| Blog News Main Page NEWS FROM 2006-03-25
Blog Entry: 3/25/2006 2:22:06 PM
I assume you mean 500 pixels wide
no.. because you cant reliably tell a pictures image width without an image resizing component to look it up.. asp can not do things like that on its own
serverobjects has a free component called "imagesize" that can do it as well but you need access to the server to install the component http://www.serverobjects.com/products.htm
so if you cant do that with regular asp code you definetly can not stop the upload proces because the picture is too wide..
heck, that would be nearly imposible to do regardless.. even with the best 3rd party components at your disposal
even with an image resizing component you would have to allow the upload.. then check the pixel width.. then delete it.. tell the user what is going on...etc etc .. all a very complicated process
, Regarding installation in a subfolder
Though this should be common sense and ASP.NET 101 "so to speak" One thing not mentioned in the docs..
If you do not install ASPProtect.NET in the true root of a web there a key in the web config you must adjust.
it looks like this
<forms name=".aspprotect~net" loginUrl="/aspprotectlogin.aspx" protection="All" timeout="60" path="/" />
The way it comes it is valid for a root installation..
lets say you installed the application in folder called. "aspprotectnet"
the key would change to this
<forms name=".aspprotect~net" loginUrl="/aspprotectnet/aspprotectlogin.aspx" protection="All" timeout="60" path="/" /> cwilliams38454.3830439815,
Hi Chris,
Thank you for your prompt response.
Our current project requires alot of customization.
Yes, the error is probably a data problem and not due to your code, because we needed to make modifications to the database. But that's why debugging would be helpful.
Basically our intent to modify the asp protect code stems from the fact that our client doesn’t want certain fields to be recorded or to appear: address, city, state, zip etc…
We are happy to be able to modify the HTML, but we also want to modify some other default behavior, such as which page opens when the "cancel" button is hit in the editaccountinfo.aspx page.
, You kid around again regarding illegal downloads and not only will you be banned from the forums, your support will be cut off completely.
,
I was told by my ISP to use localhost and it should work and it does not. It does not require authentication to send e-mails.
Any other ideas?
Thanks , Great! Sounds good Chris. , I am out of the server now and I have to get up early to help friends pour concrete in a huge building in 20-30 degree weather (woo hoo)
So I am going to take a break on this until later tommoro.
In the mean time try connecting to the access database with no password on it as well as the access 97 version that I put in the data folder... and see if it runs any faster...screens like the user screen should load fast... not after 15 seconds of waiting like they seem to be doing right now
If none of that helps which it probably wont I can set up the database for you here including the importing later tommoro when I am done pouring concrete , I believe that solved the problem as I have not heard from this person since I sent him the code., Your probably talking about "Session.Timeout" which is a feature of the IIS webserver. Please do a google search on it for more information.
In the meatime if you look at the top of the "check_user_inc.asp" file you should see a section like this where you can try to change the value.
' Minutes you want before the session times out. ' This is set on the server to be default to 15 or 20 minutes depending on the server version ' You can change it there or override it here. Session.Timeout = 30
Specifying it like that is supposed to overwrite the value for your web in the IIS console which is usualy 20 minutes.
, Hello cwilliams, and thank you for the fast reply.
Well, i have tryed with the ASPImage enabled and disabled, with the same results. I have used gifs and jpgs in the tests. I have made some different test. Some with uploading the picture over an excisting picture and some as the first picture. Same results. Everytime, it´s the 2nd thumbnail that won´t show itself, but the large picture will show, if you press the thumbnail.
I have tryed to look in the code (view_ad.asp), but as far as i can see, everything seems just fine ?!
I know, it wasn´t much help i could give you, but i think i have tryed all the possibilities.
Best regards, Erling
, We are emailing a weekly newsletter via the Newsletter feature. Many clients complain that they are not receiving the newsletter. The emails are not bouncing back indicating that they possibly are not being sent to begin with.
Is there any way we can determine if ASP is making it through the entire database of subscribers? , If you code support for it yes, the application comes with no paypal code or support built in.
If you think it will help you, you are welcome to a copy of the classic asp version which supports paypal subscriptions. Perhaps looking at the code would help you. , Your actually confusing me with the whole "joe bloe" thing and user access. I just do not get what you are trying to tell me. Perhaps you can explain in a less confusing way. Your just not technically explaining it andand thats what I need to know to possibly help.
