an mdb file opens Access, but the database never opens. No error messages. No hourglass This happens to any mdb file I try to open.
One site I've written allows the user to install an IE extension menu (notmalware at all) by downloading/merging a short .REG file. Worked like a peach on Win2K Server, now that I upgraded to Server 2003, it returns a 404 file not found error.I'm positive the file is there/spelled right.I changed it to .txt and it displays the text in the user's browser.
So there's little question that this is some "security" addition,to help keep us safe from the functionality we're used to. I could see browser-end warnings/protection, as long as it can be adjusted for trusted zones, but server-side content filters that block serving certain extensions? WTF?
So, after the obligatory scan of msdn, I looked for mappings to 404.dll,mime types and other seemingly quasi-relevant configs...found nothing that referenced .REG.Does anyone know how to disable this "protection"?Are there any other dastardly extensions it will "save" me from?
