473,795 Members | 3,048 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Redirect to a file on the server (not in wwwroot)

Hi all,

I want to do a similar action to response.redire ct ("file.htm") . But the
file.htm contains some sensitive data. I have placed file.htm in a folder in
the InetPub (d:\inetpub\pri vateroot\file.h tm) so that it is not accessible
by a simple HTTP request. An asp login script will be used, and then once
the user is verified the page should redirect to
d:\inetpub\priv ateroot\file.ht m. But obviously I cannot use
response.redire ct because it is not a recognisable URL. Any ideas which
command I should use?

Btw, I use VB Script.
_______________ __________
<%= TIM_STOKES %>
(change the _'s in my e-mail address to .'s (this is anti-spam))

Jul 19 '05 #1
6 4451
Can't be done. A browser can not access a page that is not
part of a web site. (Tehcnically, that's not 100% true,
but it applies in your case)

You must either place the page in a directory accessible
via the web or create a virtual directory on the directory
where your file lives.

NOTE: If you are on an intranet and the directory where
your file lives is on an accessible share, you could link
to it, but you still won't be able to use
response.redire ct.

John
-----Original Message-----
Hi all,

I want to do a similar action to response.redire ct ("file.htm") . But thefile.htm contains some sensitive data. I have placed file.htm in a folder inthe InetPub (d:\inetpub\pri vateroot\file.h tm) so that it is not accessibleby a simple HTTP request. An asp login script will be used, and then oncethe user is verified the page should redirect to
d:\inetpub\pri vateroot\file.h tm. But obviously I cannot useresponse.redir ect because it is not a recognisable URL. Any ideas whichcommand I should use?

Btw, I use VB Script.
______________ ___________
<%= TIM_STOKES %>
(change the _'s in my e-mail address to .'s (this is anti- spam))
.

Jul 19 '05 #2
Ok, cheers.

Do you have any suggestions as to how can I secure file.htm from being
retrieved without having put the username or password in??
_______________ __________
<%= TIM_STOKES %>
(change the _'s in my e-mail address to .'s (this is anti-spam))
"John Beschler" <gi***@geewhiz. com> wrote in message
news:0b******** *************** *****@phx.gbl.. .
Can't be done. A browser can not access a page that is not
part of a web site. (Tehcnically, that's not 100% true,
but it applies in your case)

You must either place the page in a directory accessible
via the web or create a virtual directory on the directory
where your file lives.

NOTE: If you are on an intranet and the directory where
your file lives is on an accessible share, you could link
to it, but you still won't be able to use
response.redire ct.

John
-----Original Message-----
Hi all,

I want to do a similar action to response.redire ct

("file.htm") . But the
file.htm contains some sensitive data. I have placed

file.htm in a folder in
the InetPub (d:\inetpub\pri vateroot\file.h tm) so that it

is not accessible
by a simple HTTP request. An asp login script will be

used, and then once
the user is verified the page should redirect to
d:\inetpub\pri vateroot\file.h tm. But obviously I cannot

use
response.redir ect because it is not a recognisable URL.

Any ideas which
command I should use?

Btw, I use VB Script.
______________ ___________
<%= TIM_STOKES %>
(change the _'s in my e-mail address to .'s (this is anti-

spam))

.

Jul 19 '05 #3
Ah yeah,

Thought I'd mention that it's a remotly hosted site and I cannot use NT
security etc...
_______________ __________
<%= TIM_STOKES %>
(change the _'s in my e-mail address to .'s (this is anti-spam))
"Tim Stokes" <tim.stokes@fre shfmmanchester_ co_uk> wrote in message
news:3f******** **@mk-nntp-2.news.uk.tisca li.com...
Ok, cheers.

Do you have any suggestions as to how can I secure file.htm from being
retrieved without having put the username or password in??
_______________ __________
<%= TIM_STOKES %>
(change the _'s in my e-mail address to .'s (this is anti-spam))
"John Beschler" <gi***@geewhiz. com> wrote in message
news:0b******** *************** *****@phx.gbl.. .
Can't be done. A browser can not access a page that is not
part of a web site. (Tehcnically, that's not 100% true,
but it applies in your case)

You must either place the page in a directory accessible
via the web or create a virtual directory on the directory
where your file lives.

NOTE: If you are on an intranet and the directory where
your file lives is on an accessible share, you could link
to it, but you still won't be able to use
response.redire ct.

