Brug af AI afslører de svagheder, virksomheder allerede har opbygget gennem års cloud-transformation, nye SaaS-løsninger og fragmenterede sikkerhedssystemer.
Sub OpenConnection Dim strConnString, objConn strConnString = "Provider=SQLOLEDB;" & _ "Persist Security Info=FALSE;" & _ "User ID=sa;" & _ "Password=pb16950;" & _ "Initial Catalog=AAOSiteDB;" & _ "Initial File Name = C:\Programmer\Microsoft SQL Server\MSSQL\DATA\AAOSiteDB_Data.mdf;" objConn.Open strConnString End Sub
Sub TerminateConnection objConn.Close Set objConn = Nothing End Sub
Sub TerminateRecordset objRS.Close Set objRS = Nothing End Sub
If Request.Cookies("AAO")("Username") = 0 AND Request.Form("Username") = 0 Then BeginTable Response.Write "<FORM ACTION='MakeDonation.asp' METHOD='Post'>" Response.Write " If you allready have a username" Response.Write " and password and want to make a new donation, supply" Response.Write " them both here.<BR> " Response.Write "If you want to make your first donation to the AAO" Response.Write " use the form below this.<BR><BR>" Response.Write "Username:<BR>" Response.Write "<INPUT TYPE='Text' NAME='Username' VALUE='" & strUsername & "'><BR>" Response.Write "Password:<BR>" Response.Write "<INPUT TYPE='Password' NAME='Password' VALUE='" & strPassword & "'><BR>" Response.Write "<BR><INPUT TYPE='Submit' VALUE='Submit'>" Response.Write "</FORM>" FinishTable Response.Write "<BR><HR><BR>" End If
If Request.Cookies("AAO")("Username") <> 0 Then strUsername = Request.Cookies("AAO")("Username") strPassword = Request.Cookies("AAO")("Password") OpenConnection Set objRS = Server.Createobject("ADODB.Recordset") objRS.Open "dbo.up_parmsel_UserT_CCT ('" & strUsername & "', '" & strPassword & "')", objConn, adOpenForwardOnly, adLockReadOnly, adCmdStoredProc If objRS("Firstname_VC") <> 0 Then strFirstname = objRS("Firstname_VC") strLastname = objRS("Lastname_VC") strEmailAddress = objRS("Email_Address_VC") uidCCNo = objRS("Creditcard_Number_UI") intExpMonth = objRS("Creditcard_Exp_Month_IN") intExpYear = objRS("Creditcard_Exp_Year_IN") strCCType = objRS("Creditcard_Type_VC") intDonation = objRS("Donations_MN") End If TerminateRecordset TerminateConnection End If
If Request.Form("Username") <> 0 Then strUsername = Request.Form("Username") strPassword = Request.Form("Password") OpenConnection Set objRS = Server.Createobject("ADODB.Recordset") objRS.Open "dbo.up_parmsel_UserT_CCT ('" & strUsername & "', '" & strPassword & "')", objConn, adOpenForwardOnly, adLockReadOnly, adCmdStoredProc If objRS("Firstname_VC") <> 0 Then strFirstname = objRS("Firstname_VC") strLastname = objRS("Lastname_VC") strEmailAddress = objRS("Email_Address_VC") uidCCNo = objRS("Creditcard_Number_UI") intExpMonth = objRS("Creditcard_Exp_Month_IN") intExpYear = objRS("Creditcard_Exp_Year_IN") strCCType = objRS("Creditcard_Type_VC") intDonation = objRS("Donations_MN") Else BeginTable Response.Write "<FORM ACTION='MakeDonation.asp' METHOD='Post'>" Response.Write "<FONT COLOR='#FF0099'>Username and password is invalid</FONT>" Response.Write " If you allready have a username" Response.Write " and password and want to make a new donation, supply" Response.Write " them both here.<BR> " Response.Write "If you want to make your first donation to the AAO" Response.Write " use the form below this.<BR><BR>" Response.Write "Username:<BR>" Response.Write "<INPUT TYPE='Text' NAME='Username' VALUE='" & strUsername & "'><BR>" Response.Write "Password:<BR>" Response.Write "<INPUT TYPE='Password' NAME='Password' VALUE='" & strPassword & "'><BR>" Response.Write "<BR><INPUT TYPE='Submit' VALUE='Submit'>" Response.Write "</FORM>" FinishTable End If TerminateRecordset TerminateConnection End If
Fejlen er at du (ikke bare i linie 48) - men mange steder tester username som om detr er et tal - men det er jo en tekst. Linien skal se således ud: If Request.Cookies("AAO")("Username") = "" AND Request.Form("Username") = "" then
Samtidig undre det mig at du udføre disse linier lidt længere nede: >" Response.Write "<INPUT TYPE='Text' NAME='Username' VALUE='" & strUsername & "'><BR>" Response.Write "Password:<BR>" Response.Write "<INPUT TYPE='Password' NAME='Password' VALUE='" & strPassword & "'><BR>"
uden at strUsername og strPassword er sat til noget. ?
Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.