Web Development

E-Commerce platform in 2022

11-Apr-22 22:01

You have also posted this question at Send Email using Classic ASP - ASP.NET Discussion Boards[^]. Please do not repost.

Web API Problem

Kevin Marois2-Apr-22 10:19

Kevin Marois

2-Apr-22 10:19

I have a simple ASP.Net Web API on my home server. This is just for a Proof of Concept I'm working on.

There's one method on the controller called Login which takes a UserEntity:

[HttpPost]
public UserEntity Login(UserEntity user)
{
    return Repository.Login(user);
}

the repo:

public UserEntity Login(UserEntity user)
{
    var results = new UserEntity();

    if (user.UserName.ToLower() == "admin" &&
        user.Password.ToLower() == "admin")
    {
        results.UserName = user.UserName;
        results.Password = user.Password;
        results.IsLoggedIn = true;
    }

    return results;
}

So, if you pass "admin" and "admin", I create a new user entity with IsLoggedIn = true. Again, all I'm trying to do is make a simple call with a user object and get a repsonse.

I'm using Postman to test the API. If I make this POST call with HTTPS

https://192.168.1.2:65001/api/Login/Login

and pass this as the body:

{"UserName": "admin","Password": "admin"}

then it fails with "Could not get a response" and

Error: write EPROTO 1432630488:error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER:../../third_party/boringssl/src/ssl/tls_record.cc:242:

However, if I change the URL to HTTP then it works fine and I get back the expected result:

{
    "IsLoggedIn": true,
    "UserName": "admin",
    "Password": "admin",
    "Id": 0
}

I'm a bit lost here. Could someone help me figure this out?

Thanks

If it's not broken, fix it until it is.
Everything makes sense in someone's mind.
Ya can't fix stupid.

Re: Web API Problem

Richard Deeming3-Apr-22 21:40

Richard Deeming

3-Apr-22 21:40

Looks like your server is configured to use an older TLS protocol which Postman doesn't support:
TLS v1.0 and v1.1 are not supported on Postman v7.25.1 · Issue #8565 · postmanlabs/postman-app-support · GitHub[^]

"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

deepok130-Mar-22 22:31

30-Mar-22 22:31

What is the best combo of technologies and programming languages to use for a custom e-commerce platform in 2022. Please share your opinion and the reasoning behind it.

Richard MacCutchan30-Mar-22 22:35

30-Mar-22 22:35

The 'best' is the set that works for you. You need to do some research into the various offerings: custom e-commerce - Google Search[^].

Kevin Marois2-Apr-22 22:28

Kevin Marois

2-Apr-22 22:28

Nobody here is going to do your homework for you. Do your own research and come up with your own reasoning.

If it's not broken, fix it until it is.
Everything makes sense in someone's mind.
Ya can't fix stupid.

deepok12-Apr-22 23:37

2-Apr-22 23:37

It is not a 'homework', I have my own preferences regarding this matter. I just want to see if there are different popular options from experienced people. 
It is  wrong learning new things from others or listen to different opinions?

OriginalGriff2-Apr-22 23:41

OriginalGriff

2-Apr-22 23:41

If you don't want to be told "we don't do your homework for you" then don't ask homework type questions. Your original post stinks of a homework assignment, and looks like it was copy'n'pasted direct from a teacher's email ...

If you want intelligent discussion, share your thoughts and reasoning first - don't make it look like you just want to copy'n'paste what we say back as your own work!

"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
"Common sense is so rare these days, it should be classified as a super power" - Random T-shirt
AntiTwitter: @DalekDave is now a follower!

deepok13-Apr-22 0:17

3-Apr-22 0:17

I don't want an intelligent discussion or a discussion at all, just some opinions and then I will investigate further based on them...

OriginalGriff3-Apr-22 0:23

OriginalGriff

3-Apr-22 0:23

Which again comes over as "I want my homework done because I can't be bothered".

Think about it: you are asking others to invest a fair amount of time, effort, and experience, and yet you aren't prepared to give us anything that you have already covered - so we could easily be duplicating your research and thus wasting your and our time.

Make an effort and we're pleased to help.
Look like a lazy student, and why would we? That's not saying you are a lazy student, but that the way you ask for information is the way lazy students do.

deepok13-Apr-22 1:46

3-Apr-22 1:46

Maybe you are right there, I did ask a straight question and did not provide some background behind it. I'm not even a student, I'm a developer trying to find which are some good new alternatives (adopted alternatives) to ecomm traditional (established) dev stacks. 

