Auto-Input Protection (AIP) for ASP.NET

Created Feature: Support Attribute: autocomplete="off"

davedev — Wed, 31 Dec 2008 18:49:56 GMT

Add a boolean AutoCompleteDisabled property (default=true) that controls the inclusion of an autocomplete="off" attribute on the input control in the default template (when false, simply exclude the autocomplete attribute). When present, this attribute will prevent browsers from saving old CAPTCHA answers for auto-completion, which should never be reusable, in theory.

Netscape 6.2 (Mozilla 0.9.4) or later. IE 5 or later:
https://developer.mozilla.org/En/How_to_Turn_Off_Form_Autocompletion

Opera:
http://list.opera.com/pipermail/opera-users/2004-December/024627.html

See also:
http://msdn.microsoft.com/en-us/library/ms533032(VS.85).aspx
http://msdn.microsoft.com/en-us/library/ms533486(VS.85).aspx

New Post: CreateUserWizard Validation?

infinitep — Sun, 23 Nov 2008 05:56:28 GMT

Thanks Dave that works.

I think it comes down to crappy testing on my part. I was not entering any info in any of the other fields (ie username etc) and just entering the wrong data in the AIP control. This doesn't allow the AIP to validate as the other validation controls for username password are kicking first somehow. This is not a problem and I will be happy to implement this control instead of the one I have been using.

Thanks again for all your help and it truly is the best open source captcha I have seen for asp.net.

New Post: CreateUserWizard Validation?

davedev — Sun, 23 Nov 2008 05:39:37 GMT

Hi,

I can't reproduce the problem with your HTML. When I click the Create User button after entering an invalid response into the AIP text box, the page posts back and I see, "The value you have entered does not match the image." in the validation summary, as expected.

> Maybe the problem is in protected override void CreateChildControls() in AutoInputProtectionControl.cs where the required.errormessage does not set a validationgroup?

No, there doesn't seem to be any problem with that code. The ValidationGroup property is set on the required variable after it is cast to BaseValidator. You can verify whether it's being assigned by examing the HTML of your page within the browser - near the bottom there will be a script block that assigns the validationgroup property of each of the AIP validator controls.

I'd appreciate it if you could try to reproduce the problem in a simpler scenario. Here's some HTML that's also templated and works fine for me. Try adding some of your code-behind and your other controls one at a time until you can reproduce the problem.

<asp:CreateUserWizard ID="CreateUserWizard1" runat="server" RequireEmail="false">
  <WizardSteps>
    <asp:CreateUserWizardStep runat="server">
      <ContentTemplate>
        <div><asp:TextBox runat="server" ID="UserName" ValidationGroup="CreateUserWizard1" /></div>
        <div><asp:TextBox runat="server" ID="Password" ValidationGroup="CreateUserWizard1" /></div>
        <div><asp:TextBox runat="server" ID="Question" ValidationGroup="CreateUserWizard1" /></div>
        <div><asp:TextBox runat="server" ID="Answer" ValidationGroup="CreateUserWizard1" /></div>
        <div>
          <dsweb:AutoInputProtectionControl runat="server" ID="aip" ValidationGroup="CreateUserWizard1">
          </dsweb:AutoInputProtectionControl>
        </div>
        <div>
          <asp:ValidationSummary runat="server" ValidationGroup="CreateUserWizard1" />
        </div>
      </ContentTemplate>
    </asp:CreateUserWizardStep>
    <asp:CompleteWizardStep runat="server" />
  </WizardSteps>
</asp:CreateUserWizard>

- Dave

New Post: CreateUserWizard Validation?

infinitep — Sun, 23 Nov 2008 04:26:44 GMT

Hi Dave, you didn't answer my question.

Maybe the problem is in protected override void CreateChildControls() in AutoInputProtectionControl.cs where the required.errormessage does not set a validationgroup????

As you can see from the code below, clicking create user without entering any text in the AIP produces the correct errormessage in the validationsummary however entering the incorrect text validation in the AIP control does not produce any errormessages in the validationsummary. Please help.

