|
You won't lose security with this method if you Restrict Access to page, and have a redirect to login page.
Dennis Jeffrey
|
|
|
|
|
I'm not sure if were getting our wires crossed on this one. Storing the images in a database is the most secure way of doing things. Storing the images in a folder on the server is less secure because they could be accessed from any web broswer by requesting their file name from the server. All servers as far as i'm aware will serve up an image if it is requested without questioning it authority.
I believe there are ways of protecting certain folders on your server which is another option. But the main question should be do you need such precautions. Why are you storing the images and what are they off?
|
|
|
|
|
I'm sure that my reply was to agree with you. I'm not the original poster.
|
|
|
|
|
Hi,
I added a customized button in IE that Shows a customized toolbar. Problem is that I can't make it HIDE the toolbar. I don't know if I have to change button's CLSID in registry, as I suspect that the following key
CLSID = {E0DD6CAB-2D10-11D2-8F1A-0000F87ABD16}
refers to a button that only SHOWS the toolbar. It should have the same behavior as IE "Favorites" button.
Anyone ?
Thanx in advance!!!
|
|
|
|
|
Am i correct in thinking that what you are trying to do is present a custom button on screen usn html/css/jscript and then are having trouble changeing the visability?
else PM my with what you are trying to do and send me some scripts
Brad
Australian
Have you tried Rebooting it?
|
|
|
|
|
Anybody found anything that does code coverage of JavaScript?
|
|
|
|
|
Coverage? Or do you mean the other way around?
Possibly Camouflaging scripts?
You might use server-side java-scripts or signated ones. First ones are just loaded as an object or external script and accordingly set to the appropriate read-rights par ftp.
If you just want to make it 'strongly not recommended' up to 'impossible' to understand what the script works out, well... What about crazy hieroglyphic names for variables, short-forms of if/then/else-constructs and as much functions as possible?
If you want to make it heavily difficult for the normal user to 'see' your scripts you should use an xml-http-request instance and use it as a loader for your external javascript-segments normally bound inside the body. And then replace the innerHtml of any given Element that has an id-Tag with this script. That performs a runtime/asynchronous call of the script only accessible in RAM. No temporary files, no Cookie-handling, no Session-Sets...
But if you really meant Coverage as used for covering something up, get into the details, etc. then you should install the latest opera, read anything about storing sessions and edit them in author-mode, buy a good Javascript 1.3/1.5-Reference and spent some time with HT-Tracks WebSite-Copier. With that you're on the best way to 'investigate'. You might be, because you truly don't wanted to know about simple tasks like 'hacking' and 'jacking', do you?
Well, possibly i misunderstood the whole question.
So, i really don't know if any of this might have had helped you if you're through with practicing it, but maybe?
Just try it, take your time.
If you got special questions you're free to send me an e-Mail. Please be specific and precisely as you're able if you're asking for help.
You know, code is poetry, fine and tasty; ...but taste sometimes isn't discussable.
You're Welcome,
Paeth.Claudius-Raphael
|
|
|
|
|
hehe, thanks for trying elyphe but that isn't what I meant. Code coverage is part of testing your applications. So you run unit tests and then you get coverage stats that tell you how much of your code is tested. It is a pretty important part of testing. Wikipedia has a good explanation[^].
|
|
|
|
|
Thanks for the advice during the wikipedia link. Okay, now i know.
But to be true i would've never ever thought that there are people in this world that check how complete (or better: at which rate) a code-complex was testet.
You need those results for planning projects and to see how efficioent your coder's section is by presenting your continuous struggle to financier's, huh? (...action ...reaction; uuuaaaargh!)
Whatever, i think my first reply might have amused you under that conditions, hehe
But isn't it possible to use the watcher/debugger/slayer functions given in ecclipse, flash 8, .Net St. 2005 or even in Office's Java Script Debugger? I mean, where's the problem to filter out the JIT-Message-Handles? As far as i know you have full capability to revise any single phrase of a conduct in runtime or even run marked parts in statistic mode, so it catches what you want.
But probably i'm once again too far away from that piece of reality you've asked for.
Won't make any more suggestions, sorry, i think it's better to shut up sometimes....
8)
Well, i really don't know if any of this might have had helped you if you're through with practicing it, but maybe?
Just try it, take your time.
If you got special questions you're free to send me an e-Mail. Please be specific and precisely as you're able if you're asking for help.
You know, code is poetry, fine and tasty; ...but taste sometimes isn't discussable.
You're Welcome,
Paeth.Claudius-Raphael
|
|
|
|
|
Thanks for the idea on using watcher/debugger in Eclipse or VS 2005, that might just work though.
