Click here to be sent your password via email <- HOW? 1

PGen · Sep 4, 2001

Is is possible to submit to a CGI from ASP without using form fields and the browser.

EG. by manually creating HTTP headers

I need this so that i can write a script that sends users their login password via email. Therefore I cant write the password to a hidden field on the browser, as this poses a security risk.

Thanks,

Will

foxbox · Sep 4, 2001

Mmmmmm, it is possible to create an e-mail with ASP (i use ASPemail form Persits, which came free with a book). On a classic login page you'll find a 'Forget password?' link. After entering your userid or e-mail your program does a lookup in a user-table, and then generates the e-mail.
br
Gerard

PGen · Sep 4, 2001

Thanks for the reply Gerard,

I had a look at

http://www.aspemail.com,

however I dont have access to IIS as it is a remotely hosted server and they wont install it for me.

My problem also goes beyond that one I mentioned originally...

Its not email thats the problem, as i can use PHP, CGI and other commonly available Perl scripts to do this via HTML form POST. The problem is with security and not involving the browser for any type of HTML form submission.

Is there any way of creating HTTP Headers to emulate a form submission thereby bypassing the users browser altogether!

I think im going down the road of Perl using STDOUT and have posted a relevant thread on that forum.

Thanks again,

Will

SauerC · Sep 5, 2001

Are you saying you want to programmatically POST a html form? Yes you can do that, but it does require a TCP control to do it (you've already stated your ISP won't add new controls for you).

here's a snippet of code from an ASP that opens a connection to a webserver an does a POST to a form

Code:

set Socket = server.createobject(&quot;socket.tcp&quot;)
Socket.Host = PHost & &quot;:80&quot;
Socket.Open()
Socket.SendLine(&quot;POST &quot; & PPage & &quot; HTTP/1.0&quot;)
Socket.SendLine(&quot;User-Agent: WebPager/0.1&quot;)
Socket.SendLine(&quot;Content-Type: application/x-[URL unfurl="true"]www-form-urlencoded&quot;)[/URL]
Socket.SendLine(&quot;Content-length: &quot; & len(PostData))
Socket.SendLine(&quot;&quot;)
Socket.SendText(PostData)
Socket.WaitForDisconnect()
if instr(Socket.Buffer, PResponse) <> 0 then
	SendPage = &quot;TRUE&quot;
else
	SendPage = &quot;FALSE&quot;
end if
Socket.Close
set Socket = nothing
Wait 3000
End Function

PPage is the the name and path of the form you want to POST

PostData looks like an GET string: (FieldName=Data&AnotherFiledName=MoreData)

-Christian

PGen · Sep 5, 2001

Yup "Invalid ProgID" error - so it's not installed on the NT server and I got an error on the Linux one aswell.

I'll try this header building with perl or php.

A thousand thank-yous,

Will

--------------

Are these correct?

PHost = The 'ORIGIN' Server
PPage = The Destination Page
PostData = The Data
PResponse = whats this exactly???

Here is the full code I used:

<% @LANGUAGE = VBScript %>
<%
Option Explicit
Response.Expires = 0

Call SendPage("

http://www.myserver.com",&quot...eldName=Data&AnotherFiledName=MoreData")

Function SendPage(PHost,PPage,PostData)
set Socket = server.createobject("socket.tcp&quot

Socket.Host = PHost & ":80"
Socket.Open()
Socket.SendLine("POST " & PPage & " http/1.0&quot

Socket.SendLine("User-Agent: WebPager/0.1&quot

Socket.SendLine("Content-Type: application/x-

http://www-form-urlencoded")

Socket.SendLine("Content-length: " & len(PostData))
Socket.SendLine("&quot

Socket.SendText(PostData)
Socket.WaitForDisconnect()
'if instr(Socket.Buffer, PResponse) <> 0 then
' SendPage = "TRUE"
'else
' SendPage = "FALSE"
'end if
Socket.Close
set Socket = nothing
Wait 3000
End Function

%>
<html>
<head>
<title>Auto-Submit</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>

<body bgcolor="#FFFFFF" text="#000000">
Sent Data...
</body>
</html>

shaddow · Sep 5, 2001

U could ask if they have instaled on the Server "CDONTS" files (witch means they has instaled a email server) and the use the Object to send the emails ________
George, M

PGen · Sep 5, 2001

Hi George,

I've tried creating a CDONTS object already, they dont have it installed

And not having much luck with the PHP headers either.

