XP Home won't open a remote page that XP Pro will

[vool]

Hi all,

I've got a really wierd problem here.

When I access a remote web page that adds information to a database on a PC
running
XP Pro it works as it should.

When I access the same page from a PC running XP Home I get an ' Internal
server error - page cannot be displayed' message.

I've tried it on 5 PC's running XP Pro & 5 running XP Home - same result.

ASP code is:

<%@LANGUAGE="VBSCRIPT" CODEPAGE="1252"%>

<%
dim conn2,sql2
set conn2 = server.createobject ("ADODB.connection")
conn2.Provider="Microsoft.Jet.OLEDB.4.0"
conn2.Open(Server.Mappath("dat48372.mdb"))

sql2="INSERT INTO Tracker (qReferer, qLocAdd, qRemAdd, qUAgent)"
sql2=sql2 & " VALUES "
sql2=sql2 & "('" & request.servervariables("HTTP_REFERER") & "',"
sql2=sql2 & "'" & request.servervariables("LOCAL_ADDR") & "',"
sql2=sql2 & "'" & request.servervariables("REMOTE_ADDR") & "',"
sql2=sql2 & "'" & request.servervariables("HTTP_USER_AGENT") & "')"

conn2.Execute sql2
conn2.close
set conn2 = Nothing
%>

Can anyone help pls. page is http://wavestation.biz/scotty

Thanks in advance

xool

 

[Ray at]

Or announce that you got this figured out in your other identical thread.

Ray at work

 

[Mpaintnz]

Hi all,

I've got a really wierd problem here.

When I access a remote web page that adds information to a database on a PC
running
XP Pro it works as it should.

When I access the same page from a PC running XP Home I get an ' Internal
server error - page cannot be displayed' message.

I've tried it on 5 PC's running XP Pro & 5 running XP Home - same result.

ASP code is:

<%@LANGUAGE="VBSCRIPT" CODEPAGE="1252"%>

<%
dim conn2,sql2
set conn2 = server.createobject ("ADODB.connection")
conn2.Provider="Microsoft.Jet.OLEDB.4.0"
conn2.Open(Server.Mappath("dat48372.mdb"))

sql2="INSERT INTO Tracker (qReferer, qLocAdd, qRemAdd, qUAgent)"
sql2=sql2 & " VALUES "
sql2=sql2 & "('" & request.servervariables("HTTP_REFERER") & "',"
sql2=sql2 & "'" & request.servervariables("LOCAL_ADDR") & "',"
sql2=sql2 & "'" & request.servervariables("REMOTE_ADDR") & "',"
sql2=sql2 & "'" & request.servervariables("HTTP_USER_AGENT") & "')"

conn2.Execute sql2
conn2.close
set conn2 = Nothing
%>

Can anyone help pls. page is http://wavestation.biz/scotty

I didn't get any error messages with Opera 7, but then again that is an
*.HTM file
<META NAME="author" CONTENT="J M Neary">
<LINK REV="made" HREF="(e-mail address removed)">
<META NAME="copyright" CONTENT="2003 Terra-Byte">


Have you tried debugging your ASP?
e.g replacing CONN2.EXECUTE SQL2 with RESPONSE.WRITE SQL2 and comparing the
difference?

Since while I don't know, I do suspect that the two client dependent values
HTTP_USER_AGENT and HTTP_REFERER are the most likely suspects.

HINT: To prevent hacking, check any user editable strings like
HTTP_REFERER's for badness before giving them to SQL, your current
implementation doesn't stop someone squirting a referer string like
server.urlencode("Host',"","","");DELETE tracker.*;")
which if it didn't include deliberate syntax errors could **** your table
contents.

And since you have published the script syntax and URL to the world, you
might want to patch that hole fast, da?
And is dat48372.mdb supposed to be world readable?