@ Page Language="VB" AutoEventWireup="false" CodeFile="Rego.aspx.vb" Inherits="Rego" %>

@ Register Assembly="DaveSexton.AutoInputProtection" Namespace="DaveSexton.Web.Controls"

TagPrefix="dsweb" %>

DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

html xmlns="http://www.w3.org/1999/xhtml">

head runat="server">

<title>Untitled Page</title>

head>

body>

<div>

<asp:CreateUserWizard ID="CreateUserWizard1" runat="server">

<asp:CreateUserWizardStep ID="CreateUserWizardStep1" runat="server">

<tr>

</td>

</tr>

<tr>

<asp:Label ID="UserNameLabel" runat="server" AssociatedControlID="UserName">User

Name:

</asp:Label>

</td>

<td>

<asp:TextBox ID="UserName" runat="server"></asp:TextBox>

<asp:RequiredFieldValidator ID="UserNameRequired" runat="server"

ControlToValidate="UserName" ErrorMessage="User Name is required."

ToolTip="User Name is required." ValidationGroup="CreateUserWizard1">*</asp:RequiredFieldValidator>

</td>

</tr>

<tr>

<asp:Label ID="PasswordLabel" runat="server" AssociatedControlID="Password">Password:</asp:Label>

</td>

<td>

<asp:TextBox ID="Password" runat="server" TextMode="Password"></asp:TextBox>

<asp:RequiredFieldValidator ID="PasswordRequired" runat="server"

ControlToValidate="Password" ErrorMessage="Password is required."

ToolTip="Password is required." ValidationGroup="CreateUserWizard1">*</asp:RequiredFieldValidator>

</td>

</tr>

<tr>

<asp:Label ID="ConfirmPasswordLabel" runat="server"

AssociatedControlID="ConfirmPassword">Confirm Password:</asp:Label>

</td>

<td>

<asp:TextBox ID="ConfirmPassword" runat="server" TextMode="Password"></asp:TextBox>

<asp:RequiredFieldValidator ID="ConfirmPasswordRequired" runat="server"

ControlToValidate="ConfirmPassword"

ErrorMessage="Confirm Password is required."

ToolTip="Confirm Password is required." ValidationGroup="CreateUserWizard1">*</asp:RequiredFieldValidator>

</td>

</tr>

<tr>

<asp:Label ID="EmailLabel" runat="server" AssociatedControlID="Email">E-mail:</asp:Label>

</td>

<td>

<asp:TextBox ID="Email" runat="server"></asp:TextBox>

<asp:RequiredFieldValidator ID="EmailRequired" runat="server"

ControlToValidate="Email" ErrorMessage="E-mail is required."

ToolTip="E-mail is required." ValidationGroup="CreateUserWizard1">*</asp:RequiredFieldValidator>

</td>

</tr>

<tr>

<asp:Label ID="QuestionLabel" runat="server" AssociatedControlID="Question">Security

Question:

</asp:Label>

</td>

<td>

<asp:TextBox ID="Question" runat="server"></asp:TextBox>

<asp:RequiredFieldValidator ID="QuestionRequired" runat="server"

ControlToValidate="Question" ErrorMessage="Security question is required."

ToolTip="Security question is required." ValidationGroup="CreateUserWizard1">*</asp:RequiredFieldValidator>

</td>

</tr>

<tr>

<asp:Label ID="AnswerLabel" runat="server" AssociatedControlID="Answer">Security

Answer:

</asp:Label>

</td>

<td>

<asp:TextBox ID="Answer" runat="server"></asp:TextBox>

<asp:RequiredFieldValidator ID="AnswerRequired" runat="server"

ControlToValidate="Answer" ErrorMessage="Security answer is required."