Paeth.Claudius-Raphael wrote: ou need those results for planning projects and to see how efficioent your coder's section is by presenting your continuous struggle to financier's, huh?
No, it is for my own benefit. Would you write code without unit tests? I wouldn't anymore and I also hate to write code without code coverage analsysis too.
Unit tests without code coverage are less effective. You can be sure you will miss certain paths through your code. Code coverage will tell you what extra tests you need to write to cover all your code.
|
|
|
|
|
For real,
i understand what you had in mind, but on my side it's another task, because i don't code complete applications. Most of the time i'll just help out with modularized components developed under the aspect of following truly the given guideline and therefor restrictions; so i never had the problem to make the impossible possible and code up a fully featured app running independent.
The code clips i've produced since yet, have been almost small (about 300 to 500 wraps) the biggest one was building a pure scripted 3D-Tetris-Variant (About 4800 wraps). That was the first project where i ever used try-catch-blocks and similar functions, so you see, i'm no pro. Just spending my time with that to get deeper into it.
I also have absolutely no plan, what kind of tools are out their for scripting purposes, because i do coding by writing on paper, imagining it overall, then script it module per module, class by class and in the end when i got every necessary particle, i put it together.
That's why i never have had problems with debugging until now. I'll do the main testing while i make changes and in the end completely roll-up the whole set manually under certain conditions.
So again, it's not professional, but i can learn how it comes to the failures the code produces. And i think you're winning with it, because the library i got now after 2 to 3 years of massive scripting is mostly reusable, what gives me benefit in time and less stress for working on new projects.
Well, it's all in the head (though clean and precisely documented), but i am the coder who has to use these scripts, so they are my tools and spare parts.
Sorry, if i disturbed your peace with these statements, but i wonder how others, like you, who are interested in doing things the processing professional way, think about it.
If you might wanna answer, feel free, it would be nice to read your opinion.
You know, code is poetry, fine and tasty; ...but taste sometimes isn't discussable.
You're Welcome,
Paeth.Claudius-Raphael
|
|
|
|
|
I might have you wrong but I think it is dangerous to be over condifent when it comes to coding. Any reasonably complex system is too big to fit into your head as a whole. That is why unit testing couple with code coverage is such a useful tool.
No programmer I have ever known can understand every single path through a system. Those that said they can are invariably proven wrong with some code coverage analysis.
And it applies whether you are doing applications or libraries. It is all code at the end of the day and all code contains multiple paths.
|
|
|
|
|
You really woke my interest for the 'code coverage'-thang.
You got some good (res)sources to become informed about the procedere/schemes used in cc-analysis?
I want to read some more about that.
To point it out:
No, i think you don't got me wrong and i know that it sounds self-confident in the way i told my thoughts 'bout that thematic.
You might understand if you think of it as my specialty, meaning the way of handling systems.
I don't know why, but like others who are able to describe pictures precisely which they've seen once for some seconds (and that years before...), i'm able to memorize how dataflow behaves and to predict how it should by source but in reality will, because of the surrounding setup.
I think it is because i started with, e.g. assembler on 6510 when i was nine to ten years old and stepped on to fortran, cobol, etc. and 68k assembler just a year later. Or another example; due to interest i was able to speak english (in simple sentences) before i got into school, just by hearing music and listen to the talks of my aunt and their irish and english friends. (I'm native german, sorry.. forgot to tell about that)
Well, however that's really nothing special. Just interest & training. I thought it possibly might let you follow my mind with that background-information. That's why i'm telling you.
So back to my request, if you have some links or literature to get deeper into it, please send some more info. Or (it sounds like) if you have gathered information in your own projects about the efficiency the analysis brought to your codework, please tell some' details. I think it is most interesting to hear/read special reports from insiders.
...
Wow, seems you really really woke my interest for that, because of the confusing stack of words i call sentences. The bunch of letters i produced in here gives no sense it seems.
payah, what da heck, nevertheless, would be nice to read from you...
You know, code is poetry, fine and tasty; ...but taste sometimes isn't discussable.
You're Welcome,
Paeth.Claudius-Raphael
|
|
|
|
|
|
Thansk Richard. It is currently in closed beta with a release planned for next week. It won't be free though and it is the only one I have found. We need choice, including OS options like I have for unit testing and CI builds.
|
|
|
|
|
HI
Guys,Can any one let me know how to make the web application DDA(disability discrimination act) compliant, so the disable persons(blind,deaf etc) could also access our web application with out any hinderance, plzzzz reply ASAP,thankx in advnace for ur help.
|
|
|
|
|
If you are able to give specifics about the used Html-Elements, kinds of Java-Script used (if so) and how the styles have been defined? Yep, i can give you an answer.
