Web Wiz - Green Windows Web Hosting

  New Posts New Posts RSS Feed - checkFormID
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

checkFormID

 Post Reply Post Reply
Author
yourbudweiser View Drop Down
Newbie
Newbie
Avatar

Joined: 10 July 2006
Location: United States
Status: Offline
Points: 14
Post Options Post Options   Thanks (0) Thanks(0)   Quote yourbudweiser Quote  Post ReplyReply Direct Link To This Post Topic: checkFormID
    Posted: 14 July 2006 at 10:14pm
Hi, I added some new fields and removed others on register.asp

I am receiving the following error only when updating a user profile:

Error
Only members with sufficient permission can access this page.

A security error has occurred with authentication.

Please ensure that all cookies are enabled on your web browser, you are not using a saved or cached copy of the page, and your Firewall/Proxy settings are not hiding or masking your IP address.

I have tracked the problem down to this line of code:

Call checkFormID(Request.Form("formID"))

If I comment out this line, I can successfully edit the user profile.

Please advise.


Back to Top
WebWiz-Bruce View Drop Down
Admin Group
Admin Group
Avatar
Web Wiz Developer

Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebWiz-Bruce Quote  Post ReplyReply Direct Link To This Post Posted: 16 July 2006 at 11:46am
This part reads in a hidden field from the register.asp whos value is set in the Javascript in the head of the page when the form is submitted.

This is used to prevent remote submissions to the form by robots or hackers.

If you remove the line you should be OK, but you will just loose a layer of security.
Back to Top
yourbudweiser View Drop Down
Newbie
Newbie
Avatar

Joined: 10 July 2006
Location: United States
Status: Offline
Points: 14
Post Options Post Options   Thanks (0) Thanks(0)   Quote yourbudweiser Quote  Post ReplyReply Direct Link To This Post Posted: 17 July 2006 at 2:00pm
i would prefer the forum be secure as possible...

if possible, can you briefly explain what I can do to get the function working correctly?

The only mods I made to register.asp was to add a few fields, do a database lookup on one of those new fields before adding the user and then write some info to a new table in the wwDatabase. Why would this affect the checkFormID function?

Thanks for your time.

Edited by yourbdweiser - 17 July 2006 at 2:01pm
Back to Top
WebWiz-Bruce View Drop Down
Admin Group
Admin Group
Avatar
Web Wiz Developer

Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebWiz-Bruce Quote  Post ReplyReply Direct Link To This Post Posted: 18 July 2006 at 10:23am
First of all need to workout of the problem is in the ASP or the Javascript.

Use Firefox with it's JavsaScript Console running (found in the Tools menu on firefox).

If it is a Javascript error it should pop up an error message when you submit the form.
Back to Top
yourbudweiser View Drop Down
Newbie
Newbie
Avatar

Joined: 10 July 2006
Location: United States
Status: Offline
Points: 14
Post Options Post Options   Thanks (0) Thanks(0)   Quote yourbudweiser Quote  Post ReplyReply Direct Link To This Post Posted: 19 July 2006 at 10:13pm
thanks so much Borg. I didn't even think of using the Firefox JS Console. It pinpointed the error:

I removed the option to allow the user to modify their password but didn't remove/comment the Javascript code to validate it  :)
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.


Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.