ToolTip="Security answer is required." ValidationGroup="CreateUserWizard1">*</asp:RequiredFieldValidator>

</td>

</tr>

<tr>

<asp:Label ID="LabelAIP" runat="server" AssociatedControlID="AutoInputProtectionControl1">Validate:</asp:Label>

</td>

<td>

<dsweb:AutoInputProtectionControl ID="AutoInputProtectionControl1"

runat="server" ValidationGroup="CreateUserWizard1">

</dsweb:AutoInputProtectionControl>

</td>

</tr>

<tr>

<asp:CompareValidator ID="PasswordCompare" runat="server"

ControlToCompare="Password" ControlToValidate="ConfirmPassword"

Display="Dynamic"

ErrorMessage="The Password and Confirmation Password must match."

ValidationGroup="CreateUserWizard1"></asp:CompareValidator>

</td>

</tr>

<tr>

<asp:ValidationSummary ID="ValidationSummary1" runat="server"

ValidationGroup="CreateUserWizard1" />

<asp:Literal ID="ErrorMessage" runat="server" EnableViewState="False"></asp:Literal>

</td>

</tr>

</table>

</ContentTemplate>

</asp:CreateUserWizardStep>

<asp:CompleteWizardStep ID="CompleteWizardStep1" runat="server">

</asp:CompleteWizardStep>

</WizardSteps>

</asp:CreateUserWizard>

</div>

</form>

body>

html>

New Post: CreateUserWizard Validation?

infinitep — Thu, 20 Nov 2008 07:41:06 GMT

Thats okay I understand that now. However for the createuserwizard with adding the validationgroup it still will only show the errormessage in the validationsummary for an empty AIP textbox and not if an incorrect entry is made?

New Post: CreateUserWizard Validation?

davedev — Thu, 20 Nov 2008 07:10:52 GMT

Hi,

Sorry but I had misunderstood your last issue. Based on your examples it seems that you have been observing the correct behavior.

> As a further example you can see that this works [snip]

Yes, because all controls are participating in the default validation group since ValidationGroup is not assigned for any of them.

> And this doesnt [snip]

Yes, because the AIP control and the ValidationSummary control are participating in ValidationGroup="aip" while the button is still participating in the default validation group only.

> But if you give the button a validationgroup too it does [snip]

Yes, because all controls are now participating in the same validation group again (although this time it's the aip group, not the default group).

If you assign controls to a ValidationGroup you must assign the button to the same ValidationGroup in order to trigger validation when it's clicked.

Try replacing the AIP control in your examples with a regular TextBox and RequiredFieldValidator instead. You should see the same exact behavior.

- Dave

New Post: CreateUserWizard Validation?

infinitep — Thu, 20 Nov 2008 02:56:56 GMT

I can get

User validation is required

to show for createuserwizard by clicking an empty AIP control with validationgroup set for AIP control and validationsummary.

Maybe the problem is in protected override void CreateChildControls() in AutoInputProtectionControl.cs

where the required.errormessage does not set a validationgroup????

New Post: CreateUserWizard Validation?

infinitep — Thu, 20 Nov 2008 02:37:57 GMT

Hi Dave,

No that related problem doesnt sound like the cause. I tried to debug the code but I couldnt work out how the code passes the errormessage to the validationsummary. Does this happen just by producing an errormessage?

As a further example you can see that this works

<dsweb:AutoInputProtectionControl ID="AutoInputProtectionControl1" runat="server">

</dsweb:AutoInputProtectionControl>

<asp:Button ID="Button1" runat="server" Text="Button" />

<asp:ValidationSummary ID="ValidationSummary1" runat="server" />

And this doesnt

<dsweb:AutoInputProtectionControl ID="AutoInputProtectionControl1" runat="server" ValidationGroup="aip">

</dsweb:AutoInputProtectionControl>

<asp:Button ID="Button1" runat="server" Text="Button" />

<asp:ValidationSummary ID="ValidationSummary1" runat="server" ValidationGroup="aip" />

But if you give the button a validationgroup too it does

<dsweb:AutoInputProtectionControl ID="AutoInputProtectionControl1" runat="server" ValidationGroup="aip">

</dsweb:AutoInputProtectionControl>

<asp:Button ID="Button1" runat="server" Text="Button" ValidationGroup="aip" />

<asp:ValidationSummary ID="ValidationSummary1" runat="server" ValidationGroup="aip" />

New Post: CreateUserWizard Validation?

davedev — Wed, 19 Nov 2008 20:43:27 GMT

Hi,

Thanks for the update.

