Blog News Main Page NEWS FROM 2006-03-25
Blog Entry: 3/25/2006 2:43:45 PM
We have been using ASP Protect for a while now and are big fans of the program. We received ASP Banner 8.2 with our puchase which we now have a need for. I went to put the files on our webpage, and doing nothing else other than locating the directory there, I noticed differences with how ASP Protect operates. We have customized it a bit and want to keep the 2 programs separate. the login screen for one showed up on the other, and some ASP Protect pages appeared altered so i immediately deleted ASP Banner. did I do something wrong, and how can i ensure the 2 programs work completely independant of each other? We can't risk braking what we're now using but would really like to add banner functionality to some of our pages. maybe an update to the program before we install? puchase new software? Thanks for your help- , Sounds crazy. I recently took over this web site and all IT duties. User today said member area was not working. All pages would not display. After restoring some files I got the members area partially working. But I cannot find where the database sits. I am able to get in and view users in the admin are and log in as a member. Thanks.,
It's probably something I could do for you as a custom project if you are interesting in paying to have that work done, but it is probably not something that will be added to this version of aspbanner as it is in my opinion a feature more suited for a more expensive software package.
It is also difficult to get ASP code to do things on it's own. Scheduling something to run on the server or some other clever scenario is necessary and that usually means it would be unique to each persons setup.
http://www.cjwsoft.com/custom_work.asp
, I'm using Groups and would like to assign all new users to a particular group. How is this done? cwilliams38298.5087384259, Using just ASP (Form Based Authentication) you can only protect the actual content of the ".asp" files.
You can however use some ASP tricks to stream other types of files to the users.
That way the actual file locations are never known and they can only get them/see these files when they are logged in as you would be streaming files to them after they logged in.
Below are informative links I have collected on the subject in an email I sent to another customer a while back.
Using Active Server Pages you can only protect ".asp" pages.
You can however password protect ".asp" pages that stream files to the user using code like in these examples therefore keeping the actual file name a secret.
And from another email I sent...
ASPProtect only protects the content of ".asp" pages. Directory protection is not possible using just ASP.
Other file extensions can not be protected using just ASP.
There are ways to get around this.
You'd want to do a technique like this to stream non ".asp" files to the users.
The safileup component from softartisans can actually do something similar as far as streaming the files go.
Then use something like ASPProtect to protect the ASP files that streams the files.
The actual location of the files is never known to the users and of they don't have access to the asp pages they can not see or get those other types of files.
Very doable, but nothing ASPProtect takes care of automatically.
This info above should get ya on track.
cwilliams38344.8751736111, it is not uncommon for folder permissions to be lost or changed on a server.. a lot of things can cause it
if it was working and now you can not edit or write new data to the database it is most likely permissions
I would triple check permissions... see my articles if there is any doubt on how permissions are set
http://support.cjwsoft.com/code/moreinfo136-1.htm
http://support.cjwsoft.com/code/moreinfo56-1.htm
, Sorry Chris,
It didn't fix it. Looks like I had the current code. I bought the system in mid-April. The version says 3-10-2005.
I do know that in the database, the password shows as " éG" but in the error code, it shows as " éG". The square character is missing.
Thanks, Mick
Edit: well heck. It skips the square box here too. The password in the database puts a square box in front of the éG , Just to put an end to this thread here is the solution for anyone reading.
The permissions were ok.
The data connection string never got edited in the "dataconn_inc.asp" file so it was invalid the whole time.
Once that was corrected the application ran.
So really this whole thread was over not following the directions and not editing the data connection string...
, Just having the database with members does not protect the page. You need to add the appropriate code to every page you want to restrict access to.
You need to click on the Groups tab in Admin. Click on Generate PW protection code. Click on the basic button if you don't want to include levels or groups or choose a level or group(s) and click the appropriate button. Paste the code that's generated into the top of an ASP page in code view.
Is that what you're looking for?
Michelle , Okay thanks, I'll have to consider wether or not to go down the path of the upgrade or cut my losses as the Access cannot handle the pressure
It's just errored out again with the following message:
msxml3.dll error '80072ee2'
The operation timed out
/forum/banner.asp, line 15
Regards,
Dave , Humm, Did you make any changes to the code ? Solid Black is not the default so it must have changed at least once.
Otherwise it might be some sort of application variable problem. I would make sure the web is and "application" in the IIS console.
