web design tutorial

ASP programming to a new instance of the code parameter search

admin — Tue, 31 Aug 2010 09:24:14 +0000

<%
‘************ ******************* Defined constants
‘—- ParameterDirectionEnum Values —-
Const adParamUnknown = & H0000
Const adParamInput = & H0001
Const adParamOutput = & H0002
Const adParamInputOutput = & H0003
Const adParamReturnValue = & H0004

‘—- CommandTypeEnum Values —-
Const adCmdUnknown = & H0008
Const adCmdText = & H0001
Const adCmdTable = & H0002
Const adCmdStoredProc = & H0004
Const adCmdFile = & H0100
Const adCmdTableDirect = & H0200

‘—- DataTypeEnum Values —-
Const adEmpty = 0
Const adTinyInt = 16
Const adSmallInt = 2
Const adInteger = 3
Const adBigInt = 20
Const adUnsignedTinyInt = 17
Const adUnsignedSmallInt = 18
Const adUnsignedInt = 19
Const adUnsignedBigInt = 21
Const adSingle = 4
Const adDouble = 5
Const adCurrency = 6
Const adDecimal = 14
Const adNumeric = 131
Const adBoolean = 11
Const adError = 10
Const adUserDefined = 132
Const adVariant = 12
Const adIDispatch = 9
Const adIUnknown = 13
Const adGUID = 72
Const adDate = 7
Const adDBDate = 133
Const adDBTime = 134
Const adDBTimeStamp = 135
Const adBSTR = 8
Const adChar = 129
Const adVarChar = 200
Const adLongVarChar = 201
Const adWChar = 130
Const adVarWChar = 202
Const adLongVarWChar = 203
Const adBinary = 128
Const adVarBinary = 204
Const adLongVarBinary = 205
Const adChapter = 136
Const adFileTime = 64
Const adPropVariant = 138
Const adVarNumeric = 139
Const adArray = & H2000

Dim rs, cmd, cn
Set cmd = Server.CreateObject (“ADODB.Command”)
Set cn = Server.CreateObject (“ADODB.Connection”)
‘Here are connected to SQL Server 2008 database, modify the connection string of other databases.
cn.Open “Provider = SQLNCLI10; Server = (local); Database = database name; Uid = database login name; Pwd = password;”
With cmd
    . ActiveConnection = cn
    . CommandType = adCmdText
    . CommandText = “Select * From BaseObject Where parentname LIKE? And contentclass =?”
    . Prepared = True
    . Parameters.Append. CreateParameter (“parentname”, adVarChar, adParamInput, 512, “% / ItemImage /%”)
    . Parameters.Append. CreateParameter (“mengxianhui”, adVarChar, adParamInput, 512, “urn: schemas-mengxianhui-com-cn: basedocument”)
     Set rs =. Execute
End With
While Not rs.EOF
Response.Write “

” & rs (“displayname”)
rs.MoveNext
Wend
Set cmd = Nothing
Set rs = Nothing
Set cn = Nothing
%>

Can write the following format:
Dim rs, cmd, cn
Set cmd = Server.CreateObject (“ADODB.Command”)
Set cn = Server.CreateObject (“ADODB.Connection”)
‘Here are connected to SQL Server 2008 database, modify the connection string of other databases.
cn.Open “Provider = SQLNCLI10; Server = (local); Database = database name; Uid = database login name; Pwd = password;”
With cmd
    . ActiveConnection = cn
    . CommandType = adCmdText
    . CommandText = “Select * From BaseObject Where parentname LIKE? And contentclass =?”
    . Prepared = True
    . Parameters (0). Value = “% / ItemImage /%”
    . Parameters (1). Value = “urn: schemas-mengxianhui-com-cn: basedocument”
     Set rs =. Execute
End With
While Not rs.EOF
Response.Write “

” & rs (“displayname”)
rs.MoveNext
Wend

asp.net label on the label binding instance

admin — Tue, 31 Aug 2010 09:22:27 +0000

Front:
’>


      ’>


      ’>


      ’>
’>


        ’>


        ’>


        ’>

Background Code:
IDictionary Dic = new Dictionary ();
   protected void Page_Load (object sender, EventArgs e)
   (
       if (! Page.IsPostBack)
       (
           BindData ();
       )
   )
   public string GetName (object index)
   (
       / / If the operator returns the left of the left non-empty, otherwise it is on the right!
       index = index?? “”;
       int key;
       int.TryParse (index.ToString (), out key);

       return Dic [key];
   )
   public void BindData ()
   (
       Dic.Add (1, “Hugo”);
       Dic.Add (2, “Hu Lei”);
       Dic.Add (3, “Toshibumi”);
       Dic.Add (4, “Liu kin”);
       DataBind ();

Asp.nep IP address access restrictions on the design process

admin — Tue, 31 Aug 2010 09:20:10 +0000

ip add a page is to use a ListBox, TextBox, 2 Button

In the other pages directly compared with the current IP database IP, the code below!