There is this related problem, although I don't think it's causing your particular issue.

I tried explicitly assigning a value to the RequiredErrorMessage and InvalidErrorMessage properties but the text still didn't appear in the CreateUserWizard control's validation summary. When I look at the raw HTML that is produced by your page the validators within the AIP control appear to be initialized in the exact same way as the validators outside of the control, so I'm not sure what the problem could be.

You should be able to use VC# Express to debug the code, although I'm going to look into it myself when I get some time (hopefully later tonight). I'll get back to you when I find a solution.

- Dave

New Post: CreateUserWizard Validation?

infinitep — Wed, 19 Nov 2008 09:57:20 GMT

Okay I think I have narrowed it down. If I add a validationgroup on the normal page with a validationsummary it doesn't work either but will work without a validationgroup. Im going to have to try and debug the control, but I only have visual studio express :(

New Post: CreateUserWizard Validation?

infinitep — Wed, 19 Nov 2008 09:31:52 GMT

Sorry my mistake, it does work like that. I was entering the wrong data for the AIP control and expecting an error message to be displayed in the validationsummary.

If i add the following code, when incorrect data is entered I do not get any error message, however this works outside of a createuserwizard.

asp:ValidationSummary ID="ValidationSummary1" runat="server"

ValidationGroup="CreateUserWizard1" />

Thanks for the speedy reply, great control BTW.

New Post: CreateUserWizard Validation?

davedev — Wed, 19 Nov 2008 07:46:19 GMT

Hi,

In testing your example I found that adding the same ValidationGroup as the other controls on your page works for me:

<dsweb:AutoInputProtectionControl ID="AutoInputProtectionControl1" runat="server" ValidationGroup="CreateUserWizard1">
</dsweb:AutoInputProtectionControl>

Now when I click the Create User button the form will not be submitted and I get a red asterisk next to the AIP text box until I enter a value. And it will only continue to the next step of the wizard if the value that I enter is valid.

Are you sure that you tried ValidationGroup="CreateUserWizard1"?

- Dave

New Post: Error in online documentation

davedev — Wed, 19 Nov 2008 07:19:45 GMT

Hi,

There's a note above the examples in that section:

Note that this example only applies to AIP 1.0. Refer to the 2.0 Beta documentation for 2.0 examples.

But thanks anyway for reporting it :)

- Dave

New Post: Error in online documentation

infinitep — Wed, 19 Nov 2008 03:50:19 GMT

There is an error in the online documentation here http://www.codeplex.com/aip#config where it say bitmapprovider it should say imageprovider.

New Post: CreateUserWizard Validation?

infinitep — Wed, 19 Nov 2008 03:46:56 GMT

Hi I am trying to put the AIP control in my CreateUserWizardStep ContentTemplate so it's all on the one page. The control works and show the AIP image, filter and text however clicking on the create user button fails to fire an validation for the AIP control. I have tried adding a validationgroup and can not get it to work. Can anyone please help?

<%

@ Page Language="VB" AutoEventWireup="false" CodeFile="Rego.aspx.vb" Inherits="Rego" %>

@ Register Assembly="DaveSexton.AutoInputProtection" Namespace="DaveSexton.Web.Controls"

TagPrefix="dsweb" %>

DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

html xmlns="http://www.w3.org/1999/xhtml">

head runat="server">

<title>Untitled Page</title>

head>

body>

<div>

<asp:CreateUserWizard ID="CreateUserWizard1" runat="server">

<asp:CreateUserWizardStep ID="CreateUserWizardStep1" runat="server">

<tr>

</td>

</tr>

<tr>

<asp:Label ID="UserNameLabel" runat="server" AssociatedControlID="UserName">User

Name:

</asp:Label>

</td>

<td>

<asp:TextBox ID="UserName" runat="server"></asp:TextBox>

<asp:RequiredFieldValidator ID="UserNameRequired" runat="server"

ControlToValidate="UserName" ErrorMessage="User Name is required."

