|
Welp, i'm relatively new to linux, and i just got apache installed and running for my website. I'm wondering if there's a way to blovk recursive downloading. I've blocked wget, but it's nto working...people are changing the user-agent variable and spoofing it as Ie 6.0
does anyone know a way to prevent recursive downloading altogether?
thanks 
*.*
cin >> knowledge;
|
|
|
|
|
Generally... no. If a normal web browser can see it, a site mirroring tool such as wget --recursive can see it too.
You could always try mod_throttle for Apache to set limits on how quickly the site can be mirrored, but a persistant user will still always be able to get through.
- Mike
|
|
|
|
|
yeah, i was thinking about using mod_throttle, but unfortonately, there's a bandwidth cap on my server (i live in a dorm room, people on campus get great speeds, but anywhere off campus...slowness) so it would be hard to gague what the timeouts should be.
:-/
*.*
cin >> knowledge;
|
|
|
|
|
i coded submenus in javascript for a homepage. they work great on every browser and platform except for ie on a mac. i've debugged it and can't figure out why it still doesn't work on a mac. would love to tap javascript gurus out there. you can take a look at www.csudh.edu to view the source code.
thanks in advance,
donna
|
|
|
|
|
I don't have a Mac handy to look at the result. What problems are you seeing?
I've found in some cases you must explicitly set height and widths for elements before it looks good on a Mac
|
|
|
|
|
the javascript submenus don't align correctly to the top navigation bar. they fall a few inches below. it aligns perfectly in other browsers though.
|
|
|
|
|
Ran into this myself. I had to position the menus relative to a fixed element.
www.spdesign.net
|
|
|
|
|
Hi all
i have the below functions which i use to validate a login, albeit not very well !
this is called when the user submits the form, all it does it checked they have entered something
what i need to do is to throw out an error when a user enters an alpha (a-Z) character as well
but im getting a bit stuck, can ne1 point me in the right direction here ???
thanks
si
function isblank(s)
{
for(var i=0; i < s.length; i++){
var c=s.charAt(i);
if((c!=' ') && (c!='\n') && (c!='\t')) return false;
}
return true;
}
function verify(f)
{
var msg;
var empty_fields="";
var errors="";
for (var i=0; i < f.length; i++) {
var e = f.elements[i];
if ((e.type == "text") || (e.type == "password")) {
if ((e.value=="") || isblank(e.value)){
empty_fields += "\n "+e.name;
continue;
}
}
}
if (!empty_fields && !errors) return true;
msg = "___________________________________________________________\n\n"
msg += "The login action could not been performed because of the following error(s).\n";
msg += "___________________________________________________________\n\n";
if(empty_fields){
msg +="The following required field(s) are empty:" + empty_fields + "\n";
if (errors) msg+="\n";
}
msg+=errors;
alert(msg);
return false;
}
|
|
|
|
|
Have you looked into using Regular Expressions?
Just because I don't care, doesn't mean I don't understand.
- Homer J. Simpson
|
|
|
|
|
use in this way, first store alpha charcater in string, and then chk character in this string.
function isblank(s)
{
var c;
var chkstring="a,b,c,d,e,f....";
for(var i=0; i < s.length; i++){
var c=s.charAt(i);
if(chkstring.charAt(c) > 0)
{
alert("Can not enter a-z messages here");
return false;
}
}
return true;
}
Himadrish Laha
|
|
|
|
|
You should start by correcting your basic approach: instead of looking for errors in the input you should be testing for correct input and giving an error message if the test fails. See this article on data validation
|
|
|
|
|
How can I count the number of online users on my site? I have implemented my application as follows. Whenever a user logs in, I increment the count field in my database by 1 in Session_Begin and on Session_End I decrement it by 1.Though the code works fine in normal circumstances, I noticed a few anamolies:
1. If the user refreshes his browser, the Session_Begin is called again and the counter is incremented again. To overcome this, I used cookies. The first time the user logs in, I create the cookie. When the user refreshes his browser, it checks if the cookie exists, if it doesnt it treats it as a new request and updates the counter accordingly.
2. The problem arises on log out. Whenever the user refreshes his browser, Session_End is called that many times, and my counter is decremented more than once. How can I get Session_End to run only once for each instance of the browser?
3. I'm using Forms Authentication and on Session_End I want to call FormsAuthentication.SignOut since the user can still access the pages after the session ends,causing a new session to be started. But this function does not work in Session_End.
|
|
|
|
|
How about creating a dynamic array (ArrayList for instance) of the Session IDs? On Session_Begin, add the ID to the array if it doesn't currently exist, on Session_End, remove the Session_ID. TrimToSize each time and use the Count to get the number of active sessions.
I seem to remember a similar solution in traditional ASP using the Dictionary object...
Just because I don't care, doesn't mean I don't understand.
- Homer J. Simpson
|
|
|
|
|
Use application variable instead of session variable. Now U become free from session. Now check if page is refreshed by session variable. If the browser is refreshed and new session start then chk it on higher version browser, or better ie 5.5 and netscape 7.0, and I think this problem will not exist. If still exist then you have nothing to do.
But I am sure the problem will not exist.
Himadrish Laha
|
|
|
|
|
How can I keep track of the number of online users to implement concurrency metering? So far I have implemented as follows:
When a user logs in, I add an entry to a Status table in the database and store a cookie in his machine.Every time he refreshes his browser, it checks if the cookie exists.If it doesnt exist, it treats it as a new login and updates the status table.
Now I need to remove/decrement the status by 1 when the user logs out. I included this code in Session_End. But there is a problem, I need to call this fucntion only when the user closes his browser. If the user leaves his system idle or refreshes his browser again, Session_End is called twice and the status is decremented by 1 two times, which is incorrect.
