|
Your timer runs on the server. Your page only gets updated when the client requests it - if you need to update values on a timer like this, you need to create a client side timer in javascript.
|
|
|
|
|
Hi,
I'm writing an enquiry lead generation website. What suggestions does anyone have for preventing abuse of the Enquiry/Contact Form. I'm specifically thinking about preventing a site visitor from impersonating someone else by using their name and email address (which results in the innocent 'victim' receiving calls/emails from companies contacted!) Apart from forcing users to register and confirm their account by email, is there any other way I can use to guard against this type of Contact Form abuse?
One option I had was to log all the details of the enquiry in a database and sending a confirmation email to the email address used on the enquiry form. If the enquiry was genuine, the recipient of the email is asked to click the confirmation link in the email which triggers the enquiry to be sent on to the target companies. Is this feasible?
Thanks in advance for any help,
Cheers
Adrian
|
|
|
|
|
1) CAPTCHA to prevent spambots dropping junk information.
2) After the form is submitted, hold the data in a quarantine table for a specified time and send a link to the user. If the user clicks that promote the message from quarantine to Sales Request or whatever.
3) If the message has not been resurrected for the specified time, then prepare to cremate it.
Vasudevan Deepak Kumar
Personal Homepage
Tech Gossips
A pessimist sees only the dark side of the clouds, and mopes; a philosopher sees both sides, and shrugs; an optimist doesn't see the clouds at all - he's walking on them. --Leonard Louis Levinson
|
|
|
|
|
Thanks Vasudevan. I like the idea of the quarantine table until the enquiry is confirmed.
Any suggestions as to how I fire off the enquiries in the form of emails once the enquiry is confirmed? This site will use a SQL2005 database so could I take advantage of functionality within SQL2005?
Thanks
Adrian
|
|
|
|
|
You may like to check this thread which has quick code snippets for triggering validation emails.
Vasudevan Deepak Kumar
Personal Homepage
Tech Gossips
A pessimist sees only the dark side of the clouds, and mopes; a philosopher sees both sides, and shrugs; an optimist doesn't see the clouds at all - he's walking on them. --Leonard Louis Levinson
|
|
|
|
|
Hi, did you miss the link off your post?
|
|
|
|
|
Through triggers or perhaps stored procedures.
http://sqldev.net/xp/xpsmtp.htm[^] might help you.
"I guess it's what separates the professionals from the drag and drop, girly wirly, namby pamby, wishy washy, can't code for crap types." - Pete O'Hanlon
|
|
|
|
|
I agree with Vasudevan about the quarantine idea. It is probably the better approach along with the other ideas he suggested. I don't really know the extent of abuse that such a site would have but his suggestions can help curb it.
"I guess it's what separates the professionals from the drag and drop, girly wirly, namby pamby, wishy washy, can't code for crap types." - Pete O'Hanlon
|
|
|
|
|
Paul Conrad wrote: I agree with Vasudevan about the quarantine idea. It is probably the better approach along with the other ideas he suggested. I don't really know the extent of abuse that such a site would have but his suggestions can help curb it.
Thanks Paul.
Regarding type of abuse, I'm specifically trying to guard against competitor sites (their employees  filling out the enquiry form on my site with fake details anonymously. I see this possibly causing bad feeling with those companies who would be paying a monthly fee for the leads my site sends them. Now I don't know for sure if this sort of abuse takes place. My only hint that it does is a note on the contact form of a competitor site indicating that any misuse of the enquiry form will be "reported and investigated and appropriate action taken".
As for stopping SPAMBots, I'll go for the CAPTCHA aswell.
Thanks
Adrian
|
|
|
|
|
A client of mine does sales lead generation and under our NDA I cannot really go into detail how he takes care of the problem. In short, we have not ever had the abuse happen.
BungleBonce wrote: My only hint that it does is a note on the contact form of a competitor site indicating that any misuse of the enquiry form will be "reported and investigated and appropriate action taken"
That is perhaps the best route...
"I guess it's what separates the professionals from the drag and drop, girly wirly, namby pamby, wishy washy, can't code for crap types." - Pete O'Hanlon
|
|
|
|
|
hi
iam having a aspx page which contains a textbox and a button.i have written javascript code for passing values between a popup window and the parent(aspx)page.upto this everything works fine.after taking value from pop up window i want to make the pop up window active(that is parent window should not be clicked unless pop up window closes.)but in my case the pop up window gets minimised when i click outside in the parent window.and one more problem with the page is it gets minimised when i click outside the window.
iam giving the javascript code here for your reference.
function to open pop up window..
