I have ASPExec installed and I have successfully converted the perl script to asp
(although I intend to use WSH instead). I now have a few security implications that
need sorting. I need to parse input from a form so only alphanumeric and numeric
characters are let through. I know this is easy in Perl as I use code and parse
forms using Perl, however using VBscript in ASP is a different matter. (although not
impossible I will complete this today).
Rundown: form details (e.g. commands) are passed to ASP script, script gets form
values splits them into appropriate command names and commands, these are
concatenated into a command line string which formats the output using the +C
command. All this is written to a .bat file and then passed onto ASPExec or WSH. A
report is made and the user is redirected to the report via the asp script. (all is
peachy)
Regards,
Aengus Lawlor wrote:
> >>>> I would like to convert the anlgform.pl perl script into ASP (For
> >>>> NT IIS users). Could someone please inform me as to how
> >>>> anlgform.pl processes the information and passes it to analog.exe.
> >>>> Are commands passed through the cfg file then ran OR can commands
> >>>> be passed directly to the executable, if so, how can this be done?
> >>>>
> >>> They're passed through in a pipe. Effectively an extra config file,
> >>> but never written to disk.
> >
> >Dave Cobb wrote:
> >
> >> Can this be piped into analog via a command prompt, e.g. MS-DOS
> >> style: analog | commands....
> >> or is there another way of doing this?
>
> Jeremy replied:
>
> >Yes, in the perl script it's done like
> > open ("| analog");
> >
> >Which opens a pipe to which can be written the commands. I'm not sure
> >this can be done in ASP (I don't think a file spec can be opened in
> >any sense other than as a text stream or for file management).
>
> Using a pipe would be a little bit more convenient than writing the
> config entries to a temporary file, and deleting the file after you
> called analog, but the problem (as I see it) is that ASP doesn't offer
> a native mechanism for calling a .exe file (never mind capturing it's
> output stream).
>
> Any chance you'd compile Analog as an ActiveX object, Stephen :-)
>
> Seriously, though, if you have a control like ASPExec installed,
> replicating the anlgform.pl functionality isn't that difficult. But if
> you are reluctant to install anything as a control on your production
> servers, this doesn't really buy you much.
>
> >If I find anything, Dave I'll post it.
>
> Does anyone have any experience with ASPExec or other similiar controls
> for tasks like this?
> http://www.serverobjects.com/products.htm#Aspexec
>
> Aengus
>
> ------------------------------------------------------------------------
> Name: RFC822 message headers
> RFC822 message headers Type: unspecified type (application/octet-stream)
> Encoding: base64
> Description: Unknown data type
--
Dave Cobb - Web Developer
Omniplex New Media
www.omniplex.co.uk
TEL: 01780 489190
FAX: 01780 489199
------------------------------------------------------------------------
This is the analog-help mailing list. To unsubscribe from this
mailing list, send mail to [EMAIL PROTECTED]
with "unsubscribe analog-help" in the main BODY OF THE MESSAGE.
List archived at http://www.mail-archive.com/[email protected]/
------------------------------------------------------------------------
