|
Hello,
Currently I have an ASP based login system where once the user's credentials are checked, it cookies them with their username and password. On every protected page an include file revalidates that information and redirects the user if it doesn't match the information in the database. Instead, after verifying the user's credentials, could I set a session variable and then just check for that session variable being set in the include file? Are there any possible security issues that could arise from this setup (I'm aware of some of the ones in my current setup)?
Thanks,
Aaron Stubbendieck
modified 12-Jul-20 21:01pm.
|
|
|
|
|
You can set session variables as such:
<br />
Session("userName") = strUserName<br />
and then access the variable as such:
<br />
strUserName = Session("userName")<br />
and you can check it within your include as such:
<br />
If Len(Session("userName"))=0 Then<br />
Response.Redirect "login.asp"<br />
End If<br />
Or have a boolean variable:
<br />
If Not Session("isLogged") Then<br />
Response.Redirect "login.asp"<br />
End If<br />
You can acces Session variable from anywhere in your ASP app.
theJazzyBrain
Wise is he who asks good questions, not he who gives good answers
|
|
|
|
|
Thanks, I'll try that out.
Aaron Stubbendieck
modified 12-Jul-20 21:01pm.
|
|
|
|
|
Under normal circumstances the Session is stored using cookies anyway. But using the Session object is easier. Certainly we have used Session for login validation on each page, it works fine.
I would recommend not storing the password and username pair in a cookie unless you are using some devious encryption. Even then, rather don't.
regards,
Paul Watson
Bluegrass
South Africa
Brian Welsch wrote:
"blah blah blah, maybe a potato?" while translating my Afrikaans.
Crikey! ain't life grand?
|
|
|
|
|
Thanks, I was aware that cookies would be used anyway but I'm glad to hear its a practical approach. Storing the password in the cookie was my may concern since it is transmitted plain text.
Thanks,
Aaron Stubbendieck
modified 12-Jul-20 21:01pm.
|
|
|
|
|
How would I go about serializing a method call in a SOAP format without calling a web service? I want to queue these calls before transporting them, so I want to call a method on a proxy, and have the proxy give me the SOAP document that it would normally POST to the web service.
|
|
|
|
|
I don't know a direct answer to your question, but you could look into building your own webservice proxy and reading the SOAP standard so that you can encode it yourself. Might be a bit of overkill though.
Why are you wanting to do this?
regards,
Paul Watson
Bluegrass
South Africa
Brian Welsch wrote:
"blah blah blah, maybe a potato?" while translating my Afrikaans.
Crikey! ain't life grand?
|
|
|
|
|
I can't use the web services directly as the user is normally only online once or twice a day. I plan on using a queue of method calls that are executed against the server side object when the user does connect, and are then committed on the client side if the server operation was successful.
I think that for convenience, if I can get it right, it would be best to call a method on a SOAPSerializer and have that read the WSDL and generate the XML string which I can then queue.
Hallelucination - when you think you see God
|
|
|
|
|
since I'm not sure exactly how to "word" the question properly for the subject I put some keywords ...
I'm using an iframe as a placeholder for some html, selected from a menu; a very basic configuration.
I'm trying to remove the frames from my pages and I think that the replacement is the iframe, which is working fine.
I can use some basic javascript to load a page into my iframe, when the user click on some text.
<p id="load_load_musique" onclick="load_musique()" >Musique</p>
and
...
function load_musique()
{
parent.document.getElementById("content_id").src="musique.html"
}
...
The question I'm really asking, is that I want to make the clickable text look like a normal link, with the cursor, I know that I can do this by adding onmouseover, onmouseout, which is working ok, but seems wrong. and Can I change the cursor ?
Thanks for anything...
Max.
Maximilien Lincourt
"Never underestimate the bandwidth of a station wagon filled with backup tapes." ("Computer Networks" by Andrew S Tannenbaum )
|
|
|
|
|
You have to use styles.
I think that there is a style that can be configured as such:
<br />
<span style="cursor:hand;">Clickable text</span><br />
Check the MSDN documentation for further information but I think that this works...
theJazzyBrain
Wise is he who asks good questions, not he who gives good answers
|
|
|
|
|
Would you recommend any tutorial/reference on how to install and enable HTTPS with IIS? I know how to use "makecert.exe" to generate a test certificate for testing. I know how to use "Network Monitor" to sniff for passwords and stuff. I know how to bring up "Certificates" snap-in from "MMC" (Microsoft Management Console). But then how do I proceed from tehre..? There're many folders under "Certificate" snap-in. For example: Personal, Trusted Root CA, Intermediate CA... etc. None of which appears to be appropriate for the purpose of assigning a certificate to my web server. How do I proceed from here to enable SSL for my site?
Thankyou!
|
|
|
|
|
Hello Friends,
Output of my ASP page can be properly printed using Landscape format.
So, I would like to provide a Print button on my ASP page, which on clicking should open a Print dialog box with its 'Orientation of Page' property set to 'Landscape', OR if this is not possible then directly starts printing the page with default property except orintation which should get set to
'Landscape'.
Can anybody tell me is this possible in ASP?
Thanks in advance.
Pranoti
|
|
|
|
|
You can't currently. For one, any browser that lets a page print without prompting the user is a bad browser. There is also no way (without using ActiveX, Java, etc.) to change the initial values in the Print dialog when using the print method.
Even with CSS there is no way.
Your best bet is to have a blurb at the top of the page to tell the user what to do. You can use CSS to hide this blurb when printing, too. Lets say your stylesheet to which your linking is defined like so:
body { font-family: arial; }
.blurb { border: 1px solid black; background-color: gray; color: red; }
@media print
{
.blurb { display: none; }
}In your printable page, have something like this at the top, right after body:
<div class="blurb">To optimize your print-out,
click the File->Print menu in your browser, click on Properties,
then select Landscape. Click OK twice.</div>
-----BEGIN GEEK CODE BLOCK-----
Version: 3.21
GCS/G/MU d- s: a- C++++ UL@ P++(+++) L+(--) E--- W+++ N++ o+ K? w++++ O- M(+) V? PS-- PE Y++ PGP++ t++@ 5 X+++ R+@ tv+ b(-)>b++ DI++++ D+ G e++>+++ h---* r+++ y+++
-----END GEEK CODE BLOCK-----
|
|
|
|
|
Land record in format using in India specially in Uttar Pradesh.
|
|
|
|
|
Nice and...
A student knows little about a lot.
A professor knows a lot about little.
I know everything about nothing.
|
|
|
|
|
I have a fields called validfrom and validto
something like
SELECT * from table where form.date1 and form.date2 fall between "VALIDDFROM" and "VALIDTO"
So I have a validfrom date January and a validto date of december in the db in same record
but my user types in feb to march
as
feb - march falls inside the jan - dec
that result is pulled to the broweser?
- Michael Fasani
www.michaelfasani.com
|
|
|
|
|
if U need to make it in february or january then used function date("m") or goto http://www.asp101.com/articles/john/expirationdate/default.asp, u find everything. If not find then mail me at himadrish@yahoo.com, else take sunbath in bay area. BE COOL PLS.
Ur site is not running
Himadrish Laha
|
|
|
|
|
Hello,
I would like to write a page with c# in which the user can upload a file to the server. When I tested this on my machine it worked, but when the page was tested on the server, the user could not upload the file. It said access to the folder on the server was denied. Does anyone know how to set permissions so that any user can upload to the server from this page?
Thanks,
RC
|
|
|
|
|
Hello,
I had the same problem a few days ago!
The user on the server that executes the scripts doesn't have write acces to the directories. I don't think that you can change the permissions directly, you'll have to ask the server administrator to set permissions.
Hope this helps.
A student knows little about a lot.
A professor knows a lot about little.
I know everything about nothing.
|
|
|
|
|
I need to be able to import text files and manipulate them
|
|
|
|
|
What's your point?
NATHAN RIDLEY
Web Application Developer
email: nathan @ netlab.com.au
[remove the spaces before and after the @ symbol]
|
|
|
|
|
Fascinating. What's your question?
- Mike
|
|
|
|
|
Hello,
I'm building a site which requires a user to login. I've seen pages where the user is prompted to enter the username and password in a modal dialog.
I want a similar solution, but I can't seem to find any documentation on this subject.
Does anyone know a tutorial or something?
thanks
A student knows little about a lot.
A professor knows a lot about little.
I know everything about nothing.
|
|
|
|
|
I think you are referring to the standard authentication dialogs which browsers pop up in response to a page that uses an HTTP authentication scheme (not JavaScript), the most common of which is called "Basic Authentication" (there's also "Digest Authentication").
This requires configuration of the web server, or a server-side script that accesses HTTP headers directly.
- Mike
|
|
|
|
|
thanks for your answer!
A student knows little about a lot.
A professor knows a lot about little.
I know everything about nothing.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
