Computing.Net > Forums > Web Development > Site not secure?

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Site not secure?

Reply to Message Icon

Name: Abe85
Date: August 15, 2005 at 11:43:13 Pacific
OS: Windows 2000 Server
CPU/Ram: Dual P4 4.0 GHz, 512 MB
Comment:

Hello, I am running an intranet site for employees where I work, and due to our latest Windows Server 2003 w/ Active Directory upgrade, I decided to create a page within the intranet site that contains a javascript that enables employees to browse each user, and display various info. like phone number, location etc. The Javascript file pulls this employee data from an Access Database, located on the WebServer in the intranet directory. The problem is, when you try to pull up the page on a machine connected to the domain through our standard browser Internet Explorer 6 SP1, The script appears but no data is present, and a message in the IE window appears above, explaining:

"Data Access Pages has detected that your IE security settings will not allow you to access data from a site considered to be insecure."

I can get it to show up by going to IE Internet Properties, and adding "http://www.ci.desoto.tx.us" as a secure site, which I know there is a way to workaround this problem so that this is not necessary - Also, and this is not as important but I'll say it anyway: Whenever I try and browse the page from a computer not connected to the network like my home PC, the database is not present at all, I get an error message explaining that it cannot find "\\desotoweb\intranet\employeedirectory\database.mdb" or something to that effect. How would I go about publishing the Database online so that anyone can view it nomatter where the location? I appreciate your help guys.

-Abe.



Sponsored Link
Ads by Google

Response Number 1
Name: Michael J (by mjdamato)
Date: August 15, 2005 at 12:46:30 Pacific
Reply:

I'm not sure what specific actions are taking place when you say "javascript that enables employees to browse each user", but it appears that the script is performing actions which *could* be used for malicious intents. Depending on your situation, there might be a way to performt he same actions on the server side instead of client side. Otherwise, the only solution is to relax the security settings - either for the whole system or by entering an exclusion as you noted above. You can probably push that exclusion to all computers as well.

Your second problem looks to be due to a path being relative to the "user's" computer rather than relative to the server. Fixing this may also fix the first problem.

Michael J


0

Response Number 2
Name: Abe85
Date: August 17, 2005 at 10:00:40 Pacific
Reply:

The Web Server is running Windows 2000 Server, with IIS 5.5. Are there any specific instructions anyone can offer me as to how I can apply the intranet site as a trusted, secure site through IE on all workstations? The majority of our users are Win2000, but I would say 40% are XP. We are running an active directory, and since we just implemented this, I am not aware how to apply this to all machines (So that it is inputted on all user machines after they log off, or reboot for instance).

To Michael J - Can you explain the steps I would need to take to make the path to the access database relative to the server rather than the user? By the way, the javascript I was referring to is an actual interface implemented into the website, with a list of each user. Once a user is selected from the list, all the user information appears in different windows to the right. All user data is pulled from the access database, which is contained within a folder in the main intranet directory of the web server. This folder gives everyone Read/Write permissions.

Thanks for your help.


0

Response Number 3
Name: zeleznikja
Date: August 17, 2005 at 19:16:21 Pacific
Reply:

I had this exact same type of problem. For some reason anytine I tried accessing any javascripting from a local intranet site it complained about it being malicious content, although IE would display the page without complaining once it was published and accessed from the server.

I tried adding the local intrnet zone to trusted and the lowest settings but it didnt help. If you find out the solution to this I would love to know.


0

Response Number 4
Name: Abe85
Date: August 22, 2005 at 12:22:56 Pacific
Reply:

Is there anyone that can still help me with this??


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Web Development Forum Home


Sponsored links

Ads by Google


Results for: Site not secure?

.Com site questions www.computing.net/answers/webdevel/com-site-questions/1784.html

web site not changing www.computing.net/answers/webdevel/web-site-not-changing/2713.html

Flash site not working www.computing.net/answers/webdevel/flash-site-not-working/3664.html