|
It's a web site =)
It's supposed to go online publicly, but the part that will allow file submissions is for admin only, so i'm thinking of writting a script for the client side too that creates a form for file submissions, this way (because i'm running on the client side) I can browse the drives.
hint_54
|
|
|
|
|
haggenx wrote: local files because security rasons
I believe it is spelled: "raisins"
Brad
Australian
- Christian Graus on "Best books for VBscript"
A big thick one, so you can whack yourself on the head with it.
|
|
|
|
|
Hi All.
Got a downloading problem (sorry if its in the wrong place).
I try to download a csv from a site in IE7 and it opens it as an embedded Excel spreadsheet when I want to save the file. When I click on Save As it tells me the page may not save properly.
I've tralled the settings but I couldn't find any setting to change.
How can I save this file to my hardrive!!!
Many Thanks
The FoZ
|
|
|
|
|
Haven't yet tried IE 7. How about any option like 'Save Target As ...'?
|
|
|
|
|
Cant find that option anywhere. There is a button on the screen that you press but that does not have any options.
Any other ideas? Or shall I use Firefox?
The FoZ
|
|
|
|
|
TheFoZ wrote: Or shall I use Firefox?
|
|
|
|
|
Sorted it.
Goto folder options in Windows Explorer and file extensions. Select excel and untick the browse in same window option.
Cheers
The FoZ
|
|
|
|
|
My web site (ASP) fails to execute any "SQL update queries"
when I install it on NTFS volume.
The error message is "Operation must be an updatable query".
I tried setting both Read/Write permissions on my virtual directory but there is no success. My database is not read only.
There is no such problem when I install my web site on a FAT drive.
Is there any security settings or User configurations that I have to set for NTFS volume?
Please help me.
|
|
|
|
|
Which database are you using?
|
|
|
|
|
I am using MS Access 4.0 database and ADO to connect to it
but there is a problem mentioned above.
B2C
|
|
|
|
|
Under which account is the web site running, and does this account has write rights to the mdb file, and create rights on the directory?
Wout Louwers
|
|
|
|
|
I am using MS access 4.0 datbase and ADO to connect to it
but there is a problem mentioned above.
B2C
|
|
|
|
|
You have to change the file permission for the file, not for the virtual directory. The write permission on the virtual directory decides what IIS allows external users to do, not what the file system allows IIS to do, so that setting should definitely not be enabled.
The FAT file system doesn't support permissions at all, that's why permissions is not a problem on a FAT drive.
---
single minded; short sighted; long gone;
|
|
|
|
|
|
It appears that I will need some of the features of IIS 6.0, but currently have IIS 5.0 installed. How do I go about the upgrade? Do I need to buy an upgrade or can I download it?
|
|
|
|
|
IIS 6 for Windows server 2003!
|
|
|
|
|
You can't upgrade IIS 5 to IIS 6. They come with different versions of Windows, so to get a different version of IIS you have to get a different version of Windows.
---
single minded; short sighted; long gone;
|
|
|
|
|
Hi,
I want to share this problem. I have a datagrid that will help me Insert data into sql database. So I made a button On my form so that when I press the button a new row on datagrid should be created and I could be able to insert data. But with this code below I've failed could someone help me and tell me where I'm going wrong:
private void Page_Load(object sender, System.EventArgs e)
{
if (! IsPostBack)
{
Fill();
Bind();
}
}
DataTable table = new DataTable();
private void Fill()
{
SqlDataAdapter adapter = new SqlDataAdapter("select * from dbo.DashBoard", con);
adapter.Fill(table);
}
private void Bind()
{
dgis.DataSource = table;
dgis.DataBind();
}
private void InsertEmpty()
{
table.Rows.InsertAt(table.NewRow(), 0);
}
private void bttnew_Click(object sender, System.EventArgs e)
{
// inserting
dgis.EditItemIndex = 0;
// modify text
EditCommandColumn ecc = (EditCommandColumn) dgis.Columns[6];
ecc.UpdateText = "Update";
// fill table, insert empty row, bind to datagrid
Fill();
InsertEmpty();
Bind();
}
private void dgis_ItemCommand(object source,System.Web.UI.WebControls.DataGridCommandEventArgs e)
{
// stop editing
dgis.EditItemIndex = -1;
switch (e.CommandName)
{
case "Insert":
break;
case "Update":
break;
case "Cancel":
break;
case "Edit":
// begin editing
EditCommandColumn ecc = (EditCommandColumn) dgis.Columns[6];
ecc.UpdateText = "Insert";
dgis.EditItemIndex = e.Item.ItemIndex;
break;
}
// fill and bind
Fill();
//InsertEmpty();
Bind();
}
Thanks.