ToolTip="User Name is required." ValidationGroup="CreateUserWizard1">*</asp:RequiredFieldValidator>

</td>

</tr>

<tr>

<asp:Label ID="PasswordLabel" runat="server" AssociatedControlID="Password">Password:</asp:Label>

</td>

<td>

<asp:TextBox ID="Password" runat="server" TextMode="Password"></asp:TextBox>

<asp:RequiredFieldValidator ID="PasswordRequired" runat="server"

ControlToValidate="Password" ErrorMessage="Password is required."

ToolTip="Password is required." ValidationGroup="CreateUserWizard1">*</asp:RequiredFieldValidator>

</td>

</tr>

<tr>

<asp:Label ID="ConfirmPasswordLabel" runat="server"

AssociatedControlID="ConfirmPassword">Confirm Password:</asp:Label>

</td>

<td>

<asp:TextBox ID="ConfirmPassword" runat="server" TextMode="Password"></asp:TextBox>

<asp:RequiredFieldValidator ID="ConfirmPasswordRequired" runat="server"

ControlToValidate="ConfirmPassword"

ErrorMessage="Confirm Password is required."

ToolTip="Confirm Password is required." ValidationGroup="CreateUserWizard1">*</asp:RequiredFieldValidator>

</td>

</tr>

<tr>

<asp:Label ID="EmailLabel" runat="server" AssociatedControlID="Email">E-mail:</asp:Label>

</td>

<td>

<asp:TextBox ID="Email" runat="server"></asp:TextBox>

<asp:RequiredFieldValidator ID="EmailRequired" runat="server"

ControlToValidate="Email" ErrorMessage="E-mail is required."

ToolTip="E-mail is required." ValidationGroup="CreateUserWizard1">*</asp:RequiredFieldValidator>

</td>

</tr>

<tr>

<asp:Label ID="QuestionLabel" runat="server" AssociatedControlID="Question">Security

Question:

</asp:Label>

</td>

<td>

<asp:TextBox ID="Question" runat="server"></asp:TextBox>

<asp:RequiredFieldValidator ID="QuestionRequired" runat="server"

ControlToValidate="Question" ErrorMessage="Security question is required."

ToolTip="Security question is required." ValidationGroup="CreateUserWizard1">*</asp:RequiredFieldValidator>

</td>

</tr>

<tr>

<asp:Label ID="AnswerLabel" runat="server" AssociatedControlID="Answer">Security

Answer:

</asp:Label>

</td>

<td>

<asp:TextBox ID="Answer" runat="server"></asp:TextBox>

<asp:RequiredFieldValidator ID="AnswerRequired" runat="server"

ControlToValidate="Answer" ErrorMessage="Security answer is required."

ToolTip="Security answer is required." ValidationGroup="CreateUserWizard1">*</asp:RequiredFieldValidator>

</td>

</tr>

<tr>

<asp:Label ID="LabelAIP" runat="server" AssociatedControlID="AutoInputProtectionControl1">Validate:</asp:Label>

</td>

<td>

<dsweb:AutoInputProtectionControl ID="AutoInputProtectionControl1" runat="server">

</dsweb:AutoInputProtectionControl>

</td>

</tr>

<tr>

<asp:CompareValidator ID="PasswordCompare" runat="server"

ControlToCompare="Password" ControlToValidate="ConfirmPassword"

Display="Dynamic"

ErrorMessage="The Password and Confirmation Password must match."