Add page HTML code IP restrictions
<% @ Page Language = “C #” AutoEventWireup = “true” CodeFile = “ip.aspx.cs” Inherits = “admin_ip”%>

http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd“>

http://www.w3.org/1999/xhtml“>

Untitled Page </ title> <link href=”../images/news.CSS” rel=”stylesheet” type=”text/css” /> </ Head> <body> <form id=”form1″ runat=”server”> <div> <Asp: SqlDataSource ID = “SqlDataSource1″ runat = “server” ConnectionString =”<%$ ConnectionStrings: book%> ” PRoviderName =”<%$ ConnectionStrings: book.ProviderName%> “SelectCommand =” SELECT [ip] FROM [ip] “> </ Asp: SqlDataSource> <table align=”center” style=”border-right: #0066cc 1px dotted; border-top: #0066cc 1px dotted; border-left: #0066cc 1px dotted; border-bottom: #0066cc 1px dotted”> <tr> <Td rowspan = “2″ style = “width: 100px; border-right: # 33ccff 1px groove; border-top: # 33ccff 1px groove; border-left: # 33ccff 1px groove; border-bottom: # 33ccff 1px groove; “> <Asp: ListBox ID = “iplxb” runat = “server” DataSourceID = “SqlDataSource1″ DataTextField = “ip” DataValueField = “ip” Height = “194px” Width = “153px”> </ asp: ListBox> </ td> <td style=”width: 100px; border-right: #33ccff 1px groove; border-top: #33ccff 1px groove; border-left: #33ccff 1px groove; border-bottom: #33ccff 1px groove;”> Fill in the standard IP address to the inside lower left text box, then click the button to add! <Asp: RegularExpressionValidator ID = “RegularExpressionValidator1″ runat = “server” ControlToValidate = “iptb” Display = “Dynamic” ErrorMessage = “IP address format is incorrect” ValidationExpression = “([0-9] (2,3 })([.])([ 0-9] (1,3 })([.] ) ([0-9] (1,3 })([.])([ 0-9] (1,3 })”></ asp: RegularExpressionValidator> </ td> </ Tr> <tr> <td style=”width: 100px; border-right: #33ccff 1px groove; border-top: #33ccff 1px groove; border-left: #33ccff 1px groove; border-bottom: #33ccff 1px groove;”> <asp:LinkButton ID=”LinkButton1″ runat=”server” OnClick=”LinkButton1_Click”> to delete the selected rows </ asp: LinkButton> </ td> </ Tr> <tr> <td style=”width: 100px; border-right: #33ccff 1px groove; border-top: #33ccff 1px groove; border-left: #33ccff 1px groove; border-bottom: #33ccff 1px groove;”> <asp:TextBox ID=”iptb” runat=”server” Width=”150px”> 61.139.33.22 </ asp: TextBox> </ td> <td style=”width: 100px; border-right: #33ccff 1px groove; border-top: #33ccff 1px groove; border-left: #33ccff 1px groove; border-bottom: #33ccff 1px groove;”> <asp:Button ID=”Button1″ runat=”server” OnClick=”Button1_Click” Text=”增加” Width=”80px” /> </ td> </ Tr> </ Table> </ Div> </ Form> </ Body> </ Html> IP Add page CS code restrictions using System; using System.Data; using System.Configuration; using System.Collections; using System.Web; using System.Web.Security; using System.Web.UI; using System.Web.UI.WebControls; using System.Web.UI.WebControls.WebParts; using System.Web.UI.HtmlControls; public partial class admin_ip: System.Web.UI.Page ( protected void Page_Load (object sender, EventArgs e) ( Server.Execute (“chklog.aspx”); ) protected void Button1_Click (object sender, EventArgs e) ( iplxb.Items.Add (iptb.Text); odb.insert (“insert into ip (ip) values (‘” + iptb.Text + “‘)”); ) protected void LinkButton1_Click (object sender, EventArgs e) ( for (int i = 0; i <iplxb.Items.Count; i + +) ( if (iplxb.Items [i]. Selected) ( odb.insert (“delete from ip where ip = ‘” + iplxb.SelectedItem.Text +”‘”); iplxb.Items.Remove (iplxb.SelectedItem.Text); ) ) ) ) Was necessary to restrict the IP code for the page is called page protected void Page_Load (object sender, EventArgs e) ( string ip = Request.UserHostAddress.ToString (); if (Convert.ToInt32 (odb.scr (“select count (*) from [ip] where ip = ‘” + ip + “‘”))> 0) Response.Write (“Sorry, your IP is limited access, please contact the administrator”); ) ) </article> <article> <h1>Frequently questions and answers of ASP set</h1> admin — Tue, 31 Aug 2010 09:16:05 +0000 As Microsoft’s website and database solution, ASP because of the unique operating system technologies such as Microsoft backing support, has been developed rapidly and is being more and more popular, in the current building in e-commerce sites have Many are using ASP to write programs. Recently, a lot of readers to learn from our ASP method of consultation and study some of the problems encountered, some of which are a beginner and frequently encountered problems. To help readers in the process of learning ASP ASP deepen understanding, and can effectively solve the problems encountered, we are more representative of the special collection of some of the problems out and in cite 11 Jiyu to answer in the hope This is the limited space here to learn ASP for your help. 1, issue: ASP is a programming language? A: ASP is not a programming language, but a development environment. ASP provides a server-side execution environment, which uses a special symbol () to distinguish between translation of HTML and must be sent to the client server command. It can execute commands including the HTML language, Microsoft VBScript, and Microsoft Jscript, etc., so you can create powerful Web applications. 2, issue: the Web server to accommodate multiple Web sites, you can use PWS? A: In the PWS can only accommodate a Web site. In order to accommodate the same number of Web sites on a computer, need to use Windows NT Server or Windows 2000 Server / Professional, and IIS. 3, issue: how to use the six built-in ASP objects? A: ASP provides a number of embedded objects, you can not set up directly in order to access and use them, the six main targets are: a request (Request) object, and response (Response) object, session (Session) object, application (Application) object, the server (Server) object, Cookies object, the six object server (Server) object to load the other components, which can extend the functions of ASP. Object created using Server.CreateObject, it’s life cycle when it began to establish, in its end of the process at the end of the page. If you want to use the object across pages, you can use the Session object to keep track of objects created Server.CreateObject. 