John
-----Original Message-----
Hi all,

I want to do a similar action to response.redire ct

("file.htm") . But the
file.htm contains some sensitive data. I have placed

file.htm in a folder in
the InetPub (d:\inetpub\pri vateroot\file.h tm) so that it

is not accessible
by a simple HTTP request. An asp login script will be

used, and then once
the user is verified the page should redirect to
d:\inetpub\pri vateroot\file.h tm. But obviously I cannot

use
response.redir ect because it is not a recognisable URL.

Any ideas which
command I should use?

Btw, I use VB Script.
______________ ___________
<%= TIM_STOKES %>
(change the _'s in my e-mail address to .'s (this is anti-

spam))

.


Jul 19 '05 #4
If it's an ASP file, then include as the first part of the
file a check for some session variable. If the session
variable is NOT what you think it should be, then redirect
the visitor to a page which requires a login and password.

For example:

In the "secure" page:
If Session("Author ised") <> "True" Then
Response.redire ct("Login.asp" )
End If

In login.asp:
If ValidUser = True Then
Session("Author ised") = "True"
Else
Session("Author ised") = "False"
End If

This way anytime the page is requested, the first thing it
will do is verify the user has met your credentials.

If your page is HTML, simply change the Extension to .ASP
and add the code at the begining as above.

We use this at: www.stagecrafters.com/admin and it works
quite well.

-----Original Message-----
Ok, cheers.

Do you have any suggestions as to how can I secure file.htm from beingretrieved without having put the username or password in??
______________ ___________
<%= TIM_STOKES %>
(change the _'s in my e-mail address to .'s (this is anti- spam))

"John Beschler" <gi***@geewhiz. com> wrote in message
news:0b******* *************** ******@phx.gbl. ..
Can't be done. A browser can not access a page that is not part of a web site. (Tehcnically, that's not 100% true,
but it applies in your case)

You must either place the page in a directory accessible
via the web or create a virtual directory on the directory where your file lives.

NOTE: If you are on an intranet and the directory where
your file lives is on an accessible share, you could link to it, but you still won't be able to use
response.redire ct.

John
>-----Original Message-----
>Hi all,
>
>I want to do a similar action to response.redire ct

("file.htm") . But the
>file.htm contains some sensitive data. I have placed

file.htm in a folder in
>the InetPub (d:\inetpub\pri vateroot\file.h tm) so that
it is not accessible
>by a simple HTTP request. An asp login script will be

used, and then once
>the user is verified the page should redirect to
>d:\inetpub\pri vateroot\file.h tm. But obviously I cannot

use
>response.redir ect because it is not a recognisable URL.

Any ideas which
>command I should use?
>
>Btw, I use VB Script.
>______________ ___________
><%= TIM_STOKES %>
>(change the _'s in my e-mail address to .'s (this is
anti- spam))
>
>
>
>.
>

.

Jul 19 '05 #5
Does anyone have a suggestion as to how I could automate this function?

Cheers
_______________ __________
<%= TIM_STOKES %>
(change the _'s in my e-mail address to .'s (this is anti-spam))
"Tim Stokes" <tim.stokes@fre shfmmanchester_ co_uk> wrote in message
news:3f******** @mk-nntp-2.news.uk.tisca li.com...
Thanks

That would have been my next idea... it's just that there are going to be
about 500+ html pages added per day!
_______________ __________
<%= TIM_STOKES %>
(change the _'s in my e-mail address to .'s (this is anti-spam))
"John Beschler" <gi***@geewhiz. com> wrote in message
news:6c******** *************** *****@phx.gbl.. .
If it's an ASP file, then include as the first part of the
file a check for some session variable. If the session
variable is NOT what you think it should be, then redirect
the visitor to a page which requires a login and password.

For example:

In the "secure" page:
If Session("Author ised") <> "True" Then
Response.redire ct("Login.asp" )
End If

In login.asp:
If ValidUser = True Then
Session("Author ised") = "True"
Else
Session("Author ised") = "False"
End If

This way anytime the page is requested, the first thing it
will do is verify the user has met your credentials.

If your page is HTML, simply change the Extension to .ASP
and add the code at the begining as above.

We use this at: www.stagecrafters.com/admin and it works
quite well.

-----Original Message-----
Ok, cheers.

