Don Oldenburg
|
| Posted: 08/07/2001, 8:15 AM |
|
Okay.. We are in the process of developing both a client side secure
website and an internal corporate intranet using Code Charge. Starting the
planning phase of the client intranet site. The primary function of the
client intranet site is to be able to display to a client their financial
statements -- there are 4 or 5 different reports which are currently created
automatically in an html format and uploaded to secure third party website
as a zip file. Their system automatically logs in the files and catalogs
them properly and assigns them to the correct client.
My question is this... what's the easiest/best (hopefully the same) way to
accompish this. I can export them to either HTML, TXT or PDF. Ideally it
would be nice to export them to PDF, and then maintain a database of all the
reports and paths, and they could just click on the link. HOWEVER, the
problem with that is anyone could put in the link to that page/file and view
someone elses financial statements -- VERY BAD!
Is it possible to move an entire .html document into a database? and have
it displayed properly within a codecharge page? Or am I better off writing
some sort of parsing routine to export as text, and parse it into my sql
database and create my own report based on the information?
Thoughts? Comments? Am I crazy?
Dj
|
|
|
 |
Alexey Alexapolsky
|
| Posted: 08/08/2001, 2:48 AM |
|
You may keep them in a separate secure directory and
display them with a custom script that requires login.
yourscript.asp?report_name=aaaa&report_date=1/1/2001
--
Alex
Don Oldenburg <don.oldenburg@cacmnet.com> wrote in message
news:9kp0me$m49$1@news.codecharge.com...
> Okay.. We are in the process of developing both a client side secure
> website and an internal corporate intranet using Code Charge. Starting
the
> planning phase of the client intranet site. The primary function of the
> client intranet site is to be able to display to a client their financial
> statements -- there are 4 or 5 different reports which are currently
created
> automatically in an html format and uploaded to secure third party website
> as a zip file. Their system automatically logs in the files and catalogs
> them properly and assigns them to the correct client.
>
> My question is this... what's the easiest/best (hopefully the same) way
to
> accompish this. I can export them to either HTML, TXT or PDF. Ideally it
> would be nice to export them to PDF, and then maintain a database of all
the
> reports and paths, and they could just click on the link. HOWEVER, the
> problem with that is anyone could put in the link to that page/file and
view
> someone elses financial statements -- VERY BAD!
>
> Is it possible to move an entire .html document into a database? and have
> it displayed properly within a codecharge page? Or am I better off
writing
> some sort of parsing routine to export as text, and parse it into my sql
> database and create my own report based on the information?
>
> Thoughts? Comments? Am I crazy?
>
> Dj
>
>
|
|
|
|
Don Oldenburg
|
| Posted: 08/08/2001, 2:10 PM |
|
But what would stop them from jumping directly to that directory and pulling
up pages? I don't want to have to maintain NT security on these files.
"Alexey Alexapolsky" <alexa@codecharge.com> wrote in message
news:9kr1tp$ngm$1@news.codecharge.com...
> You may keep them in a separate secure directory and
> display them with a custom script that requires login.
>
> yourscript.asp?report_name=aaaa&report_date=1/1/2001
>
> --
> Alex
>
> Don Oldenburg <don.oldenburg@cacmnet.com> wrote in message
>news:9kp0me$m49$1@news.codecharge.com...
> > Okay.. We are in the process of developing both a client side secure
> > website and an internal corporate intranet using Code Charge. Starting
> the
> > planning phase of the client intranet site. The primary function of the
> > client intranet site is to be able to display to a client their
financial
> > statements -- there are 4 or 5 different reports which are currently
> created
> > automatically in an html format and uploaded to secure third party
website
> > as a zip file. Their system automatically logs in the files and
catalogs
> > them properly and assigns them to the correct client.
> >
> > My question is this... what's the easiest/best (hopefully the same)
way
> to
> > accompish this. I can export them to either HTML, TXT or PDF. Ideally
it
> > would be nice to export them to PDF, and then maintain a database of all
> the
> > reports and paths, and they could just click on the link. HOWEVER, the
> > problem with that is anyone could put in the link to that page/file and
> view
> > someone elses financial statements -- VERY BAD!