, Umm, if your using MSACCESS your using MSACCESS
SQL server has nothing to do with it. , Three questions here:
1. I am having a problem with characters being displayed properly when viewing listings. Some alphabet characters and punctuation characters do not display properly when viewing the pages.
Sample here:
http://www.hibari2.com/lanoitanretni/kokusai_profiles/view_i tem.asp?Ad_ID=102&CatLevel=2&Cat1_ID=3&Cat2_ID=& amp; amp; amp; amp;Cat3_ID=&Cat4_ID=&FromSearch=True&SearchPage =%2Flanoitanretni%2Fkokusai%5Fprofiles%2Fdefault%2Easp%3FCat Level%3D2%26Cat1%5FID%3D3
In the access database I was looking at the properties for the ‘Ad_Custom’ fields. Unicode Compression is 'Yes' but IME Mode is set to 'No Control'. I wonder by changing this to ‘Hiragana’ if will solve the issue.
Note: the essays are typed in English on computer with Japanese OS, and then pasted up. Even though they are typed in English, there are several setting that may affect the output.
2. I want to reverse sort order for listings instead of listing 4, 5, 6, 7, I’d like to sort 7, 6, 5, 4… Could you tell me which page has to be edited, and in simplest terms what has to be changed?
3. Also, I’d like to increase the default display of ‘items per page’ from 25 to 100. Could you tell me which page has to be edited, and in simplest terms what has to be changed?
Thanks
HIBARI38155.8447569444, It is not something I did when I wrote the emailing sub routines. You would have to edit the email sub routine for CDONTS and add something to it most likely. The email sub routines are in the "scripts" folder in the "emailing_subs_inc.asp" file.
I am not sure you can do that when using CDONTS though I think you can do it with CDOSYS. You would have to do some research and edit the code like I mentioned. , You do not say something like that in a support forum for a legitimate software product. I don't think piracy is funny in the least bit. It is something I deal with every day with my own software. If you want to joke about it please do it someplace else. If you are downloading things via p2p do not talk about here. I don't want to know about it period., I really need more info on what you have going on?
This can sometimes be cause by a slow server / bad data connection.
Sometimes caused when someone is using the option pack but did not make the proper changes to the database.
Sometimes caused when a user adds users the database on his own and does some "incorrect" things..
The more details you can provide the better. Think of anything and everything and describe it.
SQL or MSACCESS... version of either Server OS Using Option Pack or not Did you have your host set permissions...
etc etc etc cwilliams38300.5380092593, Riiiiiiiiiiiiiiiiiiiiiiiight.
Even though I have a big disclaimer that the account is totally
worthless without someone paying to activate it, the new IDs keep
coming, about 3 a day.
, The count is in the album area where the small pictures and description of album. Viewed 1 time(s) This count never changes.
Thanks
John , This isn't going to help you much but here is the deal.
The 2checkout support in ASPProtect actually is not supposed to work with 2checkout subscriptions and therefore does not need to use an item number.
It is intended to be used for single payments only with 2checkout as explained in this thread. http://support.cjwsoft.com/code/moreinfo212-1.htm
Single payments with 2checkout use their shopping cart which allows for dynamic payments without needing an item number.
I agree with you that 2checkout's interface is confusing. It's actually about the worst system I have ever seen. I could not make a 2Checkout subscription system because their system is just too limited and I couldn't make it work the way it really needed to.
, Thanks for that.
I have tried InStr("*2*",>"0") in the query design window but it does not return any members.
I have orded a Access Bible to help me in furture , Everything is running fine.. I can read ads... reply to them. but when I click sign in or register.. I get a server error.
Any suggestions
Thank You , Regarding hosting companies..
Now.. obviously if you are hosting on someone elses server you may not be able to set permissions like this.
Ultimately, if you are hosting somewhere and ASP and Database connectivity is part of your hosting plan. It is the hosting company's responsibility to set these permissions for you when asked or to give you a special interface to do so on your own. If they are not helping you do this then maybe it is time to get a hosting company that is serious about your ASP Hosting Needs.
Also... JUST TO BE PERFECTLY CLEAR
The permissions we are talking about cannot be set via FTP or Frontpage access to your web site. They must be set like shown above or via a special interface meant to set the permissions correctly. For all you people out there messing with the permissions you see in FTP and Frontpage.. you are wasting your time and possibly creating problems in your web.
All ASP scripts that communicate with an Access Database, Upload Pictures, Modify Text files.... are going to need these permissions set in some way or another. We have no control over that fact. cwilliams38360.69125, How about the option to add an unsubscribe link to the end of newsletters that are sent out and a function that will uncheck the newletter field for that record if they click on the link?
