Hi All,

Our website (developed by a 3rd party) was recently hit by an Sql injection
attack and I have been going through and hardening the code. It uses asp and
talks to a sql server 2000 backend for a bunch of the page content.

I have been switching over to using parameterized queries by creating
Command Objects etc, and this has been straightforward for the most part, but
I have a piece of code that uses a recordset Update command to take some form
info and put it into the database. I am struggling to find a solution for
this.

The code is of the following form:

Set cConn = getDatabaseConn()
Set cRS = Server.CreateObject("ADODB.RecordSet")

I use a german rented virtual server. MSAccess dates (entered by an SQL
INSERT) appear in the database table (when downloaded and opened as Access
on my local UK machine) appear as mm/dd/yy. But if I then update it locally
(e.g. via localhost) those dates appear as dd/mm/yy. The raw date in both
cases is formatted as yyyy-mm-dd hh:mm:ss before being inserted.
<%%SetLocale(1033)%%> is used on both the server and localhost page.
Is there a way to make the server-based Access use a UK date/time format, or
does Access always use the Regional Settings of whichever machine it is on
at the time? (I can't access the windows settings on the server)
Is there any sense in using a (double) number like 20082207103000 for date
time?
Thanks, Giles

I've got something bugging me and as i'm not a hard core programmer
its got me beat - anyone who can point me in the right direction or
help me solve it would be my hero for at least the next five minutes.

Ok, here's the scenario - a corporate intranet, where selected pages
have parts of information that come from a database such as news
articles or an events calendar. Due to the geographic spread of the
organisation, the physical ASP pages are mirrored out to the remote
sites via DFS and the address for the intranet has a local alias which
accesses the copy from the local IIS server.

However, when the SQL server goes down or the sites lose their
internet connectivity, pages pulling dynamic content will return
errors. Ideally, when the page loads and it's unable to connect to the
DB, it would skip running the code, repeats, etc and instead return a
message in place such as "DB not available, try again later".

SQL connection strings for pages are available from both web.config
and an include file.

My questions:

DSoLaf http://putaria.dnip.net
http://sexpartylog.dnip.net
http://passiov.dnip.net
http://sexkore.dnip.net
http://352free.dnip.net
http://outdoorlog.dnip.net
http://buceti.dnip.net
http://kamranh.dnip.net
http://kamsut.dnip.net

Hey. I'm just starting to learn ASP and I'm trying to figure out to do
things. What I want to do is have a Login page as well as a Create
Account page (both is ASP). The user would create an account (username
and password) which would be put into an Access databse. Then they can
Login, and would take them to a Registration Form page, if their user
info is validated against the database.

Once they've gotten to the form page, they'll need to fill out the
form, submit it, and that info would be put into the database as well
(same database, just different table). What I figured I could do is
have the Username as the primary key for both tables so that if a user
logs back in to make any changes, it could pull the info from the
table and fill in the fields they previously filled in so when they
submit it again, it would overwrite what they previously put it.

Do You Hate Your Job?
If You Are Like Me And REALLY Hate Your Job, You Can Do What I have Done And
Tell All About Your Company At A Great And CHEAP New Site Called
Dont Work For These . Com

http://www.dontworkforthese.com
This Site Has Chat Rooms,
A Joke Section,
A Great Story Section Where You Can Tell All The Funny Or Stupid Things That
Happen Or Have Happened To You During Your Working Day.
Work Forums For You To Ask And Reply To Questions
And Do Not Forget You Can Tell All About Your Terrible Treatment You Endure
While Trying To Make A Living.
Best Of All They DO NOT Want Your Credit Card Details In Order To Join.
You Pay Through PayPal

Hi all
I'm working on a rooms reservation system based on Access 2003 and then
realize an ASP web page to manage it.

I need a little help in creating the DB since my ideas aren't so clear.

First of all what I need is very simple:

- I have two rooms and I have to let user reserve time slot of 15
minutes each
- every day has 8 slot
- a user can't book more than 1 slot per day

I thought to realize a DB with this structure

- 1 table with ID,DATE,ID-CUSTOMER
- 1 table with ID,NAME,SURNAME,PHONE,ID-SLOT
- 1 table with ID,SLOT

then I connect the first table with the second, and the second with the
third...

but I'm not sure... am I in the right direction?

anyone can help me?
thanks

here is a simple form. it works well in my system. I hosted my site. but i
get the error
Microsoft OLE DB Provider for ODBC Drivers error '80004005'

[Microsoft][ODBC Driver Manager] Driver's SQLSetConnectAttr failed

/join.asp, line 57

i've highlighted the line 57. pl. help me. without this fix, i cannot tell
anybody abt my web site.

thx in advance

Hello,

Right now I have a full text search going like this:

SELECT top 25 id, question, answer from [answers] WHERE
CONTAINS(question, '""" & search & """')

where "search" is the variable holding the form value the person typed
in.

the problem is, it only finds exact matches. For example, if williams
does not match william's, william does not match williams, etc

is there a way to make the search more useful?

Thanks for any help!

-Mike

Hi all
I'm trying to get information about a way to read an XML file within an
ASP page an then save data into an Access table...

Thanks for your support
Paolo