4, issue: Why Response.Redirect when using the following error: “heading error, the title has to write HTTP client browser, the title of any HTTP changes made to the written page content before?” Answer: Response.Redirect can be transferred to another web page, use the grammatical structure like this: Response.Redirect URL, where URL address can be relative or absolute address, but use in IIS4.0 IIS5.0 to use in different. Pages in IIS4.0 transfer any data to be in none of the output to the browser before the client, or an error. The data here include the HTML of the so-called label, for example: <HTML>, <BODY> and so on, has been improved in IIS5.0, IIS5.0 by default in the buffer is turned on, this error is not re-generate. Response Buffer object in a property, the property can be set to Wang Zhan Shi Pi in the treatment immediately after ASP to transfer data to the client, but to set the property must also transfer any data to the client . To be safe, regardless of what ASP is running platform, began to write on the page <% Response.Buffer = True%>, the buffer is set to open, this error will not happen. 5, issue: buffer output for web traffic have no effect? A: In the larger Web page, the first part appeared in the browser may be some delays, but the entire Web page loading speed is faster than without the buffer. 6, issue: when the form is submitted in the absence of the value of query string can use the Request.QueryString collection? A: Request object to read data in the browser, it only can read the contents of form fields can also be used to read back the parameters included in the website, regardless of the request Zifu Chuan Zen Yang to the linked address in on the Request Lai that are no different. Submit a form using the get method, or follow the link to an additional query string values of all the query string, can use the Request.QueryString collection. 7, issue: ASP script I wrote a lot of comments, this will not affect the speed of server processing ASP files? A: In the process of writing programs for comment is a good habit. The foreign technicians test, with too many notes in the ASP file will drop the overall performance of only 0.1%, which means that basically does not feel the practical application server performance degradation. 8, issue: need to be in the beginning of each ASP file using the <% @ LANGUAGE = VBScript%>? A: In the beginning of each ASP file using the <% @ LANGUAGE = VBScript%> code is used to inform the server is using VBScript to write programs, but as the default program language is ASP VBScript, so you can ignore the normal operation of this code However, the scripting language if the program is JavaScrip, the first line in the program will need to specify the scripting language used. 9, issue: I have no need to use each ASP file “Option Explicit”? A: In practical applications, VBScript variable concept has been blurred, allowing direct use of the variable, instead of Dim statement variables, but this is not a good habit, easily lead to error, because it is possible to repeat the definition of a variable. We can use the Option Explicit in the program statement, so that when using a variable, you must first declare it, if the use of the variable has not been declared, run-time, the program error. Proved, ASP file using the “Option Explicit” can make opportunities to a minimum error, and will greatly enhance the overall performance. 10, issue: what to run ASP file security? A: ASP code to provide a good protection mechanism, and all of the ASP code is executed on the server and only returned to the client code execution results. But people still do not rule out a malicious Web server to the deliberate destruction, so in the preparation of ASP files must pay attention to security issues. Although the introduction of ASP files to inc as the extension, where it is recommended to ASP as the file extension lead. When the code in the security mechanism of Web Server on a bad run, just enter in the address bar the address Yinru files (inc the extension name), you can browse the contents of the introduction of paper, this is because the Web Server, If there is no good definition of a particular type of analysis (such as inc) in the dynamic link library, the source file to be displayed. Also, do not put the database files on the internal site structure, so that when a malicious person access to the database path, you can easily access the database, and then arbitrarily change the database contents. Better approach is to set up a data source name for the database DSN (Date Source Name), stored in the DSN to connect to the specified data about the provider of information, including: “the physical location of the database, for accessing the database driver type of driver to access the database and any other required parameters “, during database access can directly access the DSN. 11, issue: Review of Web database management system, which issues should be considered? Answer: In the evaluation of a Web database management system must take into account three aspects: multi-user problem; the establishment of relational Web database should be the; database security issues. 12, issue: ADO is what it is to operate the database? A: ADO’s full name is the ActiveX Data Object (ActiveX Data Objects), is a set of optimized access to the database-specific set of objects, it provides a complete site ASP database solution, which acts on the server side, providing a database containing information home page content, by executing SQL commands, allowing users to type in the browser screen, update, and delete the site databases. ADO include Connection, Recordset, and Command of three objects, their primary function is as follows: · Connection object: for open or connect to the database file; · Recordset object: access database content; · Command object: actions on the database queries issued instructions, and the implementation of SQL Server stored procedure. </article> <article> <h1>Use the idea of JSP to do ASP</h1> admin — Sat, 21 Aug 2010 03:14:34 +0000 Functionality of the program with a general framework, in fact, can add their own features, such as the beginning of the database connection, you can first set Variable then INIT () to select different types of databases <% ‘On Error Resume Next Class ConnEx public ConnEx public DBpath’——— database path public DBtype’——— database type 1 (Access) 2 (SqlServer) 3 (expandable) public ConnMethod’——– connection (DSN, non-DSN) public User public Pass Sub Class_initialize End Sub Sub Init () ConnStr = “Driver = (Microsoft Access Driver (*. mdb)); dbq =” & Server.MapPath (“Date.mdb”) Set ConnEx = Server.Createobject (“ADODB.CONNECTION”) ConnEx.Open