Please??? 
Thanks, Michelle , Microsoft has a free version of SQL server 2000 than you can run on a development machine.
http://www.microsoft.com/downloads/details.aspx?FamilyID=413 744d1-a0bc-479f-bafa-e4b278eb9147&DisplayLang=en
This is really the same thing as the MSDN version of SQL server that comes with Visual Studio
It is limited in two ways.
No single database can exceed 2 gigabytes in size. However, each Desktop Engine server instance can contain many databases, each of which can be up to 2 gigabytes in size. Each computer can host up to sixteen instances of Desktop Engine.
Performance will rapidly decline when more than five simultaneous users use the database engine at the same time. With five users or less Desktop Engine will operate with full SQL Server speed.
After you install this your going to need a way to connect to your sql server as well as a way to run queires on it.
I suggest either install the client tools off any SQL 2000 Installation Disc (giving you enterprise manager and query manager)
or use the FREE SQL Server Web Data Administrator which will do amost everything you will need to do. It is really very slick http://support.cjwsoft.com/forum/forum_posts.asp?TID=127& ; ; ;PN=1
Then you have a pretty sweet setup for testing and developing locally using SQL server.
If you are wondering why someone with a real SQL Server 2000 cd wouldn't just install the real SQL server locally it is because the server part will usually not install on XP Pro or non server versions of windows for licensing reasons. (at least every SQL 2000 CD I have is like that regardless of whether it is standard or enterprise) But the client side tools on the cd are invaluable so I just install the Desktop Version of SQL along with the client side tools and everything works great. , I really do not know to tell you the truth. I'll do some research.
The script only allows .jpg, .jpeg, and .gif extensions.
If someone uploads a file called... "filename.vbs.jpeg" with bad vbscript in it I seriously doubt anything can happen because of it because of the extension.
But I really do not know.
It has never happened to any sites I have or know of.
cwilliams38447.0491435185, ok... lets forget about all this redirecting business for a minute
when I go to "GP01.asp" directly via your web site I get a big nasty error that says this
Microsoft VBScript compilation error '800a0411'
Name redefined
/protect/config_inc.asp, line 15 Dim Address_Required,CDONTS_Installed,City_Required,Registration _Type,VerifyURL,Log_Off_Page
----^
then when I look at what you did in that file I see why
you have this code which is totally wrong because you cannot include the password protection file twice <%@ LANGUAGE="VBSCRIPT" %> <!--#INCLUDE FILE="check_user_inc.asp"--> <% GROUPACCESS = "*1*" %> <!--#INCLUDE FILE="check_user_inc.asp"-->
it should be <%@ LANGUAGE="VBSCRIPT" %>
<% GROUPACCESS = "*1*" %> <!--#INCLUDE FILE="check_user_inc.asp"--> and that is probably the root of this entire problem.. the redirection was working... but you were sending them to invalid pages with errors
all those pages are wrong... if you dont see the real error above see this http://support.cjwsoft.com/code/moreinfo11-1.htm
if you look over the aspprotect 7 installation instructions that is the very 1st thing I tell people to do
hopefully this is the info you need to continue and get some work done , Just to let you know that i figured out my problem. I had to modify the connection in the email code and get the correct path from my provider.
I hope you enjoyed your vacation.
Thank you Adam , The only major usability issue I've found to date is multi-zone banners. Cloning is helpful to a point, but then if you have a change to that banner, you have to make the change 6 times or what have you. I think, even at the expense of speed, multi-zone capability for a single banner would be excellent addition. Of course, that supposes I haven't just missed it and it's already there. cwilliams38453.6665509259, its one or the other... you cant protect upload.asp at the same time if upload.asp is included in another page..
I mean sure you can protect upload.asp from running when another page calls it by password protecting the page calling it.
And sure you can protect upload.asp by itself if it also runs all by itself. But you can not include the "check_user_inc.asp" more than once in any order of execution scenario. That includes pages being included.
Generally anytime a page is included in another that included page is not meant to run by itself and wouldn't produce any outcome if run by itself so this would never be an issue.
if you don't want "upload.asp" to ever be run by itself in that scenario put it somewhere in your web site that is not web browser accessible.