But its not email that im too fussed about, its the auto-header FORM data submittion that i am desparately trying to crack atm. If I can solve this then ill be so so happy.

Will

shaddow · Sep 5, 2001

Try this way cuz the "socket.tcp" object doesn't exist on the server but "MSWinsock.Winsock.1" does

Code:

PPage=&quot;mypage.htm&quot; 'not asp
set s = server.createobject(&quot;MSWinsock.Winsock.1&quot;)
s.RemoteHostIP=&quot;192.168.0.234&quot;
s.RemotePort=80 'port
s.Connect
s.SendData &quot;POST &quot; & PPage & &quot; http/1.0&quot;
s.SendData &quot;User-Agent: WebPager/0.1&quot;
s.SendData &quot;Content-Type: application/x-[URL unfurl="true"]www-form-urlencoded&quot;[/URL]
s.SendData &quot;Content-length: &quot; & len(PostData)
s.SendData &quot;&quot;
s.SendData PostData
s.Close
set s = nothing

hope this works for u... ________
George, M

PGen · Sep 5, 2001

erm...so the PPage is the ORIGIN of the data post?

If so, then where is the DESTINATION that is being posted to?

Also, is the ip address the ip of the host (origin) server, not the destination server?

Thanks for helping out George.

shaddow · Sep 5, 2001

U need to use like SauerC says but the "socket" is replaced to "s"
I dont research this to mutch but i'll try, and if u could provide me with some clues please tell me or email me at
shaddow11_ro@yahoo.com maybe we could get this to work... ________
George, M

PGen · Sep 5, 2001

Hi George, I tried it on both and got errors:

"Server.CreateObject Failed" - on NT
"ASP - An error occurred..." - on Linux (unsurprisingly)

I.E. not installed on either server.

I think im loosing the battle,

Will

shaddow · Sep 5, 2001

So we dont have to mutch options...
The objects are on the server but u dont have permision to create the object...

And for your first question could u be more specific maybe we find anothe solution... ________
George, M

PGen · Sep 5, 2001

Well, Ive got two problems to solve:

1. Email Password from Login Page
(without using hidden fields because of security)

2. Simulated Form Data POST

If I can solve #2 then automatically #1 is solved.

Thnx George,

Will

shaddow · Sep 5, 2001

Will, u have the password and u want to send an email with it? ________
George, M

PGen · Sep 5, 2001

Yup, the password is in a MySQL DB that i can access via VBScript.

I can also use any of my form-email gateway scripts, but cant put the pw in a hidden field as its a security risk. Thats why im trying to figure out how to simulate a POST.

Thnx,

Will

Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Click here to be sent your password via email <- HOW? 1

PGen

Programmer

foxbox

Programmer

PGen

Programmer

SauerC

Technical User

PGen

Programmer

shaddow

Programmer

PGen

Programmer

shaddow

Programmer

PGen

Programmer

shaddow

Programmer

PGen

Programmer

shaddow

Programmer

PGen

Programmer

shaddow

Programmer

PGen

Programmer

Similar threads

Part and Inventory Search

Sponsor

Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Click here to be sent your password via email &lt;- HOW? 1

Programmer

Programmer

Programmer

Technical User

Programmer

Programmer

Programmer

Programmer

Programmer

Programmer

Programmer

Programmer

Programmer

Programmer

Programmer

Similar threads

Log in

Part and Inventory Search

Sponsor

Click here to be sent your password via email <- HOW? 1