ConnStr CatchError (“Class_Terminate”) End Sub Sub CatchError (Str) If Err Then Err.Clear Class_Terminate () Response.Write (“caught error, the program ended! In” & Str & “Office”) Response.End () End If End Sub ‘****************************************** ‘* SQL statement to find records by the existence of error-prone ‘****************************************** Function HasRecordBySql (Sql) Call CheckSql (Sql, “R”) Dim Rs, HasR Set Rs = ConnEx.Execute (Sql) CatchError (“HasReordSql”) If Not (Rs.eof Or Rs.bof) Then HasR = False Else HasR = True End If Rs.Close Set Rs = Nothing HasRecordBySql = HasR End Function ‘*************************************** ‘* ID to find the records by the existence of ‘*************************************** Function HasRecordById (StrTableName, IntID) ‘CheckValue (IntID, 1) Dim Rs, HasR Sql = “Select top 1 * from” & StrTableName & “Where Id =” & IntID Call CheckSql (Sql, “R”) Set Rs = ConnEx.Execute (Sql) CatchError (“HasRecordByID”) If Not (Rs.eof Or Rs.bof) Then HasR = False Else HasR = True End If Rs.close Set Rs = Nothing HasRecordById = HasR End Function ‘********************************************** ‘* Get record set by SQL statement ‘********************************************** Function GetRsBySql (Sql) Call CheckSql (Sql, “R”) Dim Rs Set Rs = Server.CreateObject (“Adodb.RecordSet”) Rs.Open Sql, ConnEx, 1,1 Set GetRsBySql = Rs End Function ‘********************************************* ‘* To obtain the value of a field ‘********************************************* Function GetValueBySql (Sql) Call CheckSql (Sql, “R”) Dim Rs, ReturnValue Set Rs = ConnEx.Execute (Sql) CatchError (“GetValueBySql”) If Not (Rs.Eof Or Rs.Bof) Then ReturnValue = Rs (0) Else ReturnValue = “no record” End If Rs.Close Set Rs = Nothing GetValueBySql = ReturnValue End Function ‘================================================= = Update, Insert =================================== ‘********************************************* ‘* Using SQL to modify data ‘********************************************* Function UpdateBySql (Sql) Call CheckSql (Sql, “w”) ConnEx.Execute (Sql) CatchError (“UpdateBySql”) UpdateBySql = True End Function ‘******************************************** ‘* Insert data using SQL statements ‘******************************************** Function InsertBySql (Sql) Call CheckSql (Sql, “w”) ConnEx.Execute (Sql) CatchError (“InsertBySql”) InsertBySql = True End Function ‘================================================= ===== Delete ======================================== ‘******************************************** ‘* Deleted by SQL statement ‘******************************************** Function DeleteBySql (Sql) Call CheckSql (Sql, “D”) ConnEx.Execute (Sql) CatchError (“DeleteBySql”) DeleteBySql = True End Function ‘******************************************** ‘* Check the SQL statement permissions, according to Flag to detect the signs have the permission statement ‘******************************************** Sub CheckSql (Sql, Flag) Dim StrSql, SinCounts, DouCounts, i StrSql = Lcase (Sql) SinCounts = 0 DouCounts = 0 For i = 1 to Len (StrSql) If Mid (StrSql, i, 1) = “‘” Then SinCounts = SinCounts + 1 If Mid (StrSql, i, 1) = “” “” Then DouConnts = DouCounts + 1 Next If (SinCounts Mod 2) <> 0 Or (DouCounts Mod 2) <> 0 Or Instr (StrSql ,”;”)> 0 Then Call Class_Terminate () Response.Write Response.End () End If Select Case Flag Case “R”, “r”: If Instr (StrSql, “delete”)> 0 Or Instr (StrSql, “update”) Or Instr (StrSql, “drop”)> 0 Or Instr (StrSql, “insert”)> 0 Then Class_Terminate () Response.Write (“Permission denied, no permission to write to”) Response.End () End If Case “W”, “w”: If Instr (StrSql, “delete”)> 0 Or Instr (StrSql, “drop”)> 0 Or Instr (StrSql, “select”)> 0 Then Class_Terminate () Response.Write Response.End () End If Case “D”, “d”: Case Else: Response.Write End Select End Sub Sub Class_Terminate If Not IsEmpty (FriendConn) Then FriendConn.Close Set FriendConn = Nothing CatchError () End If End Sub End Class %> </article> <article> <h1>Comprehensive Analysis of the Server object</h1> admin — Sat, 21 Aug 2010 03:11:59 +0000 Server object provides access to the server, the methods and properties. Most of the methods and attributes as utility functions provided. Syntax: Server.property | method Property (property) Server object has only one attribute: ScriptTimeout program to run the maximum time Method (Methods) CreateObject an object instance. Execute the implementation of an asp file GetLastError returns an error code HTMLEncode HTML code on the specified conversion. MapPath a relative path into an absolute path. Transfer all current state information will be sent to another asp file URLEncode in the form of transformation of the specified URL code, including spaces Server object method details CreateObject Grammar Server.CreateObject (progID) Parameter progID Specify the component name to create the following format: [Vendor.] Component [. Version]. Highlights: In general, using the Server.CreateObject method to create the object has page scope. That said, when the asp page execution procedure finished, this object will automatically disappear. To create a Session or Application scope has the object, you can use Global.asa file Execute Execute method calls an ASP file and execute it calls the ASP file like this exists in the same ASP file. This is much like many languages in the class of the call. Grammar Server.Execute (Path) Parameter Path Asp file that specifies the implementation of the path. So it is an absolute path, then it must be a ASP application in the same place (directory). Explain Server.Execute method provides a way to differentiate a complex ASP applications for the small units to perform the method. In this way, you can build an ASP library, you can easily call you when you need it in the ASP file library. This would seem to SSI up! Hei hei! When IIS ASP file under the specified path after you perform this ASP file, it will automatically return to the previous ASP file. This just completed the implementation of the ASP document may change the HTTP head. But, like other of the ASP file, when the program attempts to change the http head, they would error! The path parameter can include an inquiry message. If you are calling and call the ASP files contain the same Functions, Functions only if they play a role in the ASP file. For