Home | Advertising Info129 USERS CURRENTLY ONLINE   
PowerASP
   Site Search Contact Us Sunday, May 29, 2022  

Active Server Pages ASP a directory of ASP tutorials applications scripts components and articles for the novice to professional developer. CJWSoft ASPProtect ASPBanner ASPClassifieds



Blog Entry: 3/25/2006 2:59:27 PM

Just installed software,  when I attempt to log on I get the following error (actually this is after I moved some of the include files to user).

Active Server Pages error 'ASP 0131'

Disallowed Parent Path

/gallery_admin/default.asp, line 25

The Include file '../dataconn_inc.asp' cannot contain '..' to indicate the parent directory.

 

What do I need to do to fix?

 

thanks.

, Best setup I recomend is just setting up a rig and making a workgroup. No real reason for a production machine to have any access to internal security when you think about it.

classic asp should be pretty easy to move, just set up new webs and dump the scripts in there. If you have 2 machines its always easier to look at the one while your building the other. Basically copy the setup and tada... the only thing you might need to remeber is components (if your using any) and thats usually not a very big deal either.

Point sort of being at some point your going to have to change that thing around and while its no fun you have to imagine now is a better time to bite the bullet and get it set up the right way. Your alternative is to mess around for hours and hours praying that you change domain wide security to the point that running NET apps on that domain controller works. Personally I wouldnt sleep well knowing I had just messed around so bad with the OS that I had no clue what bugs and security holes I might have accidently opened in the process. I wont even get into the possible things that might stop working on the rest of the domain if you fiddle with accounts like "Network Service"

Oh and if thats not enough reason to make you think about it, consider how hard it will be to try and rember what you did at 2AM 6 months from now if that machine takes a dive or some critical update undoes what you changed.

I feel for you though, trust me we have all been down that road once or twice. Get some sleep and in the AM the task at hand wont seem nearly as bad. You live and you learn, and you will definatly be WAY better off making things right sooner than later

,



Redirecting is not something ASPProtect does because you can
do that sort of thing using simple ASP redirects.


In all of these examples you are going to want to protect the pages you send these users to accordingly.
So that if they know the url they just cant go their directly without loging in.

 


Redirecting example..
This page will redirect admins or level 4 users to a certain page  and anyone else to
another page.
 
 
<%@ LANGUAGE="VBSCRIPT" %>
<!--#INCLUDE FILE="check_user_inc.asp"-->
 
<%
If Session("Admin") = "True" or Session("Access_Level") = "4"  Then
    Response.Redirect("sompage.asp")
Else
    Response.Redirect("someotherpage.asp")
End If
%>

 

 

Redirecting example..
This page will redirect level 1 users to a certain page. level 2 users to certain page, and anyone else to
another page.
 
 
<%@ LANGUAGE="VBSCRIPT" %>
<!--#INCLUDE FILE="check_user_inc.asp"-->
 
<%
If Session("Access_Level") = "1"  Then
    Response.Redirect("level1.asp")
ElseIf Session("Access_Level") = "2" Then
    Response.Redirect("level2.asp")
Else
    Response.Redirect("allothers.asp")
End If
%>

 

 

Redirecting example..
This page will redirect user "PistolPete" to a certain page.

 
<%@ LANGUAGE="VBSCRIPT" %>
<!--#INCLUDE FILE="check_user_inc.asp"-->
 
<%
If Session("Username") = "PistolPete" Then
    Response.Redirect("somedirectory/somepage.asp")
End If
%>


 
then just make sure the page you send the user to to also checks to see if the user is the right user.... to make sure others users can't access each others pages
 
<%
If Session("Username") <> "PistolPete" Then
    Response.Write("You do not have access to this page.")
    Response.End
End If
%>

 

 

etc etc etc.... these code snippets should point you in the right direction...

,

really all depends on the sql connection string you are using and the names of your sql user you are using...

you really havent described very much..

I'd double check all of it.. something is wrong

cwilliams38325.8892824074, You cannot use server mappath in the connecting string of the application. If you want to know why read my article.
http://www.powerasp.com/content/hintstips/physical-path.asp

Make your connecting string just like in my example.. do not use the oledb connection string either as it will cause other problems.

If you need to find out the path to the mdb file you can use server.mappath to get that info but do not put server mappath in the connecting string. See my article again.

then if the database folder has proper permissions and the path to the mdb file is valid it will work... otherwise you get useless errors,  its really that simple.

