|
|||||||||
|
|||||||||
| |||||||||
|
|||||||||
|
|||||||||
| |||||||||
|
|
|
| |||||||||
 |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
Dev Shed Forums Sponsor:
|
|
|
|
#1
November 25th, 2003, 04:25 PM
|
|||
|
|||
|
Url validation
I have two pages, one called "test1" and another called "test2"
Is there any way I can check that a person has come from test1 when they go to the url "test2"? Or would it be easier to create a session on test1 and then check for that session on the test2? If the latter, then can someone point me in the direction of a tutorial suitable for this? Thanks, Mike
|
|
#2
November 25th, 2003, 04:46 PM
|
|||
|
|||
|
You could check the HTTP_REFERER Server Variable to see if it is the page test1.
|
|
#4
November 26th, 2003, 09:06 AM
|
|||
|
|||
|
If Request.ServerVariables("HTTP_REFERER") = "http://www.yourdomain.com/test1.asp" then
...do whatever here End If Of course, replacing 'www.yourdomain.com' with your actual domain name.
|
|
#6
November 26th, 2003, 12:11 PM
|
|||
|
|||
|
wo-man! =)
|
|
#7
November 26th, 2003, 01:33 PM
|
|||
|
|||
|
When I use this bit of code
"Request.ServerVariables("HTTP_REFERER") = page2" I get this error... "Microsoft VBScript runtime error '800a01b6' Object doesn't support this property or method: 'Request.ServerVariables' /mikesasp/test2.asp, line 4" Any ideas?
|
|
#8
November 26th, 2003, 02:33 PM
|
|||
|
|||
|
Can you post a bit more of your code, or attach the ASP page so I can see exactly what the problem is?
|
|
#9
November 26th, 2003, 05:11 PM
|
|||
|
|||
|
ok (but I really don't need a lecture on security, lol. And bear in mind that this is a barebone script at the mo. no features or actualy content.....)
The login (login.asp): Code:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>Login</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body>
<form name="form1" method="post" action="test7.asp">
<p>What is ur name?
<input name="user" type="text" id="user">
What is ur pass?
<input name="pass" type="password" id="pass">
</p>
<p>
<input type="submit" name="Submit" value="Submit">
</p>
</form>
</body>
</html>
The processor (test7.asp): Code:
<%
username = request.form("user")
password = request.form("pass")
Dim user(6)
user(1) = "admin"
user(2) = "Pierce"
user(3) = "random1"
user(4) = "random2"
user(5) = "random3"
user(6) = "random4"
If username= user(1) or username= user(2) or username= user(3) or username= user(4) or username= user(5) or username= user(6) Then
If (username= user(1) and password = "pass") or (username= user(2) and password = "baby") or (username= user(3) and password = "random") or (username= user(4) and password = "random") or (username= user(5) and password = "random") or (username= user(6) and password = "random")Then
response.write ("Welcome admin!")
%>
<script type="text/javascript">
top.location.href="test2.asp"
</script>
<%
Else
response.write ("Go away commoner!")
End If
Else
response.write ("Go away commoner!")
End If
%>
The admin area (test2.asp): [code] <% If Request.ServerVariables(HTTP_REFERER) = "http://www.xxxx.com/mikesasp/test7.asp" Then response.write ("welcome person") Else response.write ("errrr....ur not suppost to be here!") End If %>
|
|
#10
November 27th, 2003, 11:03 AM
|
|||
|
|||
|
couple suggestions
you've already got an array for usernames, you could do one of two things 1) have a multi-dimensional array Code:
user(0,0) = "username"
user(0,1) = "password"
user(1,0) = "username2"
user(1,1) = "password2"
'etc..
'to compare the username
for i = lbound(user) to ubound(user)
if (username = user(i,0) AND password = user(i,1)) then
response.write "Welcome Admin"
response.redirect("test2.asp")
end if
next
2) just have a second array for passwords Code:
pass(0) = "password"
pass(1) = "password2"
for i = lbound(user) to ubound(user)
if (username = user(i) AND password = pass(i)) then
response.write "Welcome Admin"
response.redirect("test2.asp")
end if
next
anyways, as to the possible problem... it may be because you do not have any double-quotes around HTTP_REFERER
|
|
| Viewing: Dev Shed Forums > Programming Languages - More > ASP Programming > Url validation |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
 |
|
|
Del.icio.us
Digg
Google
Spurl
Blink
Furl
Simpy
Y! MyWeb
Linear Mode
