473,837 Members | 1,594 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Alternative to ADODB.Stream for saving documents into MS Access Database from within ASP page

C
Re: Microsoft Knowledge Base Article - 870669
How to disable the ADODB.Stream object from Internet Explorer

You may recently have heard of the vulnarability exposed by Internet
Explorer as described in that article:

"An ADO stream object contains methods for reading and writing binary
files and text files. When an ADO stream object is combined with known
security vulnerabilities in Internet Explorer, a Web site could
execute scripts from the Local Machine zone. To help protect your
computer from this kind of attack, you can manually modify your
registry."

I'm using the ADODB.Stream object in an asp page to provide Intranet
users in a corporate environment a facility to upload and download
documents, such as Word and Excel, into an Access database.

When the security patch will be installed, this functionality will
have to be rewritten using another method than ADODB.Stream. Does
anyone know any alternative to uploading and downloading documents to
and from a MS Access database, from within an .asp page hosted in IIS?

I would prefer methods that do not require a COM component to be
installed on the server.

Thanks
Nov 13 '05 #1
3 9501
"C" <tc****@hotmail .com> wrote in message
news:1f******** *************** **@posting.goog le.com...
I'm using the ADODB.Stream object in an asp page to provide Intranet
users in a corporate environment a facility to upload and download
documents, such as Word and Excel, into an Access database.

When the security patch will be installed, this functionality will
have to be rewritten using another method than ADODB.Stream. Does
anyone know any alternative to uploading and downloading documents to
and from a MS Access database, from within an .asp page hosted in IIS?

I could be wrong, but I thought the "patch" for disabling ADODB.Stream
really only kept Internet Explorer from loading it (basically it sets a
"kill bit" on the object). It should continue to work just fine from other
scripting environments (including ASP).

So, unless you're using it *client-side*, I believe you'll be fine.

- Kevin
Nov 13 '05 #2
C
"Kevin R" <kp****@hotmail .com> wrote in message news:<Bz******* *************** @newssvr28.news .prodigy.com>.. .
"C" <tc****@hotmail .com> wrote in message
news:1f******** *************** **@posting.goog le.com...
I'm using the ADODB.Stream object in an asp page to provide Intranet
users in a corporate environment a facility to upload and download
documents, such as Word and Excel, into an Access database.

When the security patch will be installed, this functionality will
have to be rewritten using another method than ADODB.Stream. Does
anyone know any alternative to uploading and downloading documents to
and from a MS Access database, from within an .asp page hosted in IIS?

I could be wrong, but I thought the "patch" for disabling ADODB.Stream
really only kept Internet Explorer from loading it (basically it sets a
"kill bit" on the object). It should continue to work just fine from other
scripting environments (including ASP).

So, unless you're using it *client-side*, I believe you'll be fine.

- Kevin


Hi Kevin,

Uhm... I'm actually providing a user interface in Internet Explorer
that allows users to browse to a file on their machine or on a network
drive to upload the file and store it in long binary format in an
Access database.
The Microsoft article eplained that once the registry key is amended,
we will get the error "ActiveX component can't create object:
'ADODB.Stream'" .
If the object cannot be created, the files will not be up or
downloadable anymore. Any ideas how to work around this?
Nov 13 '05 #3
"C" <tc****@hotmail .com> wrote in message
news:1f******** *************** **@posting.goog le.com...
So, unless you're using it *client-side*, I believe you'll be fine.
Uhm... I'm actually providing a user interface in Internet Explorer
that allows users to browse to a file on their machine or on a network
drive to upload the file and store it in long binary format in an
Access database.
The Microsoft article eplained that once the registry key is amended,
we will get the error "ActiveX component can't create object:
'ADODB.Stream'" .
If the object cannot be created, the files will not be up or
downloadable anymore. Any ideas how to work around this?

If you have a budget available... I'm partial to SoftArtisans' FileUp and
XFile components. www.softartisans.com. Note that I'm not connected to that
company at all; I'm just a satisfied user of their products.

