|
Nathan Ridley wrote:
Any ideas on how you would prevent the user from being able to re-post that data?
Note to all web application developers (myself included) - if the user hits back and resubmits form data, handle it in the manner a user would reasonably expect! This means in your case accepting the login again and sending the user to a suitable start page.
In other cases, this might mean entering the web application part way through the process, refilling in details where necessary, checking the updates being made to any databases aren't duplicated or corrupted, and so forth.
That's hard work, yes, and requires that you've designed your application and its flow before you go and write half a million lines of ASP.NET code for BoondoggleApplication 1.0.
But if it comes off, your application will be more robust in the face of the random button clickers, and you won't be asking stupid questions like "How do I disable the back button in Internet Explorer", which occur here with depressing regularity. Plus, your users will love you (or at least the next best thing, which is not wish you were killed under the weight of a thousand copies of W3C specs printed using 72 point fonts and very heavy paper.)
Browsers have features like history, back, and forward for a reason, and making your web application gratuitously broken when those are used is unacceptable!
BTW, your solution won't work. All you're doing is stuffing more stuff into the users history for them to click back and forward through  .
Ian Darling
"The different versions of the UN*X brand operating system are numbered in a logical sequence: 5, 6, 7, 2, 2.9, 3, 4.0, III, 4.1, V, 4.2, V.2, and 4.3" - Alan Filipski
|
|
|
|
|
what i do is set a cookie or session var that tells me they are logged in ... any page that needs it will check for it
if they try to log in again i simple dont let them ... i redirect them back to where they came from
"there is no spoon"
biz stuff about me
|
|
|
|
|
I have installed visual studio.net 2002 (professional)successfully.After i created a virtual folder and a subweb to create a new ASP.NET web application.But when i want to create the web application the following error message appeared: The file path 'g:\inetpub\wwwroot\webfolder\wavfff\cswaa2' does not correspond to the URL 'http://Localhost/webfolder/wavfff
/cswaa2'.The two need to map to the same server location.HTTP.
ERROR 500: server error.
I am using a single computer which connect to the internet by a modem and a phone line.
I want to create a web project to download it on my own web service which i build it by using the Hosing Pane in the visual studio.net.I am using the NTFS system(for the first time) to define the IIS and its components without any problems.I didnt find a solution for this problim for a long time so i will be very happy if some one help me.
|
|
|
|
|
This problem has been addressed several time. Use the search
|
|
|
|
|
Hi,
Have any of you guys had any experience with hardware SSL.
I need to research this. Specifically the performance over non-encrpyted standard IIS.
If I turned SSL on in IIS (software!) it will probably kill performance of the web application. Is this not present with the SSL solution? can it encrypt as fast as it receives the data?
Any thoughts on load-balancing with SSL? I understand for SSL to work you need an SSL Session (i.e encrpytion keys being used specific to the session) So transfering from server to server in a server farm probably will not work. Unless the Hardware solution registers the session against a particular server in the farm?
Thanks - James
James Simpson
Web Developer
imebgo@hotmail.com
P S - This is what part of the alphabet would look like if Q and R were eliminated
Mitch Hedberg
|
|
|
|
|
I am now venturing a little further into web security than I have before, and am experimenting with using the Certficate Server on our dev box to issue a server certificate to enabele my test client to make an SSL request.
Our public server certificate, on the live web server, is issued by Verisign, and a colleague tells me the difference is that the local one is not signed. It makes more sense to me that it isn't signed by Verisign, but is signed by our server.
What gives?
Memes don't exist - tell your friends
|
|
|
|
|
Your test server probably is not in the list of trusted authorites. Not a big problem, some clients might show dialog box asking user if they "trust" the authority that issued the cert., or may be have to import certificate manually (sorry, i don't remember the exact scenario, i did it couple years ago)
Edward
|
|
|
|
|
Hi All
I am trying to launch a html file from with another and then return to the first html file to continue executing the rest of the file.
Does anyone know if this is possible, or can help with the code.
Many Thanks
Jaco de Bruin
|
|
|
|
|
|
What is the problem with OWC10 ExportPicture method?
I am using OWC10 on a Windows 2000 Server with IIS 5 to generate charts using the (ExportPicture method) for display on a website. Most of the time, everything works as expected.
Sometimes however, the charts do not display correctly. Sometimes the labels are missing and sometimes there is nothing but a white background with a one-pixel black border around it. The image is the correct size and on the times when only the labels are missing, the chart is in the correct position, as though the labels were present.
It only seems to happen when the server is logged off. As soon as someone logs in, the problem goes away and the charts start appearing correctly. Of course, having just said that, it now isn't working when I am logged in!
Here are some examples: The Good[^], the bad[^] and the ugly[^].
I sent a copy of the source code to Microsoft and they examined it and agreed that I was doing everything correctly. The only advice they could give was to buy a new video card, because apparently 8mb video memory and 512 mb RAM on a server isn't enough to generate a 10k GIF image. Ridiculous! Anyway, I bought a new 32mb video card and of course it still doesn't work.
After this sugestion failed, they refunded my $250 support charge and admitted they were clueless.