As for the subweb thing you just can not do that. Subwebs have their own sets of application and session variables. An ASPProtect installation and any pages you protect with it are required to be in the same "application" in IIS. Sicne subwebs have their own "applications" in IIS that won't work. It is the nature of "forms based authentication" A sub web is alo considered by our licensing to be a seperate web site and ASPProtect is licensed per web site.
As for breaking pages.. you really shouldnt be editing any pages in the admin area as you will break them unles you are very good with ASP. (does not sound like you are..no offense meant at all)
Pages in the "users" folder are less complex and it is usually ok to edit them carefully. http://www.powerasp.com/content/hintstips/common_sense.asp
Pages of your own that you password protect can still be edited in your usualy way though without effecting anything.
Truth is if you back things up before you start editing how can you go wrong ? That's how you learn. , I had not rebooted after installing the Jet driver updates, so I tried that and the asptest page worked fine, and said that all the tests were successful and that the data connection was setup correctly. I then installed aspprotect again, but with the same results. I cannot log-in from the get_me_in.asp page. It still says that it is opening the page, but does not respons for an indefinite period. The asptest page is in the same directory.
I have looked for alternate databases for this product on your site, but I cannot seem to find them. , The count is in the album area where the small pictures and description of album. Viewed 1 time(s) This count never changes.
Thanks
John , After taking another look at this and trying your suggestions without success, it appears that in Windows 2003 server it is nearly impossible to remove the READ ONLY attribute from the _database folder. I'm wonder if this could the cause?
Thanks , While attempting the database connection test, I receive the following error:
Server Error in '/' Application.
Security Exception
Description: The application attempted to perform an operation not allowed by the security policy. To grant this application the required permission please contact your system administrator or change the application's trust level in the configuration file.
Exception Details: System.Security.SecurityException: Security error.
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below. | Stack Trace:
[SecurityException: Security error.]
aspprotectnet.DBConnectTest.Page_Load(Object sender, EventArgs e) +0
System.Web.UI.Control.OnLoad(EventArgs e) +67
System.Web.UI.Control.LoadRecursive() +35
System.Web.UI.Page.ProcessRequestMain() +2112
System.Web.UI.Page.ProcessRequest() +218
System.Web.UI.Page.ProcessRequest(HttpContext context) +18
System.Web.CallHandlerExecutionStep.System.Web.HttpApplicati on+IExecutionStep.Execute() +179
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +87
|
Version Information: Microsoft .NET Framework Version:1.1.4322.2300; ASP.NET Version:1.1.4322.2300
My guess is that this is an issue with the fact that I'm in a shared hosting environment that is restricted by CAS. Before I move to a dedicated server, I'd like to verify that this is the issue. I'd appreciate your input.
My host is 1and1 Internet. You may find this FAQ helpful: http://faq.1and1.com/scripting_languages_supported/_net/16.h tml.
, Nov 2005 , If a picture does not show after uploading it is one of the following things.
The upload method chosen is not supported on the server or The physical path specified to the pictures folder is not correct. or The URL to the Pictures folder is not correct. or Permissions to the pictures folder have not been set properly
Here is more information on how permissions are set.
http://support.cjwsoft.com/code/moreinfo136-1.htm http://support.cjwsoft.com/code/moreinfo56-1.htm
Without more information and the settings you have entered and chosen that is all I can offer for now. , download the free version...
check out this tutorial... http://support.cjwsoft.com/code/moreinfo169-1.htm
If your application can post to the page and provide all the form variables needed to log in it may work out for you..
You'll have to try it out... all the form variables needed are in that login form example.
Basically you'd be posting to a protected (.asp) page.. and providing the following for the most part.. how your app creates it post data is on your end...
<input type="hidden" name="Status" value="Checkem"> <input type="text" name="Username" value="Yourusername"> <input type="Password" name="Password" value="YourPassword">
As an alternate scenario...
Now, by default the "check_user_inc.asp" file is looking for posted form data... for security reasons it is not looking for querystring info..
If you change this bit of code in that file
from
Username = Replace(Request.Form("Username"),"'","''") Password = Request.Form("Password")
to
Username = Replace(Request("Username"),"'","''") Password = Request("Password")
It will then grab either form or querystring data...
Meaning you wouldn't necessary have to create a true post to the page with form data. You could just access the page via a querysting like so
http://www.mysite.com/somepage.asp?Status=Checkem&Userna me=Yourusername&Password=Yourpassword
Of course that introduces security risks as the username and password would be passed in plain text over the net
Another option is... You can also make a copy of the "check_user_inc.asp" page called whatever with those modifications just to use in pages you need your little application to post to... thus reducing the security concerns a a bit as the rest of yoru site could still have its pages protected under the normal scenario.