I would also suggest you look into using Virtual includes. It will save you a lot of time figuring out this sort of thing "../../../../../" becuase once you figure out the virtual include path you can use the same server side include from any directory level.
http://www.powerasp.com/content/code-snippets/includes.asp
, My client has a list of 13,000 members that
have already been assigned ID's and passwords with a
homegrown system.
When doing a bulk import, will we be able to retain the userid and password or will a new id be assigned during the bulk load?
Thanks in advance for your help.
, Sorry, should have added, if i change the connection string, i can also get this...
[Microsoft][ODBC Driver Manager] Data source name not found and no default driver specified , I am having problems with a password a user wants to use. He wants HANNAH. When he (or I) try to log in with his username and password, I get a syntax error -
Syntax error in string in query expression '(Username = 'changedforsecurity') AND (Password = ' éG'. pathOnComputer../1protect/check_user_inc.asp, line 114
I've obviously changed the username and the server path in the info above for security.
I have not messed with the encryption.
What is it that the system doesn't like in the word HANNAH as a password? I would just change his password for him but this guy has enough trouble just turning the computer on! Confusing him with a new password would take weeks to set him straight.
Thanks, Mick
, The problem was in config_inc.asp. we had renamed the field in the DB but didn't change it in this file.
But we changed it, it is back to normal.
Thanks , I believe that solved the problem as I have not heard from this person since I sent him the code., Its not a known issue.. I would try the original code before you made any changes and see if it still happens to you.
It seems to be working fine here for me in amy test web.
I am going to look into some more in the meantime.cwilliams38341.7166782407, where is your site ? I'll taka a look , Hi
I downloaded the .chm format installation documentation but when I open it I get the index but can't see any of the pages so am a bit stuck. , Upgrade from V6 to v7.x with an MSACCESS DATABASE
1st of all, backup your existing ASPProtect files and database before performing this upgrade. Please be really careful while performing this upgrade. Version 7.x is a highly advanced application compared to any previous versions. CJWSoft under no circumstances is responsible if you lose information or have website downtime.
BOTTOM LINE: (PERFORM THIS UPGRADE AT YOUR OWN RISK)
To do this upgrade you're going to need to have the Microsoft Access Application. To work with an Access .mdb file it can not be newer than the version of Microsoft Access you are running.
That being said, on with the upgrade..
Open you're existing Acccess Database up in Microsoft Access.. You should see this something like this.

By right clicking on then choosing rename Rename "Users" to "ASPP_Users" Rename "Groups" to "ASPP_Groups"
If you do not have a "Groups" table do not worry about it right now.
Now right click and DELETE the Config Table. Yes, delete it..
You should now see this. (with or without the "Groups" table)

Now, right click on "ASPP_Users" and go into design view. It should look like this.

Rename the "Password" field to "Old_Password" Be sure to spell it perfectly using the Underscore It will look like this.

Now scroll down to the bottom a bit It should look like this.

Now..
If you have a "Groups" Field... leave it alone If you do not have a "Groups" Field add one and make it a memo field.
Now, we are going to add a few more new fields.
Add a field called "Redirection_URL" make it a "text" field with 150 field size Add a field called "PayPal_Subscriber_ID" make it a "text" field with 100 field size Add a field called "Newsletter" and make it a yes/no field Add a field called "Password" and make it a "text" field with 100 field size
It should now look like this. (you do not need to worry about the field descriptions.. that part is optional and only seen when working on the database)

Now close that window and save the changes..
Your now going to open up another Access Database while still leaving the one you have on your screen open. You going to open up one of the new databases that came with v7.x. This database has some info we are simply going to copy and paste.
You'll want to open it and put it side by side on your desktop like so. (the old database is on the left.. the new one is on the right)

Now, for the fun part.
On the new database to the right.. right click on the "ASPP_Config" table and pick "Copy"
Then move your mouse over to the old database on the left. Right click in the open white area and click "paste"
It will ask you for a database name. Type in "ASPP_Config" Leave "Structure and Data" checked and hit OK
Your old database on the left should now have a nice new "ASPP_Config" table.
OK, now for the "ASPP_Groups" table
If you already have a "ASPP_Groups" table in your old database you are done.
If you do not have one your going to copy and paste the table from the New Database to your old database just like we just did with the "ASPP_config" table.
Your old database should now look like this.

Now, you are done upgrading your database from within Microsoft Access.
The existing passwords still have to be encrytped and moved from the "Old_Password" to the "Password" field
To that we have a special page we run in the application that will take care of that.