example, if the following two files in the ASP1 and ASP2 contain Functions to give up the program. First ASP1 call ASP2, then ASP2 of the OnTransactionAbort started, when ASP2 is finished, ASP1 in OnTransactionAbort just started. ASP1: <% @ Transaction = Required%> <% Server.Execute (“Page22.asp”) Sub OnTransactionAbort Sub OnTransactionCommit %> Asp2.asp: <% @ Transaction = Required Sub OnTransactionAbort Sub OnTransactionCommit %> Example ASP1 <% Response.Write (“I am going to execute ASP2″) Server.Execute (“/ myasps/asp2.asp”) %> ASP2 <% Response.Write (“Here I am”)%> GetLastError GetLastError method returns an ASPError Object to describe an error message. This method only applies to anything in the asp file to send prior to the user machine. Grammar Server.GetLastError () Points If a 500; 100 user error has been defined in an asp application, it refers to a. Asp as the extension. Under such circumstances, in this age when the program runs when an error occurs, the server will be automatically transmitted to Server.Transfer to this that is running the ASP 页面. ASP application will be effective treatment for such errors. In addition, the ASPError Object must be effective, so you can see the server error message to you to change the files! Web Site in general are based on the file \ iishelp \ common \ 500-100.asp to construct. You can use it to execute a asp error, of course, you can define their own! . If you want to change to another asp file to perform these user errors. Then you can use IIS in the snap-in. Note: When IIS found a asp file or an error in the global.asa file, then a 500; 100 user error generated. The following procedure will not perform! Example The following are three examples of errors generated by different user error. Three errors are: Compile Error Run Error Logic error The first example shows a compile error when IIS is trying to contain a file generated. This error will be generated because the included file does not define the required parameters. The second example shows a running error, the program was interrupted because the program does not “next”. The third example shows a logic error, because the program attempts to divide a 0. Not do it! Example 1 <% response.write “hello” %> Example 2 <% dim I for i = 1 to 1 nxt %> Example 3 <% dim i, j dim sum sum = 0 j = 0 for i = 1 to 10 sum = sum +1 next sum = sum / j %> HTMLEncode HTMLEncode method specified HTML encoded string. Grammar Server.HTMLEncode (string) Parameter the character string to be encoded Example The following procedures: <% = Server.HTMLEncode (“The paragraph tag:”)%> Output: The paragraph tag: Note that the program executed in the browser to see is: The paragraph tag: But if you use “View Source” to look at it, the source code is not. MapPath MapPath method relative path into physical path on the server Grammar Server.MapPath (Path) Parameter Path Relative path. This path is “/” or “\” at the beginning of the path, if this path is not “\”, then the method will return MapPath based on the current directory path. Explain MapPath method can not check path existence under this server. MapPath conversion path because this path regardless of whether the time is in existence under this server. You can use it to be a relative path into a physical path, and then in various operations under this path. Example In the following example, data.txt file exists C: \ Inetpub \ Wwwroot \ Script directory, and a test.asp file includes the following code. C: \ Inetpub \ Wwwroot is the server’s home directory. The following example, the first using the environment variable “PATH_INFO” get the physical path of the current file. Here is Script code: <% = Server.mappath (Request.ServerVariables (“PATH_INFO “))%> Show as: c: \ inetpub \ wwwroot \ script \ test.asp Because the example below there is no path parameter to “/” at the beginning, so it is a transformation of the current directory, asp file is placed in C: \ Inetpub \ Wwwroot \ Script in. The following is the content of scripts: <% = Server.mappath (“data.txt”)%> <% = Server.mappath (“script / data.txt”)%> Show as: c: \ inetpub \ wwwroot \ script \ data.txt c: \ inetpub \ wwwroot \ script \ script \ data.txt The following are two examples of a “/” at the beginning of the. The following is the content of scripts: <% = Server.mappath (“\ script”)%> Show as: c: \ inetpub \ wwwroot \ script \ data.txt c: \ inetpub \ wwwroot \ script Direct use of “/” or “\” will be the server’s home directory: <% = Server.mappath (“\”)%> Show as: c: \ inetpub \ wwwroot c: \ inetpub \ wwwroot Transfer transfer method will a asp file is executed all the information to another person asp file. Grammar Server.Transfer (path) Parameter Path Will receive information asp file. Points When you call Server.Transfer, all built-in objects of the status information will be included in the transfer into. This means that all stored in Session or Application information will be sent in, and that all current information will be requested to receive information asp file to accept. Example The following example demonstrates file transfer from one asp to another asp file examples! ASP1 <% Dim sessvar1 Response.Write Session.SessionID Response.Write (“”) Response.Write (“I am going to ASP2″) Server.Transfer (“/ Myasps/ASP2.asp”) %> ASP2 <% Response.Write Session.SessionID%> URLEncode URLEncode method can URL encode the specified string. Grammar Server.URLEncode (string) Parameter string specifies a string conversion Example Here is the code: <% Respones.Write (Server.URLEncode (“<a href="http://www.microsoft.com"))%/">http://www.microsoft.com”))%</a>> Show as: http% 3A% 2F% 2Fwww% 2Emicrosoft% 2Ecom Properties: ScriptTimeout ScriptTimeout attribute specifies a procedure for the maximum running time. Grammar Server.ScriptTimeout = NumSeconds Parameter NumSeconds Provides the largest program run time (in seconds). The default value is 90 seconds Remarks A default value will be able to Scritpt Timeout property to set off ASPScriptTimeOUT or Web server on the Web sertvic. In the process, ScriptTimeout value of the property can not be less than the default value. Give you an example, if NumSeconds we set to 10 seconds, while the default value is 90 seconds, then the program will stop in 90 seconds later, not 10 seconds later. Similarly, if we set ScriptTimeout value of 100 seconds, then the program will stop at 