I hope this answers your question... I havent really ever tried any of this but that is how I think it would work... , one more problem I see...
I think your login box on the main page is missing the hidden form variable
http://support.cjwsoft.com/code/moreinfo169-1.htm, like I mentioned are you by chance running something like Norton Antivirus Script Blocking ?? That can cause timeouts and all sorts of problems with ASP as can other software like it. , I guess i am not being clear as to what i am trying to do. As far as the event thing... lets hold off on that for now. It seems Chris has answered my question and i am on my own for that one...
As far as the log in goes: I went to that site you mentioned;www.CafePress.com to see if they had what i was talking about. and they do. Notice on the bottom of the page it says "sign in to your account"
I want that option on my home page where users can sign in to go to their account. It will either take them to a page where they can update their info, or it will take them to a protected page. Pretty much instead of posting a link on the site to say... click here to go to members.aspx and have it return an "access denied" the user can enter their info from the main page and be automatically re-directed to that members.aspx page.
I know how the viewstate works and i also know what that returnURL thing does..pretty self-explanitory.
Hopefully that makes things easier. I just want a user to log in from the homepage and be redirected to either a protected page or their account page...
(as does that cafepress website) , Yup, it probably means the virtual directory is not configured as an Application in IIS.
You did put this in a plain folder in your web, correcct ? Not a subweb
Regarding the application settings for the virtual directory.. if it is your server you set that stuff up in the IIS console.
If hosted somewhere it is there responsibility to have that set up correctly for you and you need to contact them and ask them what the deal is. cwilliams38455.9035300926, It turns out that I never enabled ASP.net on the site. After doing that the skins work much better. I'll have to poke around and see what other functionality is now available.
Thanks!
Al , Ok, for starters what is the real error ? Please read this. http://support.cjwsoft.com/code/moreinfo11-1.htm
2nd I always recommend using CDOSYS before any other email component. All servers have it running by default and ASPProtect supports some a html editor if you use that component. I would give that a try as well. It's the best emailing option. , that is because passwords in the import/export files are encrypted.. if you make one of your own you need to use the rc4 function in the "config_inc.asp" to encrpyt your passwords just like the aspprotect system does (requires knowledge of vbscript and integration into your export system)
now, there is a way around this
if you want to import a file you made with clear text passwords edit "import.asp" beforehand and change
If UserArray2(5) <> "" Then CmdAddUsers.Fields("Password") = UserArray2(5)
to
If UserArray2(5) <> "" Then CmdAddUsers.Fields("Password") = RC4(UserArray2(5), PasswordEncryptionKey)
that way it should convert your clear text passwords to encrypted while it does the import
this post also addresses this but in the reverse scenario http://support.cjwsoft.com/code/code_info.asp?TID=261&PN =1&TPN=1
I hope this helps you because I really do have to leave the office like right now. Very late for a dinner meeting.
I should be back on the computer later tonight or tommoro morning , People who have the option pack have a new feature called groups.
Groups are meant as a replacement for using the access levels as they are much more powerful. Support for pages protected using access levels is left in tact for backward compatiability for a customers older protection code.
A customer recently told me groups could not be used like access levels and that 8 access levels was not enough. This is how I explained that groups can do everything access levels can do.
Groups can honestly do everything access levels can do if you really think about it. Using groups and protecting pages accordingly you could actually create a system that basically worked identically to the way the access levels works.
For example..
You make 8 groups and assign users to them accordingly
Protection code on page allows access to groups 1-8 The aspprotect system generates this code for you…
<% GROUPACCESS = "1,2,3,4,5,6,7,8" %> <!--#INCLUDE FILE="check_user_inc.asp"-->
In this case a user assigned to any one of those groups would have access..
Protection code on page allows access to groups 2-8 The aspprotect system generates this code for you…
<% GROUPACCESS = "2,3,4,5,6,7,8" %> <!--#INCLUDE FILE="check_user_inc.asp"-->
In this case a user assigned to any group between 2-8 would have access..
Protection code on page allows access to groups 3-8 The aspprotect system generates this code for you…
<% GROUPACCESS = "3,4,5,6,7,8" %> <!--#INCLUDE FILE="check_user_inc.asp"-->
In this case a user assigned to any group between 3-8 would have access.. cwilliams38114.800775463, When I add a user, I can not activat it.
