|
It sounds like theres a document.write(<some varible="">) in there some place, if you give document.write a control or the return of a few different functions all it will put on the screen is [Object] or something similar. aside from the codebehind doing Response.write or something else with the response object, or a document.write i cant think of any reason that the parent page would change.
|
|
|
|
|
I think the page that use Ajax Component is easier to be hacked than traditional Page
Because it has JS Code that may Execute painful processes
ARE YOU AGREE WITH ME ?????? 
You have To Search About The Truth Of Your Life
Why Are you Here In Life ?
|
|
|
|
|
Feras Mazen Taleb wrote: ARE YOU AGREE WITH ME ??????
No. I think any poorly written page can be hacked, it's as easy to insert values into viewstate, as it is to insert them into javascript. If a page is well designed, then it is secure, AJAX or otherwise.
Christian Graus
Please read this if you don't understand the answer I've given you
"also I don't think "TranslateOneToTwoBillion OneHundredAndFortySevenMillion FourHundredAndEightyThreeThousand SixHundredAndFortySeven()" is a very good choice for a function name" - SpacixOne ( offering help to someone who really needed it ) ( spaces added for the benefit of people running at < 1280x1024 )
|
|
|
|
|
thanks alot MR Graus .
Ok Now I have to read more about how to make the page more secure .
But Sorry MR Graus I clicked in Unuseful Answer accedintlly Can I reVote 
You have To Search About The Truth Of Your Life
Why Are you Here In Life ?
|
|
|
|
|
|
Shokran Jazelan Hisham .
thanks A lot Mr Hisham .
But I think The book talks about .netframework version 1.0 And Win Server 2000 , Can we Apply its information Into new Paltforms And OS ????
You have To Search About The Truth Of Your Life
Why Are you Here In Life ?
modified on Monday, May 5, 2008 8:56 AM
|
|
|
|
|
|
Feras Mazen Taleb wrote: ARE YOU AGREE WITH ME ??????
No. There are loopholes in both design and if you can adopt really secure coding practices, you can harness the best benefits of both worlds.
Vasudevan Deepak Kumar
Personal Homepage
Tech Gossips
A pessimist sees only the dark side of the clouds, and mopes; a philosopher sees both sides, and shrugs; an optimist doesn't see the clouds at all - he's walking on them. --Leonard Louis Levinson
|
|
|
|
|
thanks a lot For that
You have To Search About The Truth Of Your Life
Why Are you Here In Life ?
|
|
|
|
|
I have a webmethod like this
[
WebMethod]
public string QCCommonConnect(string strQcUser, string strQcPassword, string strQcDomain, string strQcProject)
{
//Doing something here
}//Returning session id
return Session.SessionID;
}
The wsdl is displying returned parameter as : name="QCCommonConnectResult"
I wanted it to return the same as follows : name="strSessionId"
Please let me know how can i do the same. I will be really thankful to you.
Regards,
Rajesh Khubchandani
|
|
|
|
|
|
I have a webmethod like this
[
WebMethod]
public string QCCommonConnect(string strQcUser, string strQcPassword, string strQcDomain, string strQcProject)
{
//Doing something here
}//Returning session id
return Session.SessionID;
}
The wsdl is displying written parameter as : <s:element minoccurs="0" maxoccurs="1" name="QCCommonConnectResult" type="s:string">
I wanted it to return the same as follows : <s:element minoccurs="0" maxoccurs="1" name="strSessionId" type="s:string">
Please let me know how can i do the same. I will be really thankful to you.
Regards,
Rajesh Khubchandani
|
|
|
|
|
Please tell me how does log4j reads the properties file... i.e log4j.properties.
Thanks
|
|
|
|
|
I need to create an whois function in asp code and then create it as an extension in firefox.Is it possible? If it is possible please give your valuable suggestion and information regarding it.
|
|
|
|
|
|
window.attachEvent("onload",myFunc) is not working in Firefox browser.....
|
|
|
|
|
|
Hi all
I have the following situation a XML text is send over a
URL too a webservice. The XML is URLencoded on the other side.