You also may want to download ASPTest from www.cjwsoft.com it is designed to show a person how to setup a working data connection., and when I go to your now.. its very fast again..,

Hi

I've tried almost anything here... I'm using an online SQL SERVER database with ASPProtect 7, and I can't login after my initial creation of the admin account.

It works fine with Access... I believe I have checked all the fields created by the sql statement (which was run with no errors),

What could be the problem here? could it be a problem that I run my local IIS against the online sql server?

sincerely,

Morten

,

It does not matter what directory name the ASPProtect files and folders are in but you cant go moving around critical file and folders like it appears you did nor is there any reason to.

All that is is saying is that the users folder, the password_admin folder, the scripts folder, the check_user_inc.asp file, and all the other files and folders that come with the system can be in any directory name as a whole.... but that doesn't mean you can go messing around with the files and folders in that directory.

I assure you 100's of users do not use "aspprotect" as the main folder name and they have no issues doing so.

Regardless, you need to explain in much clearer detail exactly what you did and what paths you used and what is where.  At this point I really do not know what is you did as your post was not clear to me.

You should also check that you have entered correct path info in the admin settings page area. The register page is one of the paths that geths set there.

,

I am trying to protect and ASP page written in Javascript.  The first part of the page goes:

<%@LANGUAGE="JAVASCRIPT"%>
<!--#include file="../Connections/connWINGAP.asp" -->

When I insert the aspprotect code it looks like this:

<%@LANGUAGE="JAVASCRIPT"%>
<!--#INCLUDE VIRTUAL="/GIS/WCGIS/GISProtect/check_user_inc.asp"-->
<!--#include file="../Connections/connWINGAP.asp" -->

and I get this error: 

Microsoft JScript compilation error '800a03f7'

Unterminated string constant

/GIS/WCGIS/GISProtect/check_user_inc.asp, line 2

I think I understand that your code is written in VBscript and that is why it is not working.  If this is the case, how can I switch to VB to execute your stuff then switch back?

Thanks,

Jess

,

This is a great article for newbies..

Hints & Tips when working with ASP
http://www.powerasp.com/content/hintstips/common_sense.asp

cwilliams38436.5949768519,

ASPProtect and PayPal are fully automated and ready to go.
Accounts will automatically get activated after payment.

We actually do not tell you to put nothing in the PayPal system for the IPN URL. Something has to be there or PayPal will not let you enable IPN. We actually tell you in you PayPal settings to turn on IPN and make up an IPN url because something has to go there. (I think we suggested making a blank asp page on you're site to send it to) It really doesn't matter where you send that but it might as well be a valid page on your site to avoid any 404 errors in your logs when a non ASPProtect payment comes in.

You see, we dont set that IPN url set in the PayPal system because each ASPProtect signup script directory (single payment and subcription) uses it own IPN url and that all gets set on the fly by the aspprotect system. There is a way to overide the defaul IPN url is what I am saying.

Also:
A  lot of people already have something there and we didn't want the ASPProtect system to interfere with things they already had going on.

cwilliams38421.530787037,

Hello,

If you are using ASPProtect Version 7 it is possible because version 7 supports html emailing. In any other version it would require some custom coding to add html email support. You would have to sort it out by experimenting and editing the emailing code. All the email methods have documentation on the web in some form or another showing how to send html emails.

Also,
sometimes depending on the email component being used and the email client reading the email a link in a text based email will get hyperlinked automatically. For example outlook usually will do that, but it doesn't always in other situations.

Lastly, we have special upgrade pricing should anyone want to upgrade to ASPProtect Version 7. It really has a ton of great features.

Best Regards,

Chris Williams
www.CJWSoft.com

cwilliams38415.6414236111,

Hi

I have purchased the Standard version about a week ago. Its a great script.

I have been able to select  uploaded banners from day one... but just now i dont seem to be able to select...

i know its hard for you to trouble shoot with such little information.. but i had to ask..

Should i maybe upload the site again ( but same the database first)?

regards

Domenic

Sydney, Australia

 

, I dont get it.. I am still looking into it..

I think this has something to do with your original experience when things would work and then not work.

something weird is going on
,

Is there a simple way to upgrade from 7.x Lite to 7.x Full?  I was testing out the software and I just purchased it.  I have made some look and feel changes to the lite version (ie: login page), but no look and feel changes to the admin section.  Is there certian files that I can add to have the full version without shorting myself features or functionalbity? 

Thanks

,

Sounds to me like you got some bad databases or something. Or your trying to open a database with too old of a version of msaccess.. not sure

Everything is stored in one database. And yes there is more than just the users table.

Also,  removing the "temp" password should be a piece of cake.