It sends me back to log on and will now allow me to log in as admin???
I can restart the APP and log in as Admin, but the user I added
is still not activated??
My system will also not allow me to set the Stay Loged in FLag.
It just ignores it....
, You shouldn't be renaming or moving anything... unless you really really understand what you are doing and are at an expert level expert as far as ASP coding goes.
like I said earlier.. http://support.cjwsoft.com/code/code_info.asp?TID=354&ge t=last#1130
redirecting with version 6 is not supported but this thread tells you exactly how to set it up (I showed you this thread in an that earlier post)
http://support.cjwsoft.com/code/code_info.asp?TID=17&KW= redirect
This thread below may also help in case the page you want to start on with a login form should not be password protected..
http://support.cjwsoft.com/code/moreinfo18-2.htm , We do not have plans to support recurring payments via 2checkout because their system is not flexible enough to allow it to function correctly. Basically their system will not send notifications to our system when a recurring payment fails and therefore there is no way to automatically disable a user that cancels or does not pay. etc etc.. , Need to know more about ASP ? Check out these links.
|
15 Seconds Free resource for developers working with Microsoft Internet Solutions. 15 Seconds is the biggest IIS and ASP development resource in the world. |
|
ASP FAQ Have a question about ASP? Check the ASP FAQ site. They've probably got the answer. |
|
ASP Free Your 1st source for free ASP and ASP.NET live demos, downloads and more!!! |
|
ASP Connections ASP Connections Conference for the ASP Developer features sessions on ASP Performance, IIS 5.0, ASP 3.0, XML, ADO, E-Commerce, VID, COM, COM+, MTS, DHTML, load balancing, and more. Speakers include Mike Amundsen, Wayne Berry, Charles Carroll, Michael Corning, Jeff Niblack, & Ken Spencer. |
|
4GuysFromRolla 4GuysFromRolla: Web Technology, Programming, Humor... All this and it counts as work! |
|
CoverYourASP.com A great new site. It's got some great stuff and is using JScript! A must see! |
|
askASP Promising new site! Check out the question archives! |
|
CodeHound CodeHound ASP - The ASP Developer's Search Engine! |
|
CodeAve.com A neat ASP reference with some interesting features. Check out their "Script Writers" |
|
ASPZone The website for advanced ASP developers. |
|
DevASP A relatively new ASP site. Straight forward and informative. |
|
www.LearnASP.com This in another site maintained by Charles Carroll, and it specializes in Active Server Pages programming issues. Contains links to a wide range of resources and articles. |
|
ASPin.com The ASP Resource Index. Here you will find the stuff you need to take advantage of ASP and make your website an interactive mecca. |
|
ASP Sites A great place to go to find ASP resources fast! |
|
Macromedia - DevNet While much of the content is Dreamweaver MX-centric, they also have a fair amount of plain vanilla ASP.NET content as well. |
cwilliams38431.8787152778, If we wanted to user groups, is the "Access Level" in the User setup the same ID as what the group access would be? Ex. If John had Access Level 4 and the page specified <% GROUPACCESS = "4" %> <!--#INCLUDE FILE="check_user_inc.asp"-->
I'm asking because there is no Group Access Level in the user setup. Thanks , Thanks for the information. We added the name manually instead of using the App_Name variable., the following error message appears, but only when attempting to log off. all other parts of the program seem to be working.
[Microsoft][ODBC Microsoft Access Driver]General error Unable to open registry key 'Temporary (volatile) Jet DSN for process 0xa04 Thread 0xa38 DBC 0x21ff024 Jet'.
, Our knowledge base which is hosted at a remote location is protected by ASPProtect Full Version 6. I would like to allow our employee to access the knowledge base from within our internal network unchallenged. Is there a way which I can modify the code "check_user_inc.asp" to allow any one coming from say 10.1.X.X to access the site unchallenged?
Thanks,
Mo , noted.
1.) this has been explored and because of the way groups works is not feasable. Because us this I wrote code to allow you to view and sort all users for any group on the actual groups page. You pick a groups and then click the "Show Users" button
2.) noted , Hello,
no default setting for something like that... what your thinking about doing is on the right track I'd say , That would not happen unless you added a target to the login form or you're code had a base target set.
Like so..
