asp-classic

Recommended hash for passwords in ASP Classic

What is the slowest (therefore best) hash algorithm for passwords in ASP Classic? EDIT: For those unaware, when hashing passwords, slower hashes are preferred to faster to help slow rainbow table style attacks. EDIT2: And yes, of course speed isn't the only valid concern for hash selection. My question assumes that All other things be...

AJAX - Do I need to return a full HTML document on the server side?

I am using JQuery to post with AJAX to another ASP page. Do I need this ASP page to return a full html page. Or can I just have it send back a value ( I just need a status ) . Here is my function. $.ajax({ url: "X.asp", cache: false, type: "POST", data: queryString, success: function(html){ $('#x_'+Num).append(htm...

Accessing SQL on a different port number (classic ASP connection string)

I've got an old classic ASP site that connects to a local sql server 2000 instance. We're moving the db to a new box, and the port is non standard for sql (out of my control). .NET connection strings handle the port number fine by adding it with ,1999 after the server name/IP. The classic ASP connection string isn't working with the same...

Integrating Linq in a Classic ASP Site

This project is the probable first step in migrating a large CMS from Classic ASP to .Net. I'd like to use LINQ for querying the DB. Does anyone have any ideas for strategies to make this happen? I understand this is a vague question at this point, but I'm gathering information. Thanks, KevDog ...

What are alternatives to generic collections for COM Interop?

I am attempting to return a collection of departments from a .NET assembly to be consumed by ASP via COM Interop. Using .NET I would just return a generic collection, e.g. List<Department>, but it seems that generics don't work well with COM Interop. So, what are my options? I would like to both iterate over the list and be able to acce...

How to encrypt in VBScript using AES?

I am looking to encrypt some data using Rijndael/AES in VBScript using a specific key and IV value. Are there any good function libraries or COM components that would be good to use? I looked at CAPICOM; it allows a passphrase only, and won't allow setting specific key and IV values. ...

How do I securely reference ASP classic include files outside of web root?

I'd like to be able to place all my ASP Classic include files outside of the web root. This assures no include files can be called directly via the URL. What is the best way to accomplish this? I know I can use a virtual directory to reference an includes folder outside of web root, but doesn't that still allow direct access to that d...

How many dimensions in my array or get the last one

How can I find out the number of dimensions in an array in Classic ASP ( VBScript ) . I am being passed an Array with multiple dimensions but I only want to look at the last. Seems easy in other languages. ...

Accessing the value of a session variable of a specific session

I'm trying to integrate a public message board service into an existing web site. The handshaking between the apps goes like this: 1) File on my web site loads a flash file. The Flash reads a local variable that is the Session ID, or some other GUID unique to the user session. 2) Flash app connects with the remote service, passing th...

How to stop VS2008 trying to compile .ASP pages as Visual Basic?

I have a website with a mix of ASP (classic) and ASP.NET pages. For some reason Visual Studio (specifically 2008 Pro) keeps trying to compile the ASP classic pages. How do I prevent it from trying to compile the .asp pages? Reason: I'm getting a ton of errors on a specific .asp file that includes a Class. I believe it's trying to comp...

Looking for a hack to prevent rewriting an app without using session variables

Our company uses an app that was originally ColdFusion + Access later converted to classic ASP + MS Sql for task/time tracking called the request system. It's broken down by department, so there's one for MIS, marketing, logistics, etc. The problem comes in when (mainly managers) are using more than one at a time, with 2 browser windows ...

Escaping in VB script

What are the best ways (or at least most common ways) in ASP (VB script) for input handling? My main concerns are html/javascript injections & SQL injections. Is there some equivalent to php's htmlspecialchars or addslashes, et cetera? Or do I have to do it manualy with something like sring replace functions? I'm sorry for asking such a...

Problem with date day/month reversing on save

We have a problem affecting the production environment only. We have a VB6/ASP website that allows for data in a database table to be hand edited. It looks alot like an editable datagrid. One of the editable columns is a date and when the record is saved dates day/month are being reversed. 03/11/2008 becomes 11/03/2008, if you were t...

Problem with Regional settings somewhere

With reference to http://stackoverflow.com/questions/280597/problem-with-date-daymonth-reversing-on-save I have further noted that even setting the Session.LCID on the page itself is making no difference what so ever. How could the environments be such that between test and live the asp site on live is reversing dates entered via SQL b...

How can I append a child node to an element in a DOM object?

<% Set xmlDoc = Server.CreateObject("MSXML2.DOMDOCUMENT") xmlDoc.loadXML( "<response />" ) Set node = xmlDoc.createElement("account") xmlDoc.documentElement.AppendChild node Set node = xmlDoc.createElement("type") node.Text = "TheType" xmlDoc.documentElement.AppendChild node Set node = Nothing %> This...

SQL Profiler connection details

When you startup a standard trace the first settings you see will be the current database connections. In my case there is about 10 entries, all of whome are the same username, however some are dateformat dmy and some are mdy. The asp website seems to pick a connection from the pool and uses it, it appears to pick one of 3 and all are ...

ASP/VBScript "Gotchas"

I'm supporting/enhancing a web application written in Classic ASP/VBScript. It has been about 10 years since I have used either in a day to day capacity. I just ran across an issue that I would consider a "gotcha" and was wondering if others had similar things that I should learn to be aware of. My issue: I had to convert a Column in ...

Is there a way to use RegEx in ASP/VBScript?

I have an ASP website which I need to add a RegEx match to. Is there any support for RegEx in ASP/VBScript? Thank you, Brett ...

Converting a fairly simple C# Class library into a COM object ?

Here's my problem: I have to call a web service with a secure header from a classic ASP page that returns a complex data type. For various reasons concerning a 3rd party tool it has to be classic ASP. We decided that I should create an external dll to do this - which I did (in c#) so it returns a dataset (Something ASP can understand)...

Format integer to string with 5 digits

I need to have a string, based on an integer, which should always have 5 digits. Example: myInteger = 999 formatedInteger = "00999" What is the best way of doing this in classic ASP? ...