> >
> > Is it possible to move an entire .html document into a database? and
have
> > it displayed properly within a codecharge page? Or am I better off
> writing
> > some sort of parsing routine to export as text, and parse it into my sql
> > database and create my own report based on the information?
> >
> > Thoughts? Comments? Am I crazy?
> >
> > Dj
> >
> >
>
>
|
|
|
|
CodeCharge
|
| Posted: 08/08/2001, 3:00 PM |
|
Solution 1 (ASP, untested):
You may create a directory that would be unknown to users, for example
"xyz".
Then create an empty page in CodeCharge, with an Event like this:
'Lookup filename for this user in the database
filename = Dlookup("table","file_name","user_id=" & Session("UserID"))
'Redirect the user to the file
response.redirect("xyz/" & filename)
I believe that this will not reveal the location of the file.
But there is a risk that someone who finds the location, may be able to
download other files.
Solution 2 (ASP, untested):
Create 2 directories: One secure, which doesn't need to be accessible from
the web server, and the other one public .
Place all files in the secure directory and populate your database with
appropriate file names.
Create an empty page in CodeCharge with an Event like this:
'Lookup filename for this user in the database
filename = Dlookup("table","file_name","user_id=" & Session("UserID"))
'Create new FileName based on current date/time and user
rnow=now()
newfile= cstr(month(rnow)) & cstr(day(now)) & cstr(hour(rnow)) &
cstr(minute(rnow)) & cstr(second(rnow)) & "-" & Session("UserID")
'Copy the original file from secure location to public location and
rename to the new name
Set fs = CreateObject("Scripting.FileSystemObject")
set origfile=fs.GetFile("c:\securefiles\" & filename)
origfile.Copy("c:\Inetpub\wwwroot\mysystem\publicfiles\" & newfile)
set origfile=nothing
set fs=nothing
'Redirect the user to the newly created file
response.redirect("publicfiles/" & newfile)
The downside here is that you may need to delete previously created files,
but it should be fairly easy to create a script that would periodically
delete all files that are couple hours old.
"Don Oldenburg" <don.oldenburg@cacmnet.com> wrote in message
news:9ks9rn$c4q$1@news.codecharge.com...
> But what would stop them from jumping directly to that directory and
pulling
> up pages? I don't want to have to maintain NT security on these files.
>
> "Alexey Alexapolsky" <alexa@codecharge.com> wrote in message
>news:9kr1tp$ngm$1@news.codecharge.com...
> > You may keep them in a separate secure directory and
> > display them with a custom script that requires login.
> >
> > yourscript.asp?report_name=aaaa&report_date=1/1/2001
> >
> > --
> > Alex
> >
> > Don Oldenburg <don.oldenburg@cacmnet.com> wrote in message
> >news:9kp0me$m49$1@news.codecharge.com...
> > > Okay.. We are in the process of developing both a client side secure
> > > website and an internal corporate intranet using Code Charge.
Starting
> > the
> > > planning phase of the client intranet site. The primary function of
the
> > > client intranet site is to be able to display to a client their
> financial
> > > statements -- there are 4 or 5 different reports which are currently
> > created
> > > automatically in an html format and uploaded to secure third party
> website
> > > as a zip file. Their system automatically logs in the files and
> catalogs
> > > them properly and assigns them to the correct client.
> > >
> > > My question is this... what's the easiest/best (hopefully the same)
> way
> > to
> > > accompish this. I can export them to either HTML, TXT or PDF. Ideally
> it
> > > would be nice to export them to PDF, and then maintain a database of
all
> > the
> > > reports and paths, and they could just click on the link. HOWEVER,
the
> > > problem with that is anyone could put in the link to that page/file
and
> > view
> > > someone elses financial statements -- VERY BAD!
> > >
> > > Is it possible to move an entire .html document into a database? and
> have
> > > it displayed properly within a codecharge page? Or am I better off
> > writing
> > > some sort of parsing routine to export as text, and parse it into my
sql
> > > database and create my own report based on the information?
> > >
> > > Thoughts? Comments? Am I crazy?
> > >
> > > Dj
> > >
> > >
> >
> >
>
>
|
|
|
|
|