100 seconds rather than 90 seconds. Example In the following cases the program will be set to 100 seconds after the automatic stay. <% Server.ScriptTimeout = 100%> </article> <article> <h1>ASP Basics Tutorial: ASP loophole block</h1> admin — Sat, 21 Aug 2010 03:05:57 +0000 Whether you believe it or not, by asp, may be able to easily invade web server, file server, theft, capture web database system user password, and even malicious delete files on the server until the damage caused by the system, these decisions non-sensational, and have indeed occurred, this will reveal the asp you 11 loopholes, and some precautionary advice. When the last:: $ DATA vulnerability was discovered and released the next day, I have examined the use of asp was most domestic sites, which are present more than 99 percent can see the source code of the problem, the day I even Microsoft’s site grabbed the search.asp source code of this file. Perhaps you will find that the source code and no right, if you think so as the webmaster of the wrong. For example, if the landing site asp programmer to write code directly in the asp, so once the source is found, others can easily access the pages should not be seen, I have used this method to become a toll free Site members (we can do expose me oh!), and many connections to the database user name and password are also directly written in asp, the event was found, if your database to allow remote access and there is no fortification, then quite dangerous. In some developed bbs with asp program, often using access mdb database, mdb stock up if the path was informed that the database is likely to be downloading, plus the password if the database contains no encryption, it is very dangerous , and obtain the password of the person who intends to carry out sabotage, he only needs to login as admin to delete all the bbs in the post, you’d see enough of. Here are some of the loopholes have been identified, I hope you alert one, through experiments we found, win95 + pws run ASP program, just simply in the browser address bar asp file name to add a decimal point after the ASP program on will be downloaded. IIS3 have the same problem, if you currently still using IIS3 must test. Second, iis2, iis3, iis4 is a well-known loophole:: $ DATA, through its use of the view source or netscape ie direct access to the asp file can easily see the asp code. win98 + pws4 the loophole does not exist. What are the causes of this terrible loophole? Traced is unique to Windows NT file system doing strange. A little common sense knows that the NT provides a completely different from the FAT file system: NTFS, this is known as new technology makes the NT file system technology with a high security mechanism, but precisely because It generated a lot of hidden dangers headache. You may not know, NTFS support is included in a file of multiple data streams, and this contains all the elements of the master data stream is called “DATA”, which makes the browser to directly access the NTFS system, this feature is easily capture in the file script as possible. However, a direct result of:: $ DATA is due to IIS when parsing the file name out of a problem, it is not a good standard file name. How do we solve this problem? There are several ways: a, is. asp files stored in the directory is set to unreadable (ASP can be carried out), so html, css and other files can not be placed in this directory, otherwise they will not be here. b, is to install Microsoft patches available to download at the following address (note the different systems for different patches): The patch is against IIS3, Intel platform <a href="ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/cht/security/iis3-datafix/iis3fixi.exe">ftp.microsoft.com/bussys/iis/iis-public/fixes/cht/security/iis3-datafix/iis3fixi.exe</a> The patch is against IIS3, Intel platform <a href="ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/cht/security/iis3-datafix/iis3fixa.exe">ftp.microsoft.com/bussys/iis/iis-public/fixes/cht/security/iis3-datafix/iis3fixa.exe</a> The patch is for IIS4, Alpha platform <a href="ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/cht/security/iis4-datafix/iis4fixi.exe">ftp.microsoft.com/bussys/iis/iis-public/fixes/cht/security/iis4-datafix/iis4fixi.exe</a> The patch is for IIS4, Alpha platform <a href="ftp://ftp.microsoft.com/bussys/iis/iis-public/fixes/cht/security/iis4-datafix/iis4fixa.exe">ftp.microsoft.com/bussys/iis/iis-public/fixes/cht/security/iis4-datafix/iis4fixa.exe</a> c, is installed on the server ie4.01sp1, this is valid, the author did not specifically tried. d, deposit the author’s personal views pure, to install the English version of NT, but do not use the Chinese version of reason can not tell, but according to practical experience in the English version of NT bug less than the Chinese version, which friends to know if cause 10 million to tell me. 3. To support a free home page space, and ASP hosting service server problems 1, ASP code on the server is likely to be other people who have illegal access asp permission. Give a very simple example, in Microsoft’s ASP1.0 there is a routine. Asp file designed to view the other. Asp source code file, the file is ASPSamp / Samples / code.asp. If someone upload this process servers, and server-side without any precautions, he could easily see other people’s programs. For example: code.asp? source = / directory / file.asp 2, use ACCESS mdb database may be downloaded asp general competence in the provision of a free home page server can not set the DSN to provide services on behalf of, the asp database used by the program are usually limited to the use of mdb database, and the mdb far end of the database location is the use of our period mentioned in the 14th over of the DSN-less method specified directly in the asp, as follows: <% Connstr = “DBQ =” + server.mappath (“database / source.mdb “)+”; DefaultDir =; DRIVER = (Microsoft Access Driver (*. mdb)); DriverId = 25; FIL = MS Access; ImplicitCommitSync = Yes; MaxBufferSize = 512; MaxScanRows = 8; PageTimeout = 5; SafeTransactions = 0; Threads = 3; UserCommitSync = Yes; “%> As previously stated, in this case is likely to be another mdb database download, resulting in the disclosure of such password. Therefore, as a webmaster should take certain measures, like the program is strictly prohibited code.asp (seems to be very difficult, but you can periodically retrieve the characteristics of the code), limit mdb downloads. 