But when I read that into a xmlDom object it wont work, because of the & ; characters, i want to 'decode' this,
Please help me for that
<br />
<br />
dim strtext: strtext = "< streetname > Baron van Hövelllaan < / streetname > " <br />
response.write ParseXML(strtext)<br />
<br />
function ParseXML(strXML)<br />
dim oXMLDom, i <br />
Set oXMLDom = Server.CreateObject("MSXML2.DOMDocument") <br />
call oXMLDom.loadXML (strXML)<br />
<br />
if trim(oXMLDom.xml) = "" then<br />
err.Raise 1004, "ParseXML", "XMLDOM content empty"<br />
end if <br />
ParseXML = true <br />
end function<br />
<br />
The Stifler
--
Bugs can neither be created nor be removed from software by a developer. They can only be converted from one form to another. The total number of bugs in the software always remain constant.
|
|
|
|
|
|
Thanks
but i m not getting proper out put
m working with ASP 3.0
i tried this one but the view sorce still display ö
function URLDecode(sText)<br />
sDecoded = sText<br />
Set oRegExpr = Server.CreateObject("VBScript.RegExp")<br />
oRegExpr.Pattern = "%[0-9,A-F]{2}"<br />
oRegExpr.Global = True<br />
Set oMatchCollection = oRegExpr.Execute(sText)<br />
For Each oMatch In oMatchCollection<br />
sDecoded = Replace(sDecoded,oMatch.value,Chr(CInt("&H" & Right(oMatch.Value,2))))<br />
Next<br />
URLDecode = sDecoded<br />
End function<br />
<br />
' XML string <br />
dim strtext: strtext = "<streetname>Baron van Hövelllaan</streetname><br />
<br />
response.write URLDecode(URLDecode(Server.HTMLEncode(Server.URLEncode(strtext))))<br />
<br />
function ParseXML(strXML)<br />
dim oXMLDom, i<br />
<br />
Set oXMLDom = Server.CreateObject("MSXML2.DOMDocument")<br />
<br />
call oXMLDom.loadXML (strXML)<br />
<br />
if trim(oXMLDom.xml) = "" then<br />
err.Raise 1004, "ParseXML", "XMLDOM content empty"<br />
end if <br />
<br />
ParseXML = true <br />
<br />
end function
The Stifler
--
Bugs can neither be created nor be removed from software by a developer. They can only be converted from one form to another. The total number of bugs in the software always remain constant.
|
|
|
|
|
You know I didn't even spot that you are using Ladies ASP 
Mmm: dredging memory for antiquated code...
Try escape(strText)
I think that might do it.
|
|
|
|
|
Hi thanks
as i want to send that XML to ParseXML function
Response.Write ParseXML (strText)
Response.Write ParseXML(URLDecode(Server.URLEncode(URLDecode(Server.HTMLEncode(Server.URLEncode(strtext))))))
it gives error message as XMLDOM content empty
The Stifler
--
Bugs can neither be created nor be removed from software by a developer. They can only be converted from one form to another. The total number of bugs in the software always remain constant.
|
|
|
|
|
Have you tried:
strText = ParseXML(escape(strText))
Response.Write(strText)
Sorry, it's been quite a while since I used asp classic so might not be exact but should be close enough for you to work it out on your own.
Perhaps someone else with more recent experience can step in here?
|
|
|
|
|
I installed Extension Developer's Extension to the firefox to create my own extension to it.I got a sample code for building an extension and i tried on it.It got installed but the button and the menubar that are to be displayed are not displayed. I folloewd the same instructions given in the following website:
http://www.webmonkey.com/webmonkey/06/25/index3a_page2.html?tw=programming
But I did not get the mistake what I did!!!Please help me...
|
|
|
|
|
Hi All,
I'm working for an organisation which has lot of eforms on his web site; those are integrated with different systems or databases.
Because we have got some problem when we need to make update and redeploy them (because of the quantity of the forms split within sub folder)
I'm looking for the best intermediate solution between using the same BIN for all of them or create 200 virtual directories on IIS
Any ideas are welcomed
Franck Merlin
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