Do you have any suggestions as to how can I secure

file.htm from being
retrieved without having put the username or password in??
______________ ___________
<%= TIM_STOKES %>
(change the _'s in my e-mail address to .'s (this is anti-

spam))


"John Beschler" <gi***@geewhiz. com> wrote in message
news:0b******* *************** ******@phx.gbl. ..
> Can't be done. A browser can not access a page that is

not
> part of a web site. (Tehcnically, that's not 100% true,
> but it applies in your case)
>
> You must either place the page in a directory accessible
> via the web or create a virtual directory on the

directory
> where your file lives.
>
> NOTE: If you are on an intranet and the directory where
> your file lives is on an accessible share, you could

link
> to it, but you still won't be able to use
> response.redire ct.
>
> John
>
>
>
> >-----Original Message-----
> >Hi all,
> >
> >I want to do a similar action to response.redire ct
> ("file.htm") . But the
> >file.htm contains some sensitive data. I have placed
> file.htm in a folder in
> >the InetPub (d:\inetpub\pri vateroot\file.h tm) so that

it
> is not accessible
> >by a simple HTTP request. An asp login script will be
> used, and then once
> >the user is verified the page should redirect to
> >d:\inetpub\pri vateroot\file.h tm. But obviously I cannot
> use
> >response.redir ect because it is not a recognisable URL.
> Any ideas which
> >command I should use?
> >
> >Btw, I use VB Script.
> >______________ ___________
> ><%= TIM_STOKES %>
> >(change the _'s in my e-mail address to .'s (this is

anti-
> spam))
> >
> >
> >
> >.
> >
.


Jul 19 '05 #6
There are aliases... And there are password protaced dirs... And you can
open the file, then output it...

With my setup, there are lots of ways to do it as I must request everything
through my Apache which can password protect stuff, and I can use a perl,
php or jsp script to verify the user, then send an internal request to
Apache which forwards that request to the private IIS dir, then the Apache
script would get the output of the IIS script, then it could output it to
the user... Although, I doubt very many ppl have this wierd setup so the
first paragraph would most likely be most worth reading...

--
// DvDmanDT
MSN: dv******@hotmai l.com
Mail: dv******@telia. com
"Tim Stokes" <tim.stokes@fre shfmmanchester_ co_uk> skrev i meddelandet
news:3f******** @mk-nntp-2.news.uk.tisca li.com...
Does anyone have a suggestion as to how I could automate this function?

Cheers
_______________ __________
<%= TIM_STOKES %>
(change the _'s in my e-mail address to .'s (this is anti-spam))
"Tim Stokes" <tim.stokes@fre shfmmanchester_ co_uk> wrote in message
news:3f******** @mk-nntp-2.news.uk.tisca li.com...
Thanks

That would have been my next idea... it's just that there are going to be about 500+ html pages added per day!
_______________ __________
<%= TIM_STOKES %>
(change the _'s in my e-mail address to .'s (this is anti-spam))
"John Beschler" <gi***@geewhiz. com> wrote in message
news:6c******** *************** *****@phx.gbl.. .
If it's an ASP file, then include as the first part of the
file a check for some session variable. If the session
variable is NOT what you think it should be, then redirect
the visitor to a page which requires a login and password.

For example:

In the "secure" page:
If Session("Author ised") <> "True" Then
Response.redire ct("Login.asp" )
End If

In login.asp:
If ValidUser = True Then
Session("Author ised") = "True"
Else
Session("Author ised") = "False"
End If

This way anytime the page is requested, the first thing it
will do is verify the user has met your credentials.

If your page is HTML, simply change the Extension to .ASP
and add the code at the begining as above.

We use this at: www.stagecrafters.com/admin and it works
quite well.