This has been an intermittent problem for over 18 months now and still it is not fixed. During that time, I have installed a new server and upgraded from OWC9 to OWC XP, with still the same results.
Things I have tried:
- Setting priveleges on all Office folders to Everyone/Full control.
- Changing the IIS Application Protection from Low/Medium/High
- Installing a new 32mb video card (Microsofts laughable suggestion)
- Installing the latest version of DirectX (Microsoft Suggestion)
- Upgrading all the drivers that I can lay my hands on
- Installing the entire website on a different machine
- Using GetPicture instead of ExportPicture
- Leaving the server logged in with administrator priveleges. (NOT a good idea!)
- Reboot the server whenever the images start to show up incorrectly. Now, while this (mostly) works for a short time it's not a useful solution...
Things I have not tried:
- Purchasing a piece of software that actually works and then re-writing the relevant parts of the web-site.
If anyone has ANY idea what is wrong with this component or my setup or whatever, please let me know!
Thanks.
|
|
|
|
|
With a lot of testing of my client program I eventually get an unhandled soap exception. When I debug the app, the gist of the message is that a timeout occurred on establishing a session with the service and that possibly the max number of channels have been reached. If I go to the server and restart IIS, every starts to function again. I suspect that there is some method I need to invoke when my client application closes so that the object that was instantiated when it started is properly destroyed. The ctor of my mainform class instantiates the proxy class for the web service, and it is assigned to a member variable to be used in other methods of the form. I'm concerned that I need to call a dtor or some other method in order to ensure that everything gets cleaned up correctly. Thanks for any ideas.
Chris Meech
We're more like a hobbiest in a Home Depot drooling at all the shiny power tools, rather than a craftsman that makes the chair to an exacting level of comfort by measuring the customer's butt. Marc Clifton
VB is like a toolbox, in the hands of a craftsman, you can end up with some amazing stuff, but without the skills to use it right you end up with Homer Simpson's attempt at building a barbeque or his attempt at a Spice rack. Michael P. Butler
|
|
|
|
|
It doesn't seem like a client side problem, probably the server is the one to blame.
Check lack of what resources causing it (too many open sockets, database connectens etc.).
Edward
|
|
|
|
|
Hi
i have a login script, but after the user has logged out, i want to disable the back button. how is this done, and is it a proper controlling method?
tx
|
|
|
|
|
To my knowledge there is no way to disable the the back button on the clients browser. If you are using a session to monitor the login status then you should remove it after logout and check it on all pages.
|
|
|
|
|
Brakanjan wrote:
i want to disable the back button
I guess you dont want to allow the user to come back & access the page after he logged out, by clicking the 'back' button. There may be javascript(s) to disable the 'back' button...
But the right way to do your job is to control the page access with the session/cookies that are set in the 'login' process. So... they become invalid when the user presses the 'back' button, and the user would be redirected to the custom wrror page!!!
I was born intelligent
Education ruined me!.
|
|
|
|
|
|
Use the image button to control this problem.
Check the userID value is true then show the back button image else switched off. If you taking about the IE back button its not possible. Only way you can check some authentication in your beging of your script to display your page contect.
----------------------------
while 1
yours friendly
|
|
|
|
|
We're creating a form. There's four checkboxes for four locations. Once sixteen people fill up one location, we would like to disable that checkbox. Do we need some sort of counter? Is there a way to keep track of it in JavaScript?
|
|
|
|
|
You need to store this somewhere... e.g. a database or a file...
theJazzyBrain
Excelence is not an act, but a habbit Aristotle
|
|
|
|
|
You could store the value of the counter in the Application object (assuming you are using ASP)
for instance:
Application("MyCounter") = Clng("0" & Application("MyCounter"))
Christian Calderon
|
|
|
|
|
This would reset every time the application shuts down though...
theJazzyBrain
Excelence is not an act, but a habbit Aristotle
|
|
|
|
|
Over the last few years I have been writing MFC dialog based application for the Windows environment using Visual Studio .Net (C++).
Now is it possible to use Web Browsers to generate the GUI and let the core of the application be written in Managed C++.
The core application involves serial communications and managing a Database. The GUI just needs to provide Start/Stop display and monitor parameters of the core application.
Note I know nothing about Web Browsers or their development, other than using IE for Internet access.
So any useful site would be great - useful words too!
The main reason for this move away from MCF is to allow (so I am told) the users to define there own GUI - as they can design there own Web Pages - I assume this is correct!
|
|
|
|
|
This is completely feasible and widely used. For one look at the latest Netcrape, the GUI is an html page basically(they use XUL). Also apps like Microsoft Money are just webpages in a framework. IE is more of an application platform than simply a webbrowser.
|
|
|
|
|
Thanks for your comments.
Just one additional question, who/were would you start with this technology; i.e. do you need a Toolset for development?
|
|
|
|
|
Hi everyone!
Does anybody know what will happen if I do Response.Redirect from an ASP page (having ASP session) to an ASPX page that will perform some stuff and then Response.Redirect to another ASP page. Will my ASP session be lost?
Note that I don't need to pass values between these sessions - I can pass what I need using Request.
Thanx in advance.
Regards,
Serge (Logic Software)
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
