gyung
Last Activity: Mar 13 '07, 07:33 PM
Joined: Dec 8 '06
Location:
-
I'm going to use client side cookies now... but I'm still wondering if server-side session checking will still prevent bots. Thanks -
ASP Session - Server Side Cookies and Spam Bots
Are spam bots able to send out date for the server to collect and give them a session?
In Firefox, when I disable ALL cookies via web developer, I'm able to block off a certain page simply by redirecting back to another page to validate the session, but I don't want to use client side cookies, so I'm wondering if Spam Bots will be able to utilize something so the server will give them a session ID? -
I helped someone with a similar problem before because I ran into a similar issue. I think you will find all the information you need here:
http://www.thescripts.com/forum/thread588665.html
Hope that helps....Leave a comment:
-
If you haven't found it yet, it's:
recordset.moven ext()
to move to the next itemLeave a comment:
-
Testing the security of my site?
I'm wondering if there is an easy way to test the security of my ASP site. I use a lot of server-side sessions and though I know it can be highjacked, sniffed, and isn't exactly a good use of resources, i need it to maintain a lot of states. I don't store sensitive information on the servers or in sessions, but it still contains personal data. I read through different sites and posts, and they basically say sessions are pretty secure, unless they... -
I agree with Alison for the comments and suggestions. I don't really understand the bar as well. Do you want a scrolling navigation or a scroll bar to scroll data with on the left side instead of the usual right? Either way though, it would be bad design and programming practice. A simple, effective, clean navigation is the way to go. If there's too much stuff, you may consider using Javascript with drop downs, but never scrolling. Or if you meant...Leave a comment:
-
Most sites I come across recommend programming in Firefox first, then writing extra stylesheets if really needed for MSIE. You'll only have to change whatever causes the bugs in IE, for the newer sheet will overwrite only those that have changes.Leave a comment:
-
I also have a comment on your design if you don't mind... sorry If I may sound harsh.. people have complained that about me In school when we did peer critiques but I just want to help...
There are too many different colors, and too much animation. It might crash/slow down lower-end computers with all the Flash and JS, and I didn't really notice your products because of the noise that the rest of the page generates.
...Leave a comment:
-
I suggest physically drawing out tables and draw lines to represent relationships. I usually do this when making any more than 3~4 tables just to make sure I'm not missing anything. When you have 10+ tables it really helps :DLeave a comment:
-
Oh...right, the moderators apparently moved the thread, but it's still in ASP for me.
And I remembered something about cross-site security. Maybe you are doing it by accident somewhere, but that won't work. Just fyiLeave a comment:
-
I did some research and borrowed some more code. I read that you shouldn't request the browser name b/c it can be faked, so I followed W3Schools' example which is similar to yours, and modified my code to this for the script I was using:
...Code:function createRequestObject() { var xmlHttp; try { // Firefox, Opera 8.0+, Safari xmlHttp = new XMLHttpRequest(); } catch (e) {Leave a comment:
-
Mine works fine in FF. Anyway did you try adding "no-cache" to the headers? I had a similar problem before, which I posted about.
...Code:Response.Expires = -1 Response.AddHeader "Cache-Control", "no-cache" Response.AddHeader "Cache-Control", "private" Response.AddHeader "Cache-Control", "no-store" Response.AddHeader "Cache-Control",
Leave a comment:
-
I had some trouble with this before. Here's an example of an AJAX script I found and love to use. I use this for both PHP and ASP, and works in FF and IE.
In HTML/ASP/whatever page use:
JS include belowCode:<div id="busy_cage"> </div> <div id="item_cage"> </div>
...Code:/* The following function creates an XMLHttpRequest
Leave a comment:
-
After lots and lots of searching, I found a script that is working.
I guess one of these things properly tell FF not to cache. Hope this will help someone with a similar problem :)
...Code:Response.Expires = -1 Response.AddHeader "Cache-Control", "no-cache" Response.AddHeader "Cache-Control", "private" Response.AddHeader "Cache-Control", "no-store"
Leave a comment:
-
ASP Headers not refreshing AJAX in Firefox
Originally I had a problem with IE because I forgot to set the no-cache in the ASP pages that AJAX calls. Now that I added the headers, it works fine in IE, but still doesn't refresh properly in FF. I maintain the correct last browsed position using sessions, and works flawlessly in IE (so far), but FF, when the BACK button is used, it doesn't update.
I'm assuming is a cache problem, because as soon as I refresh the page manually (F5),... -
Ok...
I'm using
If (--) then
%><script>asdf </script><%
end if
so it's being execute along with the objConn.execute
I just put a response.End() behind the script and it works :)Leave a comment:
-
Hey thanks a lot. I was away for a while so I didn't check this...
Anyway the execute statements are being... executed.. before the if else statements. I found a workaround for that page by not closing the recordsets. I don't know why that works, but it does.
Sometimes validation in if else statements don't work though... Like for my update page for checking dates, my commands are being sent to the SQL server before...Leave a comment:
-
Ok it's driving me nuts, I can't validate the entry before deleting properly AND have the successful message. I'll probably be the one managing the site and DB anyway, but from a programming standpoint i'm hung up about it >.<Leave a comment:
-
Thanks for your reply!
the recordcount property didn't work for me, so I used count(*), which worked fine. It finds a record, but I'm still getting redirected to the wrong place... I think i'll just have to use another way to validate it.
again if I remove the execute, it works fine. I'm guessing it's somehow running the script twice after execution. Thanks again!Leave a comment:
-
I have another field, cID which is a Primary Key AUTO_NUMBER. I skip it and the DB takes care of it.
Code:SQL = "INSERT INTO class (cName,cShow) VALUES('" SQL = SQL & cName & "','" & cShow & "');" 'response.Write(sql) 'response.End() 'Open connection 'objConn.open objConn.Execute SQL closeConn()Leave a comment:
No activity results to display
Leave a comment: