Two methods of implementing web security with ASP

xiaoxiao2021-03-06  20

Author: Hu Shunliang

I personally touched an actual question when I maintain the internal network of the company - -MIS main tube To put some technical documents on the web page, and only MIS's staff can be browsed. This involves the question of the question of the web page.

Initially I designed a solution with FrontPage and VBScript, the link MIS technology page (here is preset to actpwdrst.htm), first link ActPwd.htm Enter Name and Password (here the name and password are preset to "MIS" ), Only after the correct input can be linked to actpwdrst.htm. Under the following is their code.

Actpwd.htm code is as follows:

Password </ title> </ head> <body> <form name = "form1"> <input type = "hidden" name = "vti-group" _ value = "0"> <div align = "center"> <center> <p> name <input type = "text" name = "t1" size = _ "20"> password <input type = "password" name = "t2" _ size = "20"> <input type = "button" value = "confirm" _ name = "b1"> </ p> </ center> </ div> </ form> <p> <script language = "vbscript"> <! -sub b1_onclick () if form1.t1.value = "MIS" and_ form1.t2.value = "mis" thendocument.location = _ "actpwdrst.htm" elsem1 = msgbox ("Password error _", 0 48 "Warring") end ifend sub // -> </ script> </ p> </ body> </ html> actpwdrst.htm code as follows: <html> <head> <title> Password </ title> < / head> <body> <p align = "center"> <font face = "standard 楷" size = "7" color = "0000f"> <strong> You have successfully logged in! </ strong> </ font> </ p> </ body </ html></p> <p>Careful friends may have discovered that the unreliability of this solution - input and judgment are completed in actpwd.htm, regardless of the name and password of the input, just remember the URL where actpwdrst.htm is located, You don't need to link actpwdrst.htm directly through actpwd.htm. The insurance coefficient of this case is not very good. Look at the foundation of the ASP design. Link MIS technology page (preset to asppwwdrst.asp) before linking the Asppwd.asp Enter Name and Password (here the name and password are preset to "MIS"), only after the correct input is entered, can be linked to asppwdrst. ASP. Under the following is their code. Asppwd.asp code is as follows: <html> <body> <form name = "form1" action = "asppwwdrst.asp" method _ = "post"> <input type = "hidden" name = "vti-group" value = _ " 0> <div align = "center"> <center> <p> name <input type = "text" name = "t1" size = "20"> password <input type = "password" name = "t2" size = _ "20"> <input type = "Submit" value = "confirm" name = _ "b1"> </ p> </ center> </ div> </ form> </ body> </ html> asppwdrst .asp code as follows: <html> <% IF RTRIM (Request.form ("T1")) = "MIS" and_ rtrim (Request.form ("T2")) = "MIS" THEN%> <body> <P Align = "center"> <font face = "standard 楷" size = "7" _ color = "# 0000ff"> <strong> You have successfully logged in! </ strong> </ font> </ p> </ body> <% else%> <body> <p align = "center"> <font face = "standard 楷" size = "7" _ color = "# 0000ff> <strong> Please enter the correct username and password </ strong> </ font> </ p> </ body> <% end if%> </ html></p></div><div class="text-center mt-3 text-grey"> 转载请注明原文地址:https://www.9cbs.com/read-42882.html</div><div class="plugin d-flex justify-content-center mt-3"></div><hr><div class="row"><div class="col-lg-12 text-muted mt-2"><i class="icon-tags mr-2"></i><span class="badge border border-secondary mr-2"><h2 class="h6 mb-0 small"><a class="text-secondary" href="tag-2.html">9cbs</a></h2></span></div></div></div></div><div class="card card-postlist border-white shadow"><div class="card-body"><div class="card-title"><div class="d-flex justify-content-between"><div><b>New Post</b>(<span class="posts">0</span>) </div><div></div></div></div><ul class="postlist list-unstyled"> </ul></div></div><div class="d-none threadlist"><input type="checkbox" name="modtid" value="42882" checked /></div></div></div></div></div><footer class="text-muted small bg-dark py-4 mt-3" id="footer"><div class="container"><div class="row"><div class="col">CopyRight © 2020 All Rights Reserved </div><div class="col text-right">Processed: <b>0.046</b>, SQL: <b>9</b></div></div></div></footer><script src="./lang/en-us/lang.js?2.2.0"></script><script src="view/js/jquery.min.js?2.2.0"></script><script src="view/js/popper.min.js?2.2.0"></script><script src="view/js/bootstrap.min.js?2.2.0"></script><script src="view/js/xiuno.js?2.2.0"></script><script src="view/js/bootstrap-plugin.js?2.2.0"></script><script src="view/js/async.min.js?2.2.0"></script><script src="view/js/form.js?2.2.0"></script><script> var debug = DEBUG = 0; var url_rewrite_on = 1; var url_path = './'; var forumarr = {"1":"Tech"}; var fid = 1; var uid = 0; var gid = 0; xn.options.water_image_url = 'view/img/water-small.png'; </script><script src="view/js/wellcms.js?2.2.0"></script><a class="scroll-to-top rounded" href="javascript:void(0);"><i class="icon-angle-up"></i></a><a class="scroll-to-bottom rounded" href="javascript:void(0);" style="display: inline;"><i class="icon-angle-down"></i></a></body></html><script> var forum_url = 'list-1.html'; var safe_token = 'YSzyacCKJRU2gF_2F8eDXUzykfQ4UzSVoqiJatLLuzF21b_2BRK5e0RBcrAn8kdCyKkQhBTAbQ_2BrblYbMyoLPvs41Q_3D_3D'; var body = $('body'); body.on('submit', '#form', function() { var jthis = $(this); var jsubmit = jthis.find('#submit'); jthis.reset(); jsubmit.button('loading'); var postdata = jthis.serializeObject(); $.xpost(jthis.attr('action'), postdata, function(code, message) { if(code == 0) { location.reload(); } else { $.alert(message); jsubmit.button('reset'); } }); return false; }); function resize_image() { var jmessagelist = $('div.message'); var first_width = jmessagelist.width(); jmessagelist.each(function() { var jdiv = $(this); var maxwidth = jdiv.attr('isfirst') ? first_width : jdiv.width(); var jmessage_width = Math.min(jdiv.width(), maxwidth); jdiv.find('img, embed, iframe, video').each(function() { var jimg = $(this); var img_width = this.org_width; var img_height = this.org_height; if(!img_width) { var img_width = jimg.attr('width'); var img_height = jimg.attr('height'); this.org_width = img_width; this.org_height = img_height; } if(img_width > jmessage_width) { if(this.tagName == 'IMG') { jimg.width(jmessage_width); jimg.css('height', 'auto'); jimg.css('cursor', 'pointer'); jimg.on('click', function() { }); } else { jimg.width(jmessage_width); var height = (img_height / img_width) * jimg.width(); jimg.height(height); } } }); }); } function resize_table() { $('div.message').each(function() { var jdiv = $(this); jdiv.find('table').addClass('table').wrap('<div class="table-responsive"></div>'); }); } $(function() { resize_image(); resize_table(); $(window).on('resize', resize_image); }); var jmessage = $('#message'); jmessage.on('focus', function() {if(jmessage.t) { clearTimeout(jmessage.t); jmessage.t = null; } jmessage.css('height', '6rem'); }); jmessage.on('blur', function() {jmessage.t = setTimeout(function() { jmessage.css('height', '2.5rem');}, 1000); }); $('#nav li[data-active="fid-1"]').addClass('active'); </script>