But only if you also know what kind/version/restrictions of DDA you want to meet and if you are able to define the spectrum of necessary client-platforms (Browser-Types and Versions, OS).
You know, code is poetry, fine and tasty; ...but taste sometimes isn't discussable.
You're Welcome,
Paeth.Claudius-Raphael
|
|
|
|
|
Well
man i am using I.E 6.0 and my O.S is Windows XP, let me know abt the latest version of DDA guide lines, i don't know abt the kind of styles used but html is 4.0, let me know in general different guide lines, thankx in advance once again, plz reply ASAP.
|
|
|
|
|
One more thing man is WCAG 2.0 recomeneded by W3C ? plz reply ASAP , thankx.
|
|
|
|
|
Okay, that's the roundabout.
Before i ask you some mo' to see how i can help you, forget about wacg2, these conditions are not able to meet, because there is no browser outside that can render it. By the way wacg2 is a turn-back in my opinion, because it gives a f**k on modularizing site content and consistent stylesheet usage.
So at minimum use a xhtml 1.0 doctype transitional for your pages, so that you can approve that your structure valides. Even better would be the xhtml 1.1 doctype, if you have no necessarity for frames.
Don't forget to call the namespace and set the lang for those browsers that don't render xml.
e.g.:
<!DOCTYPE
html
PUBLIC
"-//W3C//DTD XHTML 1.1//EN"
"http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"
>
<html
xmlns="http://www.w3.org/1999/xhtml"
xml:lang="en"
lang="en"
>
So if you wanna still produce for IE 6 downwards and browsers like netscape 4 then just take that header i inserted here and forget about the '<?xml version="1.0" encoding="utf-8" ?>'-line you probably have seen on W3-Page or inserted by Wysiwyg-Editors, because they make the formerly named browsers running in a quirks-mode, means they try to render with proprietary xml-sets if contained and else treat the whole thing as html 3 to 3.2 instead of the version you set up in doctype.
I think that should be almost the first thing you ever hadda check in every file.
Then the typical discussion about alt-statements in img-tags and the use of the title-attribute. To see what content should be delivered in the alt-attribute you should look up your page twice with opera set to text- or classic-mode, once as author, once as editor.
For real boy, it's better to gimme a hint how deep ya knowledge of all that is, because it is much effort you have to bring in to make a compatible site.
Just precise what you have and what you want and then we'll see what might be made in the next step.
What kind of editors you use? what is the target-system and thing like that?
Well, i really don't know if any of this might have had helped you if you're through with practicing it, but maybe?
Just try it, take your time.
If you got special questions you're free to send me an e-Mail. Please be specific and precisely as you're able if you're asking for help.
You know, code is poetry, fine and tasty; ...but taste sometimes isn't discussable.
You're Welcome,
Paeth.Claudius-Raphael
|
|
|
|
|
Hello all,
I have some HTML code in a file; it contains some JavaScript that includes creating a textarea.
I associate the file with a CHtmlView control in a dialog box, using Navigate2. The dialog box is a typical Windows dialog, built using MFC. All well and good.
Now the issue - I'd like to, depending on what the user types into the JavaScript textarea, get out of that area, and transfer control back to the surrounding Windows dialog.
But once the user clicks in the textarea, it seems they're there for good, 'til they decide to click on some other control. Is there any way to intentionally kick them out of the JavaScript textarea, and back to the surrounding (Windows) dialog?
Thanks for any insight!
~ Mike
|
|
|
|
|
Only one control can have the focus so if you set focus on something else.....
led mike
|
|
|
|
|
Hello,
How can I determin if we are in the daylightsavings period or not (in javascript)?
I've tried to search the net, but couldn't find anything useful.
I suspect it's a registry setting, but how can you read that out with javascript?
Many thanks in advance !
|
|
|
|
|
|
Thanks, I went for solutions #1. Although here it isn't that simple because our DLS doesn't fall on a certain date, it starts on the last weekend of October until the last weekend of March  , why they make it that difficult is beyond me  .
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
![Beer | [beer]](https://www.codeproject.com/script/Forums/Images/beer.gif)
![Jig | [Dance]](https://www.codeproject.com/script/Forums/Images/jig.gif)
![Badger | [badger,badger,badger,badger...]](https://www.codeproject.com/script/Forums/Images/badger.gif)