Email me for a new copy of the download file ? Use the contact from on the cjwsoft site. Please tell me your order details as well so I know who you are.

 

, i was only kidding!! ,


Access to some sections of the forums must be requested.
Please Click on the following link and read all of it carefully.

http://support.cjwsoft.com/

 

 

cwilliams38291.6121296296,

the menu file.. "menu.asp" or something... just follow the logic of the code to find things like that. Look for server side include files and what not in the source code.

This is a good article on figuring out what pages to edit as well as other things.
http://www.powerasp.com/content/hintstips/common_sense.asp

If it was working and you changed code you could have possible messed up how all of that works... you may need to revert back and be really careful as you make changes testing every step of the way.

cwilliams38308.0683449074, I do not what see what this has to do with anything I sell ?

Those errors are all related to pages that have nothing to do with my ASP applications and code.,

I have noticed that during the file import, that some of the pictures get messed up.  I can import aroun 150 pictures into different albums, say 3 albums with 50 each.

I have noticed however that some of the get messed up.  What is happening is...the thumbnail will be correct, but after you click it the picture that shows up is one form a different album.

Any cure for this?

,

Glad it worked

cwilliams38406.5549074074,

Hi there, I am not exactly what you mean when you say "moved some of the include files to user"

are you saying you are moving files around ? I am not sure what you mean there.

but.. the parent path issue is described in detail here

http://support.cjwsoft.com/code/moreinfo5-1.htm


Having is enabled is actually a requirment of the photo gallery application as stated on the web site
http://www.aspphotogallery.com/aspgallery_pro.asp

You can certainly still use the apllication but as that article says you will need to change any file includes to virtual includes so they will work with parent paths disabled



 

,

Hey, I run a business and I will not have things like that mentioned in these forums.

,

can add photo album but after i upload a pic, nothing shows.

where do i look to research why pics aren't showing in the albums

,

I wonder why the banners in ASPBanner 8.1 are moving from one place to another when opening my site www.helserevyen.no in a Mac Safari browser and click on refresh?

Can you take a look at my site and response?

,

You not getting a blank page.. you getting an error. You just can't see it because it appears you edited the page background to black.

error '80040211'

/aspprotect/scripts/emailing_subs_inc.asp, line 174

,

Yes worked fine

thanks

,

Humm, I can see all those pages loading just fine at both domains so you got me pretty confused at this point as you just said they didnt load.

regardless, the data connection tests are failing with both of them.

so let me ask you again how are you setting permissions on the database folders?

, We have upgraded to IIS 6, but as I recall  aspbanner continued to work fine for at least 3 months after the upgrade.  I would like to reinstall, but I cannot find the zip file.

Cookies are turned on in my browers, I've tried both Internet Explorer and FireFox, niether stay logged-in.

Jason S.
,

ASPProtect v7.x runs on Microsoft IIS servers only.
That means Windows XP Pro, Windows 2000 server and Windows 2003 server. The web server must have ASP support enabled and support Data Connections. 99% of them do as it's a pretty normal thing, but you should ask and make sure your hosting plan supports it.

ASPProtect can use a Microsoft Access Database or Microsoft SQL Server as it's data source.  We provide the access databases and everything you need to create the SQL database, however customer's using Microsoft SQL Server are required to have SQL Enterprise Manager and SQL Query Analyzer in order to setup and maintain the SQL database. Other scenarios are possible but we do not support them.

ASPProtect v7.supports 13 different emailing methods and components so chances are you will have no problem finding one that will work for you.

CDONTS
CDOSYS
ASPEMAIL
ASPMAIL
ASPSMARTMAIL
DUNDASMAILER
JMAIL
SASMTPMAIL
Bamboo Mail
Simple Mail
ASPQMail
QuickSoft EasyMail Objects
OCXMail


We extensivley support all implemenations of CDOSYS which is installed on all the servers by default. We also support outgoing SMTP authentication requirements. If you can not send emails from the application using one of our 13 methods and you have an ASP solution that can send an email on your server we will work with you to make sure the application can send emails.


FINALLY

ASPProtect v7.x does not run under Chillisoft ASP. That means it does not run under Unix, Linux, Apache, etc etc. ASPProtect v7.x can not use a MySQL database. MySQL and Microsoft SQL are not the same thing.

If you are wondering if your web server runs Windows or Linux you can try using the header check here.
http://www.port80software.com/support/p80tools

Be warned however it will not always be accurate because some people cloak that information or show something different than what they are running to trick potential hackers. With commerical hosting though the the header information is usually accurate.
, Hi, lets start with about when did you purchase and download the application so I know what version of the code you have., Actually, as far the "aspprotectnet.dll" file goes it makes sense because of the following.