>-----Original Message-----
>Ok, cheers.
>
>Do you have any suggestions as to how can I secure
file.htm from being
>retrieved without having put the username or password in??
>______________ ___________
><%= TIM_STOKES %>
>(change the _'s in my e-mail address to .'s (this is anti-
spam))
>
>
>"John Beschler" <gi***@geewhiz. com> wrote in message
>news:0b******* *************** ******@phx.gbl. ..
>> Can't be done. A browser can not access a page that is
not
>> part of a web site. (Tehcnically, that's not 100% true,
>> but it applies in your case)
>>
>> You must either place the page in a directory accessible
>> via the web or create a virtual directory on the
directory
>> where your file lives.
>>
>> NOTE: If you are on an intranet and the directory where
>> your file lives is on an accessible share, you could
link
>> to it, but you still won't be able to use
>> response.redire ct.
>>
>> John
>>
>>
>>
>> >-----Original Message-----
>> >Hi all,
>> >
>> >I want to do a similar action to response.redire ct
>> ("file.htm") . But the
>> >file.htm contains some sensitive data. I have placed
>> file.htm in a folder in
>> >the InetPub (d:\inetpub\pri vateroot\file.h tm) so that
it
>> is not accessible
>> >by a simple HTTP request. An asp login script will be
>> used, and then once
>> >the user is verified the page should redirect to
>> >d:\inetpub\pri vateroot\file.h tm. But obviously I cannot
>> use
>> >response.redir ect because it is not a recognisable URL.
>> Any ideas which
>> >command I should use?
>> >
>> >Btw, I use VB Script.
>> >______________ ___________
>> ><%= TIM_STOKES %>
>> >(change the _'s in my e-mail address to .'s (this is
anti-
>> spam))
>> >
>> >
>> >
>> >.
>> >
>
>
>.
>



Jul 19 '05 #7

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
1918
by: Jon Maz | last post by:
Hi All, To allow myself to make development changes directly on a remote server *without* having to compile on my local dev machine and then upload the dll's to remote, I have created a RunBatch.aspx on the remote which calls a batch file (myBuild.bat) on the same machine, and this batch file executes the necessary command-line compiler instructions to recompile (code below). So far (fingers crossed) it seems to be working. The only...
4
2281
by: Philippe Meunier | last post by:
Hello, I've built a web application that ask the user for 3 values (textboxes) and when the user press a button (command button) the server genereates a report in a temporary html file My App is in the folder c:\inetpub\wwwroot\TestReport My report is generated in c:\inetpub\wwwroot\TestReport\Tmp\Test.html I need to set my Cookieless property to True (for something else), so in the
5
2157
by: john | last post by:
Hello, One our thrid page for some reason the response.redirect isn't working on the live server. It works fine on the development machine but when we move the code to the live server it doesn't work. The first page is a login page and the response.redirect does work there but not on the third page. Any ideas? Thanks in advance. John
2
3849
by: WJ | last post by:
1. I have a website called "myWeb" resides under E:\SOS\myWeb.Net" folder in an IIS-6/Windows 2003 server. Its host-header is "myWeb.Net". 2. Default page is "Index.aspx". 3. In the same folder as above, there are two additional aspx pages called: page2.aspx and page2.1.aspx. 4. The "Index.aspx" calls "Page2.aspx" with the command "Response.Redirect("http://myWeb.Net/Page2.aspx"); This always works.
7
13407
by: Mark | last post by:
Hello, I have researched and tried every thing I have found on the web, in groups and MS KB articles. Here is what I have. I have a Windows 2000 Domain Controller all service packs and every thing else from windows update. ..NET 1.0 and 1.1 installed on the server. Actually .NET was installed before the server was made a DC.
4
1333
by: news.microsoft.com | last post by:
Hello All, im am new to ASP.NET, so bare with me. i have an application that i am building in stages. stage1 user picks data required stage2 file is written to a virutal directory Stage3 the file is then saved by the user to their hard disk
1
3573
by: ddelaney | last post by:
I've seen this posted before in many places, but have yet to find a real fix. I have a web application on dev server right now, and randomly, hours or days, it returns the expception posted below. If I copy the incHeader.ascx.vb over to the server again, it appears to recompile and works fine, again, for random period of times. Even precompiling is no help. Is there a fix or workaround so this can some stability? Any help at all is...
9
2193
by: KenLee | last post by:
I made an application which includes classic asp page and asp.net page. when I tried to redirect from classic asp page to asp.net 2.0 page, it works under my local IIS directory. ex) <a href="default.aspx?store=<%=rs("store")%>"><%=rs("store")%></a> However, When I copy that application into one of IIS directory in another intranet server, it doesn't work.
1
1797
by: Craig Douglas | last post by:
Hi, I have a problem with getting a redirect to work on our server. It's worked fine on our server for months, but suddenly won't work and I can't figure out why. codewise, It's nothing special: Response.Redirect("indexThankYou.htm");
0
9672
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
9519
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
10439
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
10001
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
0
9043
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
0
6783
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5437
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
5563
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
2
3727
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.