P.S. : I will not profit in any way of your answers, it is just for my curiosity. It is like I'm asking what music do you listen to, to extend my horison.

compulsorily pass through the login.html

satya bharti31-May-22 23:23

satya bharti

31-May-22 23:23

There are so many technologies available, like if we talk about PHP frameworks then depending on the business requirements some of the important PHP frameworks for ecommerce development are - WordPress, Shopify, ExpressionEngine, CraftCMS, and Magento and so on... Even ASP .Net is also a Good idea to implement ecommerce projects.

ago24867-Mar-22 22:30

ago2486

7-Mar-22 22:30

hello friends I am developing a web application to connect to a mariaDb database. I have 04 tables (table 1, table 2, table 3, table 4)
to have access to the first table I made a coinnection form but my problem is that if a person knows the link of table 2 he can display it. I want to force everyone to connect before having access to my web application... is this method possible?

Re: compulsorily pass through the login.html

Afzaal Ahmad Zeeshan28-Mar-22 11:27

Afzaal Ahmad Zeeshan

28-Mar-22 11:27

Never grant direct database access to your customers, even when they are authenticated. The problem is not that they can run all the SELECT queries, the problem is that they can run all sorts of queries; DROP, DELETE, etc.

Now, the login.html part comes in based on your web framework. In ASP.NET, for example, you can require that the users be authenticated, and the same is the case for Python and other major frameworks. So, read the documentation on how to require only authenticated users to be able to make a request and read the page.

Overview of ASP.NET Core Authentication | Microsoft Docs

Otherwise, always redirect to the login.html page.

Again, tip: even when the user is authenticated, never grant them access to the open database connections. Only return the fetched results in a form of a list.

The sh*t I complain about
It's like there ain't a cloud in the sky and it's raining out - Eminem
~! Firewall !~

Re: compulsorily pass through the login.html

Member 150787164-Jul-22 16:14

Member 15078716

4-Jul-22 16:14

One of various ways to do this:

Use a dynamically created web page for the page that you do not want to be directy accessed.

When page one is accessed, properly, and with your predetermined permission; then page two is made available via a javascript that directs them to page two with it's dynamically created name.

Example:
Page 1 = daPage01.html
Page 2 = [does not exist except in the database]

User goes to Page 2 : Oh wait! There is no Page 2. That page is still in the database.

User goes to Page 1.
There is no link to Page 2.
User does what YOU want them to do on Page 1.
Page 2 is created dynamically with a changable name. Exmaple: daPage12E13F4576496587G5447868764K5P7q84578_02.html
Page 2 is then added to Page 1 for that user to click on and to go to.

Later that user goes to Page 2 via that link. Oh wait! When they were detected of having closed or left Page 1 and *also* closed or left Page 2 then Page 2 was removed from the system. There is no Page 2 for them.

Search engines

Calin Negru7-Mar-22 12:50

Calin Negru

7-Mar-22 12:50

The actual question is: What kind of tech are Internet search engines using on the front end (it looks like that`s what the part of the Internet that takes place on your computer is being called as).

My personal perspective on things, feel free to skip this part:
Basically a web browser is just a window, everything that takes place inside of it is pretty much just a bunch of other windows. Search engines aren`t using windows (ajax style) from the looks of it. Is it plain html or some other technology?
It seems that there is a parallel between Internet windows(the stuff displayed inside a web browser) and Windows95 windows, the main difference between the two is that Internet windows doesn`t have compile time, whatever is created on the far end (back end) get displayed instantly on the near end.

jhonaa7-Mar-22 23:34

jhonaa

7-Mar-22 23:34

The basics of using a search engine, as well as some techniques you can use to get better search results.

Richard MacCutchan7-Mar-22 23:53

7-Mar-22 23:53

The front end (Browser) is built on various systems, ASP.NET, PHP, some custom web engines. The back end is where the real work takes place, and is mostly custom built by the different companies. The basic system is just a huge database with an interface that can quickly find the items you search for. The details of the architecture itself is proprietary to the search companies. The results of the search are sent to the browser as HTML/Javascript for rendering on the client screen.

The difference between Web windows and Desktop windows is purely in the technology used to build the display. Desktop windows usually work directly with the operating system libraries. Web windows need an interface (the Browser) to translate the HTML and Javascript dynamically into local Windows display code.

If you type chrome://version/ into Chrome's address bar it lists some of the tools it uses. Firefox, Bing etc. probably have similar displays.

Calin Negru8-Mar-22 1:41

Calin Negru

8-Mar-22 1:41

thanks Richard
here is another question:
when a user is using a service like facebook he can complete various tasks with some time passing between the tasks, how does the computer on the far end (back end) responds to that? Is there a line constantly open (from the moment a login has taken place) that the far end computer is listening to, (in the likes of a never ending session), or is there an identifier attributed to every message coming from the user facebook page so that when the message arrives and is being processed it is treated as safe/with no security checks needed (like no need for user to log in for every message that is being sent)?
thanks

Richard MacCutchan8-Mar-22 5:04

8-Mar-22 5:04

When the user logs in, the system sends a token back to the browser. The browser then sends that token with every further message so the back end system knows which account it belongs to. That is an over simplification and in reality it may be more complicated to ensure security.