If not, I believe you could go low-tech and just make use of IE's built-in
file upload capability. For example, the following HTML enables a simple
file-upload box (and Browse... button) in any web client:

<form enctype="multip art/form-data" method="post" action="formres p.asp">
Enter filename to upload: <input type="file" name="f1"><br>
<input type="submit">

(if those angle brackets get eaten by your newsreader, try searching for
'enctype="multi part/form-data"' on google...)

You'll have to also have something on the web server side that can accept
the upload. Chances are what you're already using will continue to work
fine, but since I have no idea what you're already do, I wouldn't know.

By the way, this seems a little off-topic for an Access forum.....

- Kevin
Nov 13 '05 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

5
5421
by: David Gray | last post by:
Greetings all, How can I use ADODB to return all tables in an access DB chosen by the user? I'm able so far to select the DB file and build up my connect string, but I would like to offer a list of tables withing the DB and allow the user to choose. Is this possible using MS ActiveX Data Objects 2.0 Library or do I
1
2448
by: Bina Desai | last post by:
I get the following error: Error Type: Microsoft VBScript runtime (0x800A01A8) Object required: '' /myweb4/authorised_user_page.asp, line 70 and line 70 of my code is: <% rsCheckUser1.Open strSQL1, strcon1 %> Here is the full code:
7
13058
by: Robert Brown | last post by:
Hi All, I am creating an interface into a Payment Gateway. I need to access a URL (which is a perl script) with paramters attached. I will then get a response within 10 seconds with information I need to formulate into my pretty asp page. I didn't know where to start but I have read alot about adodb.stream. I setout to write some code and this is what I have done:
2
690
by: Richard K Bethell | last post by:
Hi, We have an application, written in ASP, that uses the ADODB.Stream to be able to open files and write byte arrays to the Response object. If one of our administrators patches the web servers this application runs on in Windows Update, I'm screwed, right? You've essentially just disabled this COM object, for not only its evil purposes, but its useful ones? Richard
1
5262
by: guyv | last post by:
Hello! I wanna read binary data from database with ADODB.Stream object. So I wrote code.. --------- <% query = "SELECT * FROM Categories" adoDB.DefaultDatabase = "Northwind"
0
561
by: C | last post by:
Re: Microsoft Knowledge Base Article - 870669 How to disable the ADODB.Stream object from Internet Explorer You may recently have heard of the vulnarability exposed by Internet Explorer as described in that article: "An ADO stream object contains methods for reading and writing binary files and text files. When an ADO stream object is combined with known security vulnerabilities in Internet Explorer, a Web site could execute scripts...
6
4146
by: ASP.Confused | last post by:
I have an ASP.NET page writtein in VB that uses ADODB. I just had to force-install MDAC 2.8 after I tried to rollback to 2.6 (my web host uses this, and I wanted to be compatible with them.) I had to manually install all of the ODBC drivers and the rest of the DLL's, and now I am getting "Access is Denied" errors on any page that uses ADODB. How do I fix it? I already gave the ODBC drivers in the folders in "c:\program files\common...
0
3540
by: ASP.Confused | last post by:
The old message looked a little stale, so I am re-posting it here. Anybody have any ideas of what I could do?!? The previous responses to this question are below. If you want to look at the original question, the subject line is: ADODB.NET and "Access Denied" I have an ASP.NET page writtein in VB that uses ADODB. I just had to
4
9966
by: Fresh_Air_Rider | last post by:
Hi In the "good old" Classic ASP days, I used to stream records from a SQL Server database out to the user's browser in CSV format by using a combination of COALESCE and the ADODB.Stream object. The trouble is that I'm not really sure how to do this in C# 2005. This was a very useful technique and if anyone could please show me how to adapt the Classic ASP code to C# 2005, I'd be very grateful indeed.
0
9682
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10562
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
10617
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
10263
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
9391
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
0
6989
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5842
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
4469
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
3
3122
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.