How should I implement concurrency metering? Is there any other way other than using session, since most users would probably log out by closing the browser instead of clicking the Log Out button.
|
|
|
|
|
Hi all,
I'm a bit of a newbie to HTML, and I'm hoping the answer to this question is easy!
What I'd like to know is, is there a way to create a frame in an HTML file whose content is also specified 'inline', rather than by the src attribute e.g:
<html>
...
...
<frame>
This is the content of the frame
</frame>
...
...
</html>
The reason I ask is that I'm creating a page dynamically with ASP and I'd like the bottom half of the page to be a scrollable frame. It would be a lot easier to create the frame if the ASP code within the frame could access the variables in the top half of the page, which doesn't seem possible if the frame was generated from a seperate .ASP file.
Any suggestions would be greatly appreciated!
TIA,
Pete
|
|
|
|
|
I am a third yr computer student and I have a 6wk project coming up and I was thinking coding a p2p file sharing application, I was just wondering if anyone has any experience in writing any file transfer programs, If anyone could tell me if a simple implementation is difficult or could point me in the right direction of a place where I could find information on writing a simple file sharing p2p app… also I was thinking of writing it in java… anybody any comments??????????
|
|
|
|
|
Hi,
I'm not any kind of expert at P2P, but I'd say that implimenting even a /really/ basic app in 6 weeks would be pretty ambitious, even if you pulled a lot of all-nighters.
However, if you're still thinking about it I'd reccommend looking at the source of one of the open-source Gnutella-based servents. The developer lists for those servents would also be helpful I imagine.
Hope that's some help,
Pete
|
|
|
|
|
It is not a good practise to use others code, specially for exam. But U can take a help. If you need any help to transfer file using ASP technology, then I can help you. You may mail me at himadrish@yahoo.com. I have very good codes which helps you a lot to transfer file over the internet or intranet.
Himadrish Laha
|
|
|
|
|
Hi...
I am using cookies in my website to identify users... every user has username and password... I have an option for making the user remember his name...
Some users where simply able to modify the saved Cookie and change the name to use other user's names!!
The username in that case must be the same number of Characters as the stolen name...
How can Iprevent that in the most simple way?? is there a way to make the cookie more secure and prevent users from editing them??
I will appreciate a quick response from anyone of you...
Regards to all...
|
|
|
|
|
MatrixUndone wrote:
I am using cookies in my website to identify users... every user has username and password... I have an option for making the user remember his name...
Some users where simply able to modify the saved Cookie and change the name to use other user's names!!
The username in that case must be the same number of Characters as the stolen name...
How can Iprevent that in the most simple way?? is there a way to make the cookie more secure and prevent users from editing them??
That isn't really possible - cookies are just a text a file on the end users machine and they should be allowed to edit them if they really want to.
What you really need to do is provide extra checks to ensure that the cookie you wrote was the one that gets sent back later on.
You could use a hash of the username and password (and/or other suitable information) and store that in the cookie as well - this can be rechecked on your end quite simply, and if they don't match, then force the user to log in as normal. Whatever you do, the hash has to be generated from at least some information the "evil" user has not got access to - such as passwords you store in a database on your site.
If you generate a hash from just the cookie information, then an "evil" user can generate it too, using the information he wants in that cookie.
If you're using ASP.NET, investigate Forms Authentication, as this can provide the authentication facilities you're looking for.
--
Ian Darling
"The moral of the story is that with a contrived example, you can prove anything." - Joel Spolsky
|
|
|
|
|
Dear Ian
Thank for the reply...
is there a way or a simple script that I can use to encrypt cookies??
|
|
|
|
|
As he said, if you are using ASP.NET, you can encrypt your ticket using the machine key configured in your machine.config or Web.config script (the default is randomly generated). See my article, Role-based Security with Forms Authentication[^] for some brief details.
If you're not using ASP.NET, you have to decide whether to use a javascript file to hash the value on the client side, or to use some ASP code (or COM object) to do it on the server. For MD5 hashes, there is a myriad of examples on the 'net. To do this on the client, there's many javascripts you can use. According to a discussion I was checking out the other day (can't remember if it was here or /.), Yahoo! mail does this on the client before sending the password if the user opts to not use HTTPS (HTTP over SSL) - and who knows why anyone wouldn't want to use HTTPS! 
-----BEGIN GEEK CODE BLOCK-----
Version: 3.21
GCS/G/MU d- s: a- C++++ UL@ P++(+++) L+(--) E--- W+++ N++ o+ K? w++++ O- M(+) V? PS-- PE Y++ PGP++ t++@ 5 X+++ R+@ tv+ b(-)>b++ DI++++ D+ G e++>+++ h---* r+++ y+++
-----END GEEK CODE BLOCK-----
|
|
|
|
|
Thanks Heath Stewart!
Can you please explain to me more on what should I do?? and if you can write down the JavaScript you're talking about and how to use it with Cookies... I will be grateful!!
Thanks already!
|
|
|
|
|
You should discover this for yourself. Just download one of those javascript files that I gave you a search link for. If you look on those pages, most should contain examples of what to do. Essentially, you just hash the password before you submit a form and send the password hash, or store the password hash in a cookie using client-side javascript. Just make sure your client script and the server use the same hashing algorithm, such as MD5 or SHA1 - both mathematically irreversable (known as a one-way hash or digest).
-----BEGIN GEEK CODE BLOCK-----
Version: 3.21
GCS/G/MU d- s: a- C++++ UL@ P++(+++) L+(--) E--- W+++ N++ o+ K? w++++ O- M(+) V? PS-- PE Y++ PGP++ t++@ 5 X+++ R+@ tv+ b(-)>b++ DI++++ D+ G e++>+++ h---* r+++ y+++
-----END GEEK CODE BLOCK-----
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