<base target="_blank">
I would really need more detailed information. It's nothing the system does the way it ships under normal circumstances. For example you shouldn't see that behavior in any of the example protected ".asp" pages
that is unless you have something odd going on with your browser settings or you made changes to the login form or code around it causing it. (or you are using frames and dont have some of the targets and what not set correctly)
My guess is that it has to be something you added or did, but I really need to know more to offer more than that.
cwilliams38419.7687152778, ok, well if you want to test on your own.... in the ipn.asp file for the subscription folder you will see this area of code used for testing
' Un-comment this section and give this directory proper permissions to enable logging to a text file ' Very helpful for troubleshooting ' Set ObjMyFile = CreateObject("Scripting.FileSystemObject") ' LogFileName = ("paypal.txt") ' 'Open Text File.. If doesn't exist create it and append to it .. If exists just append to it ' Set WriteMyData = ObjMyFile.OpenTextFile(Server.MapPath("paypal.txt"),8,True) ' RowHeaderString = "" ' RowHeaderString = RowHeaderString & OrderID & vbTab ' RowHeaderString = RowHeaderString & Custom & vbTab ' RowHeaderString = RowHeaderString & User_ID & vbTab ' RowHeaderString = RowHeaderString & subscr_id & vbTab ' RowHeaderString = RowHeaderString & txn_type & vbTab ' RowHeaderString = RowHeaderString & subscr_date & vbTab ' RowHeaderString = RowHeaderString & Access_level & vbTab ' RowHeaderString = RowHeaderString & Groups ' WriteMyData.WriteLine(RowHeaderString) ' WriteMyData.Close
now that folder will need modify permissions for the text file to be written to but this is a good way to test if the ipn.asp page ever gets hit by paypal.
ITS REAL IMPORTANT THAT THE TEST FILE CAN BE WRITTEN TO OR DOING THIS WILL JUST CAUSE MORE ISSUES
To ensure the text file can be written to and permissions are correct for that folder you can make a new .asp in there and run this to see if the text file writing works
Set ObjMyFile = CreateObject("Scripting.FileSystemObject") LogFileName = ("paypal.txt") 'Open Text File.. If doesn't exist create it and append to it .. If exists just append to it Set WriteMyData = ObjMyFile.OpenTextFile(Server.MapPath("paypal.txt"),8,True) WriteMyData.WriteLine("the file was written to") WriteMyData.Close
Now, you can even change the location of the text file to place that does have permissions if you like.
This is what I would do if I was in there... then I would make some test payments using 1 cent and another paypal account (your allowed 2)
and see what happens
it is always possible the subscription code may have a bug in it. The last time I tested I only tested the single payment folder which worked perfectly. If I have time in the next couple days I am going to test the subscription stuff again. If there is something wrong I can cure it quickly.
The two routines share a lot of code in common. cwilliams38421.6488773148,
Timecard Entry: 3/25/2006 2:22:06 PM
billing, callbacks, Samaritanhealth.com continue dynamic html work on site, Doc Manager, draw up the syracuse iprs project on paper., Picked up mail and opened . Posted to accounts . Also Deleted the accts. Ans phones., contact eric mowers office, send directions, visio developed for fairpoint and emailed to karen. po for nortel k-is written. conf. with wesco on patch panel. s/w john adee with rp and dc., working lunch with howard go over work orders and some other stuff, CHRSolutions, Howard, lunch, GiSCO - SMC, Domain registration changes, Andy and Randy fixing IMC server again, support for DANC as a result., changes for bridge authority- go over info, Cost Guard Training, NB-CubPro.com e-mail support and troubleshooting, posted acct and did a detail of the checks. Ans phone and customer questions., Email/VoiceMail, worked on cancels again still not done and got a room for Mark Goff and emails to David Castrucci for Pauls schedule for Friday, vermont internet site production, Reset idle modems in the Watertown 2360 pool. (microcoms), worked with ben to learn about all the different modem pools as well as how to get into them to reset, and busy out different modems if users are having problems. Also, ben showed me how to add users to content filtering in syracuse..., email / voice mail, Lunch, Switchboard, billing calls, charting callbacks, Switchboard, billing calls, callback charting, continued discussion with Jeff on wireless pricing and direction, Working on problem with Dr. Rowe-Button's circuit in Canton. Diagnosing problem. Calling Bell Atlantic., Working on creating order for new laptop for corporate counsel and rational rose, Answered email, cleaned up my to do list, then sent Nic a report for the Sales and Marketing meeting on Monday.,
|