ASP Programming
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsProgramming Languages - MoreASP Programming

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
Be the architects of evolution and help create the mobile internet future. It’s your move---enter to win here!
  #1  
Old January 4th, 2008, 10:32 AM
Drewbkilla Drewbkilla is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2008
Posts: 6 Drewbkilla User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 5 h 34 m 9 sec
Reputation Power: 0
Question ASP Silent Post?

Hello All,

Please forgive me for any inaccuracies in what it's called.

I think it's considered a silent post.

I have an opt in form on my site that ties into a 3rd party contact management system, however when I made the form for visitors to opt-in, I neglected to realize that I need to pass my username and password to this 3rd party site, so using a get or any url encoded method isnt a good idea becasue you'd be able to see the username and password to my account clear as day.

I think this function is very similar to CC verification models. I've just never done one before.

I just need to pass the following info in any type of hidden state to a given URL.


loginName
loginPassword
ea <-- email
ic <-- list name to join

there are additional fields I can add but you did one you did them all, I just dont know how to peform this in ASP without the obvious passing of variables through a URL.

Any help would be greatly appreciated!

- Drew

Reply With Quote
  #2  
Old January 4th, 2008, 08:31 PM
Doug G Doug G is offline
Grumpier Old Moderator
Dev Shed God 12th Plane (10500 - 10999 posts)
 
Join Date: Jun 2003
Posts: 10,712 Doug G User rank is Brigadier General (60000 - 70000 Reputation Level)Doug G User rank is Brigadier General (60000 - 70000 Reputation Level)Doug G User rank is Brigadier General (60000 - 70000 Reputation Level)Doug G User rank is Brigadier General (60000 - 70000 Reputation Level)Doug G User rank is Brigadier General (60000 - 70000 Reputation Level)Doug G User rank is Brigadier General (60000 - 70000 Reputation Level)Doug G User rank is Brigadier General (60000 - 70000 Reputation Level)Doug G User rank is Brigadier General (60000 - 70000 Reputation Level)Doug G User rank is Brigadier General (60000 - 70000 Reputation Level)Doug G User rank is Brigadier General (60000 - 70000 Reputation Level)Doug G User rank is Brigadier General (60000 - 70000 Reputation Level)Doug G User rank is Brigadier General (60000 - 70000 Reputation Level)Doug G User rank is Brigadier General (60000 - 70000 Reputation Level) 
Time spent in forums: 4 Weeks 1 Day 23 h 47 m 6 sec
Reputation Power: 688
Anything you pass to the browser via http can be visible to the user depending on their determination. You'd need some other secure communication channel or application-level encryption between the asp server and the target server to keep things really hidden.
__________________
======
Doug G
======
"Hide, hide witch! The good folk come to burn thee. Their keen enjoyment hid behind their gothic mask of duty." -Mark Clifton

Reply With Quote
  #3  
Old January 4th, 2008, 09:15 PM
Death Goddess's Avatar
Death Goddess Death Goddess is offline
Crushing a million faces
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2007
Posts: 282 Death Goddess User rank is Second Lieutenant (5000 - 10000 Reputation Level)Death Goddess User rank is Second Lieutenant (5000 - 10000 Reputation Level)Death Goddess User rank is Second Lieutenant (5000 - 10000 Reputation Level)Death Goddess User rank is Second Lieutenant (5000 - 10000 Reputation Level)Death Goddess User rank is Second Lieutenant (5000 - 10000 Reputation Level)Death Goddess User rank is Second Lieutenant (5000 - 10000 Reputation Level)Death Goddess User rank is Second Lieutenant (5000 - 10000 Reputation Level) 
Time spent in forums: 5 Days 11 h 25 m 14 sec
Reputation Power: 88
Quote:
Originally Posted by Drewbkilla
Hello All,

Please forgive me for any inaccuracies in what it's called.

I think it's considered a silent post.

I have an opt in form on my site that ties into a 3rd party contact management system, however when I made the form for visitors to opt-in, I neglected to realize that I need to pass my username and password to this 3rd party site, so using a get or any url encoded method isnt a good idea becasue you'd be able to see the username and password to my account clear as day.

I think this function is very similar to CC verification models. I've just never done one before.

I just need to pass the following info in any type of hidden state to a given URL.


loginName
loginPassword
ea <-- email
ic <-- list name to join

there are additional fields I can add but you did one you did them all, I just dont know how to peform this in ASP without the obvious passing of variables through a URL.

Nothing should prevent you from submitting to another site by POST:
Code:
<form target="http://somewebsite.com/page.aspx" method="post">


Nothing is going to prevent a real hacker from intercepting the information, but at least the username and password won't be publically available in the users Http_Referrer server var.
__________________
Baby soft, because its made from real babies.

Reply With Quote
  #4  
Old January 7th, 2008, 10:50 AM
Drewbkilla Drewbkilla is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2008
Posts: 6 Drewbkilla User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 5 h 34 m 9 sec
Reputation Power: 0
Thanks!

Quote:
Originally Posted by Death Goddess
Nothing should prevent you from submitting to another site by POST:
Code:
<form target="http://somewebsite.com/page.aspx" method="post">


Nothing is going to prevent a real hacker from intercepting the information, but at least the username and password won't be publically available in the users Http_Referrer server var.


Thanks to the both of you, I was hoping that wasnt the case but I guess I can say im not suprised.

Thanks for your help though, It is greatly appreciated.

Reply With Quote
  #5  
Old January 9th, 2008, 11:22 AM
Drewbkilla Drewbkilla is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2008
Posts: 6 Drewbkilla User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 5 h 34 m 9 sec
Reputation Power: 0
Silent Post with different redirect

Quote:
Originally Posted by Death Goddess
Nothing should prevent you from submitting to another site by POST:
Code:
<form target="http://somewebsite.com/page.aspx" method="post">


Nothing is going to prevent a real hacker from intercepting the information, but at least the username and password won't be publically available in the users Http_Referrer server var.


Just realized something, I am using SSL on the site and not using a get, id prefer a post, so im assuming that the info is encrypted as it transmits, the problem im having is that the result page needs to be a different page than the form action.

If I just submit using the the form action, the result page simply displays "0" as successful, but I'd like to just either capture that result code and process it on a thank you page instead of this generic white page with a "0" on it. or capture nothing and at least redirect to a more friendly thank you success page

Remember, I cannot edit the action page so a redirect or another solution is a must.

Incase any of you are wondering, this is for Constant Contact: Site Visitor API.

I'd really appreciate any help on this!

Thanks!

Reply With Quote
  #6  
Old May 1st, 2008, 12:40 AM
djsamisam djsamisam is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: May 2008
Posts: 1 djsamisam User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 2 m 14 sec
Reputation Power: 0
same thing for me

Hi
im trying to do the same thing with constant contact.
did you ever find a solution?

thanks
sam

Reply With Quote
  #7  
Old May 2nd, 2008, 10:29 AM
Drewbkilla Drewbkilla is offline
Registered User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2008
Posts: 6 Drewbkilla User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 5 h 34 m 9 sec
Reputation Power: 0
Quote:
Originally Posted by djsamisam
Hi
im trying to do the same thing with constant contact.
did you ever find a solution?

thanks
sam


Nope, I know it's possible but I just dont think the question was asked correctly. it's really no different than the way ppl send CC data to online CC processors. When I learned about it, it was called a silent post.

If I find a solution for this, I'll be sure to post it back on here.

Reply With Quote
Reply

Viewing: Dev Shed ForumsProgramming Languages - MoreASP Programming > ASP Silent Post?


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 2 hosted by Hostway