So, for now... go install the application, but using the database we just created. Follow these instructions for the most part... http://support.cjwsoft.com/forum/forum_posts.asp?TID=181& ; ;PN=1
When you get to the part where you finally get into the admin area and need to make an admin account you will notice that your existing user database is there but none of the users have passwords if you look at them in the edit screen.
That is normal. Simply do what the instructions say and create and admin account using a username that does not exist..
Then log off... then back in as that new admin account. If that works you are ready to convert the passwords.
This part is very easy.
You want to run a special page via the browser.
http://www.mysite.com/password_admin/convert_to_encrypted.asp
Replacing the part in blue with your website info.
Once you get the page running you will see a login prompt and one form field just like before with the "get_me_in.asp" page
You will need to paste the "PasswordEncryptionKey" value that you used in the "config_inc.asp" file in the form field and hit enter.
If all goes well you will see a page telling you to click here to encrypt the passwords and copy them over.
So do what it says... dont click more than once and wait.
Eventually it should say it is finished. So go log in to the admin area of the system using the new admin account.
Now edit some users but dont save... you want to see if the passwords are showing up. If they are the conversion worked. If you see nothing or a garbled mess it did not work and you made a mistake during this whole process.
If things went well backup and delete the conversion file below.
http://www.mysite.com/password_admin/convert_to_encrypted.asp
You do not need it anymore.
Once you are positive every thing is running smoothly and everyone's passwords are ok you can go in and delete the "Old_Password" field as well.
If things didnt go well.. try again from scratch and go slowly. If they still dont go well get ahold of us for help.
We are here to help, but if you really want us to we can be hired to do the conversion. , Yup everything looks ok - but why no error?
This just gets better - now the email a friend link says sent successfully and doesn't send out - what the heck...
What would cause it to 'think' it is doing the task yet still fail? , Good Morning, any suggestions on how to best "fake out the system" -- I would like to try to keep this clean so I can see the real errors?
My thought was to try to just move those .gif files to the directory that it thinks it should be in -- do you have any better suggestions? Or reasons why I really wouldnt want to do that? ,
Timecard Entry: 3/25/2006 2:43:45 PM
fixing DANC ISDN static dialup......static IP was missing from radius file.....fixed it reset the modem....all is well., ask Q. logins expired users /new user, more tech calls and as well checked radlogs and onlines and ask us a questions... mainly tech calls though, Reviewed background materials on telecom industry, 1000islands.com DB structure., Entered bills, enter invoices from salespeoples' emails, travel to Clayton - 23 miles, Backtobasicspetfood. Re-designing, trying to make some sense out of secure checkout form. Will never work without more definitive data., made ethernet cable to patch server room fiber cisco into the network and tested IP connectivity in the co location room, Meet with Al for project updates, run cables and punch down ends and put ends on cables, test each new line., travel time back, Look up information on Schools for Corporate Program, Gisco PR w/Melody - new employee setups, logged in to both phone systems all day, Torturous conversation with irate woman at seawaytrail.com. She couldn't figure out how to use FrontPage and insisted it was "broken." Had to walk her through making some basic changes to their site. NONBILLABLE, Go over St. Lawrence Chamber web site proposal and set up meeting for Tuesday at 1:00, fix a dns problem that a customer called about issues with mail., Working on auto responder part of softmls, DANC, GOT A CALL FROM BILL SEIFRIED HE HAD A PROBLEM WITH THE WEBSITE NOT OPERATING CORRECTLY ON IE.5 BUT WAS ONLY WITH HIS COMPUTER COULD NOT REPLICATE ANYWHERE ELSE IN THE OFFICE OR AT HOME. WE RESOLVED THAT IT WAS A PROBLEM WITH HIS COMPUTER BECAUSE THE HTML CODE WAS CORRECT., work on daily emails, Installed Virtual PC on computer to make use of FrontPage 2000, followed by FP 2000 installation., Added the Choices on the time card system to allow saving time card without manager seeing it until you submitted for approval, Setup new email accts for BarkFrameWorks, prep for wdt meeting, Radius 4 Gisco went Red. I made Log entry while Doug K. Called Dave S. Took in 2 calls. Radius 4 server down again. Called Dave S. Emptied waste baskets and vaccummed entire tech. room. Read e-mail and monitored all activities., Issues w/ Phone lines working w/ Mike Peto, Installed MapInfo Server & Developer on my computer at home - went through the tutorials. Couldn't get the server to work?#$%^, radlog, dial up issues, ,
|