C / C++ / MFC

thanks derek !

I have considered your advice. But the methods suggested above are not void of loopholes. Http headers are prone to tampering and URL addresses can be spoofed.

I have been looking at the method by which asp pages are prevented from malicious access by the use of session ids. I am talking about the session ids created by the ASP engine. But I have no idea of how to access the same session id in my extension. I want to obtain the session id from the asp engine directly from my extension.

Is this possible?

// nWidth and nHeight are size of screen or image
 RECT rc;
 rc.top = rc.left = 0;
 int iWidthMM = pDC->GetDeviceCaps(HORZSIZE);
 int iHeightMM = pDC->GetDeviceCaps(VERTSIZE);
 int iWidthPels = pDC->GetDeviceCaps(HORZRES);
 int iHeightPels = pDC->GetDeviceCaps(VERTRES);
 rc.right = (nWidth * iWidthMM * 100)/iWidthPels;
 rc.bottom = (nHeight * iHeightMM * 100)/iHeightPels;
 HDC hMetaDC = CreateEnhMetaFile(pDC->GetSafeHdc(),_T("C:\\Temp\\Image.emf"), &rc, _T("Your Description\0Image\0\0"));

int dont_erase_indexes[] =
	{
    IDC_DPAS_LAMP,
	IDC_INSTRUMENT_TYPE,
	IDC_LABEL1,
	IDC_LABEL2,
	IDC_DESTINATION,
	IDC_CURRENT_STATUS,
	IDC_LOG,
	IDC_GRAPH,
	IDC_DOWNLOAD_STATUS,
	IDC_DOWNLOAD_PROGRESS,
	ID_AUTO_LOAD,
	IDC_UPLOAD_ASSAYS,
	IDC_AUTO_UPLOAD,
	IDC_BROWSE_FOR_FOLDER
	} ;

BOOL CYourWindow::OnEraseBkgnd(CDC* pDC) 
{
	static int dont_erase_indexes[] =
		{// this is a list of the ID's of the controls on the parent window
		IDC_DPAS_LAMP,
		IDC_INSTRUMENT_TYPE,
		IDC_LABEL1,
		IDC_LABEL2,
		IDC_DESTINATION,
		IDC_CURRENT_STATUS,
		IDC_LOG,
		IDC_GRAPH,
		IDC_DOWNLOAD_STATUS,
		IDC_DOWNLOAD_PROGRESS,
		ID_AUTO_LOAD,
		IDC_UPLOAD_ASSAYS,
		IDC_AUTO_UPLOAD,
		IDC_BROWSE_FOR_FOLDER
		} ;
	CRect	clip ;
	pDC->SaveDC() ;
	for (int i = 0 ; i < sizeof(dont_erase_indexes) / sizeof(int) ; i++)
		{
		GetDlgItem(dont_erase_indexes[i])->GetWindowRect(&clip);		// get rect of the control
		ScreenToClient(&clip);
		pDC->ExcludeClipRect(&clip);
		}
	pDC->GetClipBox(&clip);
    pDC->FillSolidRect(clip, GetSysColor(COLOR_BTNFACE));
	pDC->RestoreDC(-1) ;
	return FALSE;
}