|
|
|
|
|
Hi,
I don't know where to start with the following, I would like to create a webpage with a list of physical products. Once a user selects, a new dialog pops up with the product view in 3D. By dragging within the window, the user can rotate the view of the product (and zoom as well using another control). Anyone have an idea how this could be done?
THANKS!
I am a SysAdmin, I battle my own daemons.
|
|
|
|
|
|
You'll need to get into DHTML for most of it (javascript and DOM with some CSS thrown in) and probably Ajax to load product details. The rotate view I guess would need Flash.
|
|
|
|
|
Hi
Most of us as web developers know how to hash user passwords within our database in order to prevent hackers from abusing stolen passwords in case they are stored in a plain text format. But I personally haven't seen any thing as a best practice (something standard recommended to all developers) to protect our sensitive data from being stolen.
As an example of a situation where we might want to encrypt some of our database fields, consider a shopping site which sells all its products through custom credit cards designed and delivered by your company whose information (including amount of each card's credit) have been stored on a database. Now, as the owner of such database, I'm mostly obsessed with these concerns when it comes to data encryption in database:
1- Which of the symmetric encryption algorithms is faster or recommended for encrypting "credit" field?
2- Where do you store your encryption key? in source code? What if your source is stolen too? Is it sensible to rely on this fact that nobody can access our compiled .net assemblies on the server and hence storing the key there?
3- How do you detect a new record that hasn't been inserted to database by your application but by a hacker?
* These are my main approaches concerning above issues:
1- In order to prevent passwords from being seen: I'll hash them with a salt
2- I order to prevent a hacker from modifying the amount of a card: I will hash and store the credit amount using a salt (e.g. Hash("34$"+salt)), and I'll also store the encrypted value of the credit amount (e.g. Encrypt("34$"+password)). Now, whenever I see that the hashed credit value of a record doesn't match the previously hashed value, I'll restore the credit amount from where I've already encrypted it.
3- In order to prevent a hacker from inserting his own credit card into database: I'll assign a unique ID field to each card, which has been generated based on a rule (like a serial number). So, the hacker won't know how to generate new valid card IDs unless he accesses my code and knows the rule.
The last concern: Checking all the constraints mentioned above, doesn't it hit the performance considerably? If so, what should we do then?!!! 
Any helping ideas are most welcome and greatly appreciated! 
|
|
|
|
|
Performance won't be an issue. You are going to want atleast a 1024bit algorithm for credit card details (although you really shouldn't store these). Do a bit of research on Asymmetric encryption.
Brad
Australian
- Christian Graus on "Best books for VBscript"
A big thick one, so you can whack yourself on the head with it.
|
|
|
|
|
Hi
I know what asymmetric encryption is and know that it's much slower than symmetric. What kind of info should I search on asymmetric encryption? And why do you think that performance won't be an issue?!
thanks in advance
|
|
|
|
|
As said before, performance is not an issue. You should asymmetrically encrypt or hash all sensitive data.
Brad
Australian
- Captain See Sharp on "Religion"
any half intelligent person can come to the conclusion that pink unicorns do not exist.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