3, from the threat of powerful filesystemobject components IIS3, IIS4 the ASP file operations can be achieved through filesystemobject, including reading and writing text file directory operations, file rename or delete the copy, but the powerful also left a very dangerous “backdoor.” Tampering with the use filesystemobjet download any files on the fat partition. Even the ntfs partition, if the authority does not set well, it would also be able to destroy, believe you may suffer from a “disaster.” Unfortunately, many webmaster know so that web server up and running, rarely carried out ntfs permissions, while the NT directory permissions of the default settings chosen to secure another terrible low. Therefore, if you are Webmaster, strongly suggest that you pay close attention of the server settings, try to build web directory partition in ntfs, directory not set everyone full control, even a member of the administrators group generally no need full control, as long as read, change the permissions enough. 4, ASP applications may face a number of Internet attacks in the past to write the message on the CGI or BBS is the customer of the input message into a variable, then put the variable into the HTML files to display messages, so customers text input To display the HTML file must comply with HTML standards, and CGI programs in general have joined a specific HTML language. When a customer input, insert the HTML file, that is also inserted into the head and tail HTML statement, such as: customer input variables However, if the HTML tags before and after to the spacious screen, and you can do a lot of things. Marked as input: HTML standards compliance statement after the is used to spacious screen CGI used in the HTML statement. Inserted into the HTML file inside becomes: HTML standards compliance statement as a feature, so write a javascript death cycle becomes very easy, as long as the input box: <A href = “URL” onMouseover = “while (1) (window.close (\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \’)}”> or <a herf = “URL” onMousever = “while (ture ) (window.close (\ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \’)}”> It will allow other customers to view the message browser die because death cycle. ASP development of the program is also possible that problem, so when you write a similar program O’clock Yong asp should do well on this type of operation the precautions, such as writing a program can determine the client and inputted into a shield out all of HTML, Javascript Yu Ju </article> <article> <h1>CSS more difficult than form?</h1> admin — Sat, 14 Aug 2010 08:24:59 +0000 CSS layout is being promoted to the voice of “the advantages of the layout table,” the voice of the coverage. A myth that CSS is hard to learn. In fact, CSS is not hard than other web technologies. The problem is: the form has been designed for very experienced web designers have to give up their way of thinking to switch to CSS. I have a table, the layout of many years, when I first started using CSS layout, I also encountered a problem. “Form and more simple Yeah,” I want to. However, it was only because I have are used to form, I know how to manipulate them. Any change, even a little bit will make me feel trouble, not to mention such a drastic change. Recalls the first time I learn to use table layout, there are a lot of the same problems plague me. Think back to those rowspans, colspans and blank GIF image, is fair to say that two distribution methods, and use some form layout more difficult. Another old-fashioned view is: CSS design page (bytes) is very large, large than the form design page. The reason is: Because you all the style of the site are in a file, when a user visits a page that contains the site’s style sheets style need to download, so the page is very great. Then why do you want to have all the styles in a CSS file? No limit you can only use a CSS file, you can as a part of the section of the details of the style of a separate sub style sheet file. In my experience, from simple brochure-type sites to large database-driven, multi-functional system website, I have never been used only a single style sheet file, the code does not have a home page design and more than form. That table, tr, td tags occupy a large space, it immediately into action, with the CSS layout methods to slash your file size down. When you use table layout, you have lost their semantic labels. standard method of distribution of the separation of web content and the presentation layer will bring huge benefits. When you lock your Form design, if you need to change it, you must find this page, and then analyze the table structure, then a page changes, while the CSS file can simply change the design of the site. With CSS you do not consider device-independent nature, without regard to the user to choose their own style. I also heard that a form of “good”: design forms. But the forms can be ordered by any method of the Table. To Netscape4? I have never heard of such an old browser support is a reason. Most mainstream browsers are far greater than the interests of the minority does not support the style sheet with the browser of the user’s interests (not speak of CSS also supports plain text). Those “super table” sum up the views of supporters is this: “form more easily.” This is nonsense! If you are satisfied with a less efficient way, which as you can. If you want to break out, to make page content more common, easy to use, even less code, try to change it. Of course, if you are a new learning web design from scratch, you will not have these problems. “Car does not simply push down”, “This is merely a tool designer toolbox.” This is some discussion of the viewpoints. Table layout as the old-fashioned wooden handle a screwdriver, you can still use it to get into some wall. I prefer to use the electric screwdriver, CSS layout is more efficient, will not let my hand and then blisters. </article> <article> <h1>Web Standards Jianzhan Tutorial 12 – Check and Common Errors</h1> admin — Sat, 14 Aug 2010 08:23:04 +0000 We strive to learn to use XHTML + CSS to redesign our site. So how do we know to produce their own web page that really meet the standard? W3C and some volunteers site provides online verification procedures, to help us check whether the page is standard, and provides a correct mistakes of help information. The check is very useful, is the first step I to do debugging page. 1.XHTML check Check website: <a href="http://validator.w3.org/">http://validator.w3.org/</a> Check mode: check URL, file upload validation Verification successful, will display “This Page Is Valid XHTML 1.0 Transitional!”, Figure: Validation fails, will display more options and check the error message, as shown: General Select “Show Source” and “Verbose Output” can help you find the line where the error code and error reason. XHTML validation error causes common table No DOCTYPE Found! Falling Back to HTML 4.01 Transitional – undefined DOCTYPE. No Character Encoding Found! Falling back to UTF-8 .