The "aspprotectlicense.dll" is something we do not provide the source code for. We also do not compile it in "debug" mode because you not want dll's running in "debug" mode in a production environment and we also do not want that dll in debug mode because of reverse engineering reasons.

Now, that being said that DLL is no different than any other 3rd party dll "so to speak" that you would use in a project. Many of which will not be in debug mode and you will also not have the source for.

"Microsoft.Data.Odbc.dll" being an example


Regardless, there must be a way to do what your trying to do. I am just not sure at the moment. It is nothing anyone has brought up before and I personally have never had any issues like that when I work on the application so I am just not sure.

It probably has something to do with the way you set up your project.,

I am using cdont to send email. what do i have to do send email to other display my full name instead  of email address. In other word I want to see first name last name  in their email client instead of email address.

thanks for your help

 

 

, ok thanks,

Thanks.

Nick

, do you have the url path to the registration page set correctly in the settings cause not having it there would do that ? ,

I do not have any programming knowledge and have what might be a simple question.

I am having a hard time getting my hosting company to modify the rights on the data folder. They state they support ASP and access databases however this is the response I got when I requested the modify permissions set for the internet guest account:

Were the rights changed on the data folder?  No, we do not manage rights to folders.

My question to you is: Doesn't supporting asp require those permissions be set on the database folder or can asp (not just aspprotect) work without those rights modified?

Thanks

,

Yea.. that error is totally because the asp pages are looking for fields in the database that are not there.. and causing a nasty loop.

 

if using the option pack you must go over the directions very carefully...
Make sure everything works step by step..

After upgrading to option pack code you either need to upgrade the database from the base system or use the newer database provided with the option pack.

Then.. you want to test every function of the groups.. if pages act slow and seem odd... especially the groups page and edit users page..
Then your not using a valid database. Either you didnt upgrade the old one, are not using the new one, or your connecting to an older verison by accident and not realizing it.

That's pretty much it...

cwilliams38300.5555671296, I really can not support it because you made that modification and it probably directly relates to the issue your having.

There are many issues that can be caused when dealing with encryption. Sometimes the encrpted passwords can end up with problematic characters. etc etc Maybe the users are changing there passwords to ones that do that... after you fix them.. Its hard to say

I know as I had to sort things like out when I designed version 7 which has built in encrpytion.

It could be anything really.. since you made changes like you sorta need to figure out what is backfiring. There has to be a reason.

Chris ,


Timecard Entry: 3/25/2006 2:59:27 PM

payroll and spreadsheet, printed timecards and sent out emails for the ones not submitted yet, evening meeting, Daily reports, 45 Miles : Plattsburgh - Vermont Internet, Nortel Network Paul, Final Drawing of Network, phones, radlog, voicemail, dial up issues, , E-mail organization, Working on CostGuard integrations, phone calls and email Amy and web billing, Batching and answering phones. , VM messages, Not too busy, Answered phone calls and worked with other tech related stuff, and took a look at the emonitor machine to see if I could get wav's to play in MSIE., voicemail, misc, worked on new PC Bundle site for Steve, RIVERREALTY DEVELOPED, ODMLS DBConv. final., work on letter for web site rate increase,finished, Dean richards- info for webs ite create work order for ti bait store check voice mail email go to staples for supplies, go to post office for postage start copying Seth crmmins files for beth and sales rep, meet with Dave Catrucci et al. *lunch, Reports at home, then travel then hooked computer up to the network at Clayton for more reports, phones , invoices, etc., Followed up on credit apps. , Match Walker packing slips to invoices, wan projects, Cleaning up my mess., reformatted machine and began setting it back up, Look for Internet MLS systems for Chris, Travel to TaskForce, dail reports, Darrel,

   Active Server Pages Rule The World
Contact Us  
All artwork, design & content contained in this site are Copyright 1998 - 2022 PowerASP.com and Christopher J. Williams
Banner ads ,other site logos, etc are copyright of their respective companies.
STATS Unless otherwise noted - All Rights Reserved.

Active Server Pages ASP a directory of ASP tutorials applications scripts components and articles for the novice to professional developer. CJWSoft ASPProtect ASPBanner ASPClassifieds www.aspclassifieds.com, www.powerasp.com,www.cjwsoft.com,www.aspphotogallery.com,www.codewanker.com,www.aspprotect.com,www.aspbanner.com