string scr = @"<script>
function update(elemValue)
{
document.getElementById('ctl00_LondonContentPlaceHolder3_txtRestName').innerText=elemValue[0];
}
</script>";
// register the javascript into the Page
Page.RegisterClientScriptBlock("update", scr);
//add our popup onclick attribute to the desired element on the page (Here, Hyperlink1)
lnkTopPick.Attributes.Add("onclick", "window.open('lrs_SearchRestToppick.aspx',null,'left=190, top=225, height=250, width= 465, status=n o, resizable= no, scrollbars= no, toolbar= no,location= no, menubar= no');");
function to pass value
protected void Page_Load(object sender, EventArgs e)
{
string scr = @" <script>
function Done()
{
var RestName=document.getElementById('txtRestName').value;
var RestDesc=document.getElementById('txtRestDesc').value;
var ret= new Array(RestName,RestDesc);
window.opener.update(ret);
window.close();
}
</script>";
Page.RegisterClientScriptBlock("done", scr);
}
pintoo
|
|
|
|
|
chithra.r wrote: parent window should not be clicked unless pop up window closes
Did you consider using ShowModalDialog?
Vasudevan Deepak Kumar
Personal Homepage
Tech Gossips
A pessimist sees only the dark side of the clouds, and mopes; a philosopher sees both sides, and shrugs; an optimist doesn't see the clouds at all - he's walking on them. --Leonard Louis Levinson
|
|
|
|
|
yep..i have tried showmodal dialog also..but it is not working...the thing is the pop up window get minimized when i click outside (in the parent window),which means it is not active.
pintoo
|
|
|
|
|
|
I have to build a web part for employees to clock in in the morning. So, simply, they click the button and woo they're clocked in. I have working code that makes the part, and when they click it it gets the username from the web context and updates all that to a SQL server. What I need to do however, is convert the username to their full name (so domain\user -> John Doe). I was going to do this by querying active directory, but that doesn't work. I made a test program that runs on the server and numerous locations, transfered the code verbatim but it breaks everything else. I know the code works. At first I thought it was because the server was running the app as a network service and not a domain account (hence it not being able to query AD), but it was set in an app pool goverened by a domain account. I logged into said account and could run the test program from it, so I know for certain it can query AD. Any other suggestions on why this might not be working? And if none, anyone know of another way to retrieve their full name?
Web part is going onto a server running WSS 2 on .Net 1.1
www.socoder.net
|
|
|
|
|
Do you have impersonation switched on? If so it might be querying AD as 'domain\user'.
|
|
|
|
|
That's the thing, any domain user can query AD. I figured it out though; it was querying it as LOCALHOST\NETWORK SERVICE... so... not a domain user. Heh. So I fixed that, and now it seems to work.
www.socoder.net
|
|
|
|
|
You don't really need to write a web part, a domain login script would be sufficient. You could also write a domain logoff script that would bounce them off the clock as well.
MrPlankton
|
|
|
|
|
Hello, I am looking for code to create a website that will allow me to upload documents and allow people to download them if they give name and email. Any ideas please?
|
|
|
|
|
i create a new simple sample web part and now i want to run it but i dont know how can i run it?
can anybody help me?
|
|
|
|
|
Are you trying to add it to a sharepoint site?
www.socoder.net
|
|
|
|
|
Hi i have developed an Asp.Net Website i use Session Variable to track the user it work properly in my local system i have installed my website on local server and test it but the session not work properly in the local server when i access it from my machine the session varialble losss its datas how to prevent it please help me
|
|
|
|
|
Hai,
Suppose I have two tables for coutry and state in the databse.In my aspx page I like to populate the DropDown List state according to the country selected using AJAX.Pls give me an idea and sample code of how this task can be accomplished.
|
|
|
|
|
Hi All,
I have a custom Control which contains div as a main container and any other control can be dragged and dropped within the div control. Currently, I have added client side code to invoke a postback on the following events of the container:
document.onchange = handleEvent;
interceptor.onclick = handleEvent;
interceptor.onkeypress = handleEvent;
interceptor.onkeyup = handleEvent;
interceptor.onpaste = handleEvent;
So in any of these events on the container or any its child a postback event is raised to the server with the function handleEvent:
function handleEvent(event)
{
var btsave = document.getElementById(controlEtatUpdate);
if ( btsave.disabled )
{
if (!event)
{
var e = window.event;
if (!e.ctrlKey)
{
if (e.keyCode != Sys.UI.Key.tab)
{
if (e.srcElement.type) {
if (e.srcElement.type == 'text')
{
if (e.type != 'click')
{
// Save the current position for a text.
currentPosition = getPosition(e.srcElement)
WarnServer();
}
}
else
{
WarnServer();
}
//W3C model
if (e.stopPropagation)
{
e.stopPropagation();
}
}
}
}
}
}
}
So as soon you click on the custom control, an even is raised but I would like to avoid that in the case of a ComboBox…Especially when there is no change in the selection. Any help will appreciated.
|
|
|
|
|
Hi ,
I was going through an ASP.Net [with VB.Net as code behind] application.
The problem with this application is that when a particular page is transfered to another page, the receiving page sometimes get data [using Request.Form] and sometimes not. This form is submitted using javascript. This is inconsistent behaviour.
Is this a known issue in ASP.Net?? Any solution for this?
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