– undefined language encoding. end tag for “img” omitted, but OMITTAG NO was specified – image tag does not add “/” Close. an attribute value specification must be an attribute value literal unless SHORTTAG YES is specified – attribute value must be in quotes. element “DIV” undefined — DIV tag can not use capital to lowercase div. required attribute “alt” not specified — need to add alt image attribute. required attribute “type” not specified — JS or CSS tag missed call type attribute. Far the most common mistakes is one case of label problems. Often these errors are related, such as forgetting one </ li> other <li> label will error, so do not be afraid to see a bunch of mistakes, usually to solve an error, other errors are also gone. If your page through XHTML1.0 validation, so you can place an icon on the page: code: <a href=”<a href="http://validator.w3.org/check/referer">http://validator.w3.org/check/referer</a>“> http://www.w3.org/Icons/valid-xhtml10</a>” alt = “Valid XHTML 1.0 ! “height =” 31 “width =” 88 “/> </ a> 2.CSS2 check Check Website: <a href="http://jigsaw.w3.org/css-validator/">http://jigsaw.w3.org/css-validator/</a> Check mode: check URL, file upload verification, validation code directly into the paste Verification successful, will show “Congratulations, this document has been through the style sheet check!”, Hoho, verify information to support the Chinese Oh. Figure: Validation fails, will show two types of errors: errors and warnings. Error that must be modified, otherwise can not verify; warned that the code is not W3C has recommended that the proposed changes. Causes of common errors in CSS2 validation table (Error) Invalid number: color909090 is not a color value: 909090 — hexadecimal color value to add “#” number, that is # 909 090 (Error) Invalid number: margin-topUnknown dimension: 6pixels — pixels is not a unit value, the correct wording 6px (Error) Attribute scrollbar-face-color does not exist: # eeeeee — scroll bar color is non-standard definition of the properties (Error) value cursorhand does not exist: hand is a non-standard property value, modify the cursor: pointer (Warning) Line: 0 font-family: suggest that you specify a type of family Bureau as the last option – W3C recommendation defined font when the font type of the last to end one, for example, “sans-serif”, to ensure operation in different systems, web fonts can be displayed. (Warning) Line: 0 can’t find the warning message for otherprofile – that there are non-standard attributes in the code or value, calibration procedures can not determine and provide the appropriate warning information. Similarly, by inspection, you can check by placing a CSS icon, the code is as follows: <a href=”<a href="http://jigsaw.w3.org/css-validator/">http://jigsaw.w3.org/css-validator/</a>“> http://jigsaw</a>. w3.org/css-validator/images/vcss “alt =” Valid CSS! “/> </ a> </article> <article> <h1>Web standards Jianzhan Tutorial 10 – Adaptive Height</h1> admin — Sat, 14 Aug 2010 08:21:00 +0000 If we want the final layout in three additional line footer, put the copyright information and the like. Experience must be aligned on the bottom of the problem 3. In the table layout, we form with large tables nested small way, you can easily align 3; and use div layouts, three independent distributed, the content of high and low, it is difficult to align. In fact, we can nested div, the three into a DIV in the bottom of the alignment done. Here is an example implementation (box simulating a white background page): Body Here is # header (MARGIN: 0px; BORDER: 0px; BACKGROUND: # ccd2de; WIDTH: 530px; HEIGHT: 60px;) Here is the # mainbox (MARGIN: 0px; WIDTH: 530px; BACKGROUND: # FFF;) contains a # menu, # sidebar and # content Here is the # menu (FLOAT: right; MARGIN: 2px 0px 2px 0px; PADDING: 0px 0px 0px 0px; WIDTH: 400px; BACKGROUND: # ccd2de;) Here is the # sidebar (FLOAT: left; MARGIN: 2px 2px 0px 0px; PADDING: 0px; BACKGROUND: # F2F3F7; WIDTH: 170px;), the background color using a # main background color Here is the # content (FLOAT: right; MARGIN: 1px 0px 2px 0px; PADDING: 0px; WIDTH: 400px; BACKGROUND: # E0EFDE;) This is the main content, automatically adapt to a high degree based on content This is the main content, automatically adapt to a high degree based on content This is the main content, automatically adapt to a high degree based on content Here is the # footer (CLEAR: both; MARGIN: 0px 0px 0px 0px; PADDING: 5px 0px 5px 0px; BACKGROUND: # ccd2de; HEIGHT: 40px; WIDTH: 530px;). The main page of this example code: <div id=”header”> </ div> <div id=”mainbox”> <div id=”menu”> </ div> <div id=”sidebar”> </ div> <div id=”content”> </ div> </ Div> <div id=”footer”> </ div> Specific style sheets are written in the appropriate Forum in the. Focus # mainbox layer nested # menu, # sidebar and # content of three layers. When increasing the content of # content, # content’s height will be increased, while the height of # mainbox distraction, # footer layer is automatically down. This achieved a high degree of adaptive. Also worth noting is: # menu and # content are floating on the page right “FLOAT: right;”, # sidebar is floating in the # menu layer of the left “FLOAT: left;”, which is positioning the floating method can also be used absolute positioning to achieve such results. There is another issue of this method is that the sidebar # sidebar’s background can not be 100 percent. The general solution is to use the body’s background color to fill full. (Can not use # mainbox the background color, because in Mozilla and other browsers # mainbox the background color of the failure.) </article> </main></body></html>