[AccessD] Web Pages in Access

Make sure you can protect against CSS cross side scripting and sql 
injection attacks
as a start
http://www.patrice.ch/en/computer/web/articles/2002/web_security.pdf
To test if you are susceptible
Just enter this in one of your form fields to be entered in the database
or even in your userid or password logon fields

<script>alert(testing)</script>

Now this can also be circumvented with this type of query string:
str=%3Cscript%0D%0A%3Ealert(testing)%3C%2Fscript%3E
Or to make it more human readable:
str=<script[newline]>alert(testing)</script>

paul.hartland at fsmail.net wrote:

>Thanks, will try that....
>
>
>
>
>
>Message date : Mar 24 2004, 06:57 AM
>>From : "S D" 
>To : "Access Developers discussion and problem solving" 
>Copy to : 
>Subject : Re: Re: Re: [AccessD] Web Pages in Access
>Here you go:
>
>http://www.asp101.com/samples/login.asp
>
>Regards,
>
>Sander.
>
>PS: this is a great site for a beginner. Very clear samples WITH GREAT expl.
>
>paul.hartland at fsmail.net wrote:
>Sander,
>
>The original message was from Dale, I replied with my question of sample code for ASP logon etc which checks a username and password from an Access or SQL Server database.
>
>Im still after any sample code with a brief explanation of how it all works for an ASP logon page.
>
>Paul
>
>
>
>
>
>
>Message date : Mar 23 2004, 02:48 PM
>>From : "S D" 
>To : "Access Developers discussion and problem solving" 
>Copy to : 
>Subject : Re: Re: [AccessD] Web Pages in Access
>Paul,
>
>is it standard ASP that you want?
>I've had to deal with the same problem and that's why I started building my own pages for testing and such.
>
>I can send them to you off-line if you want.
>
>I'm not exactly sure what you did but if you somehow exporterd you're standard Access master-detail form to ASP...I don't think that that will work. ASP doesn't have 'sub-forms' Maybe Access-ASP has. In standard ASP you would build a table using HTML and fill it with a recordset.
>
>Then you would have to check how many records you would like to see....create nav buttons...aarhg the horror is getting worse and worse.
>
>If need the samples let me know. I believe I use a SQL-Server as data thingy...hmm have to look tonight.
>
>Regards,
>
>Sander
>
>paul.hartland at fsmail.net wrote:
>Tell you what, I'm just about to start getting into HTML, ASP etc (horrified at the thought, but it has to be done). So if anyone has sample code for a pretty secure logon page that will then direct the user to a menu page if the password is correct etc I would like to see the code, preferably with a simple explanation of how it works. I have found various little bits and pieces on the web but could never get them to work properly.
>Paul Hartland
>
>
>
>
>
>Message date : Mar 23 2004, 12:34 PM
>>From : chris at thecube.net
>To : accessd at databaseadvisors.com
>Copy to : 
>Subject : Re: [AccessD] Web Pages in Access
>Dale,
>
>Looks like you need to start venturing into ASP, if you cade code using recordsets then ASP is not
>really that big a step. Let me know if you would like a kick start and/or sample ASP
>
>Cheers
>
>Chris
>----- Original Message -----
>From: Dale Kalsow
>To: accessd at databaseadvisors.com
>Sent: Mon, 22 Mar 2004 12:51:40 -0800 (PST)
>Subject: [AccessD] Web Pages in Access
>
>Does Anyone have experiance with creating web pages through Acess. I have a form that currently
>works within access. It displays the fields of a table and then has a subform that displays (and
>allows modifications) all of the parts that go along with the master record. I can export the form
>to html but loose the subform and have not been able to figure out how to recrate the functionally
>of the subform.
>
>All help is appreciated!
>
>Thanks!
>
>Dale
>
>Do you Yahoo!?
>Yahoo! Finance Tax Center - File online. File on time.
>  
>

-- 
Marty Connelly
Victoria, B.C.
Canada