ValidationGroup="CreateUserWizard1"></asp:CompareValidator>

</td>

</tr>

<tr>

<asp:Literal ID="ErrorMessage" runat="server" EnableViewState="False"></asp:Literal>

</td>

</tr>

</table>

</ContentTemplate>

</asp:CreateUserWizardStep>

<asp:CompleteWizardStep ID="CompleteWizardStep1" runat="server">

</asp:CompleteWizardStep>

</WizardSteps>

</asp:CreateUserWizard>

</div>

</form>

body>

html>

New Post: Captcha Image not found

davedev — Mon, 17 Nov 2008 17:08:35 GMT

Hi,

Your usage of the AIP web control appears to be fine.

Of course, I can't reproduce the problem from your HTML. I suggest trying to use the control in a very simple web page first. If that doesn't work then let me know and we'll figure something out. If it does work, try to recreate your problematic page one part at a time, testing after each change, until it no longer works again. This should help to identify the issue.

Also, what is the environment in which you're testing the web page? Is it the ASP.NET Development Server that starts when you run the web site in Visual Studio? If it's IIS, what version?

- Dave

New Post: Captcha Image not found

vishnuvvn — Mon, 17 Nov 2008 16:15:50 GMT

Hi Dave,

Thanks for your reply. I meant the captcha image which has letters, its not rendering the image. I am using 2.0 Beta

Here's my code..

@ Page Title="" Language="C#" MasterPageFile="~/Register/MasterPage.master" AutoEventWireup="true" CodeFile="Register.aspx.cs" Inherits="Register_Register" %>

@ Register assembly="AjaxControlToolkit" namespace="AjaxControlToolkit" tagprefix="cc1" %>

@ Register assembly="DaveSexton.AutoInputProtection" namespace="DaveSexton.Web.Controls" tagprefix="dsweb" %>

script runat="server">

script>

asp:Content ID="Content1" ContentPlaceHolderID="head" Runat="Server">

asp:Content>

asp:Content ID="Content2" ContentPlaceHolderID="ContentPlaceHolder1" Runat="Server">

table border="0" cellpadding="0" cellspacing="0" class="createUserWizardTable">

tr>

td class="td_topLeft"> td> --bottom left--%>

td class="td_topCenter"> td> --bottom left--%>

td class="td_topRight"> td> --bottom left--%>

tr>

td class="td_middleLeft"> td> --bottom left--%>

td class="td_middlecCenter"> --bottom left--%>

asp:CreateUserWizard ID="WizCreateUser" runat="server"

oncreatinguser="WizCreateUser_CreatingUser" onsendingmail="WizCreateUser_SendingMail"

oncreateduser="WizCreateUser_CreatedUser" DisableCreatedUser="True"

LoginCreatedUser="False">

MailDefinition BodyFileName="~/Register/ActivateMail.htm"

From="Register@bizylogo.com" IsBodyHtml="True"

Subject="Welcome to Bizylogo.com">

MailDefinition>

FinishNavigationTemplate>

asp:Button ID="FinishPreviousButton" runat="server" CausesValidation="False"

CommandName="MovePrevious" Text="Previous" />

asp:Button ID="FinishButton" runat="server" CommandName="MoveComplete"

Text="Finish" />

FinishNavigationTemplate>

StepNavigationTemplate>

asp:Button ID="StepPreviousButton" runat="server" CausesValidation="False"

CommandName="MovePrevious" Text="Previous" />

asp:Button ID="StepNextButton" runat="server" CommandName="MoveNext"

Text="Next" />

StepNavigationTemplate>

StartNavigationTemplate>

asp:Button ID="StartNextButton" runat="server" CommandName="MoveNext"

Text="Next" />

StartNavigationTemplate>

WizardSteps>

asp:CreateUserWizardStep ID="CreateUserWizardStep1" runat="server">

ContentTemplate>

table border="0">

tr>

td colspan="2">

div class="headings">Login Detailsdiv>td>

tr>

td align="right">

asp:Label ID="UserNameLabel" runat="server" AssociatedControlID="UserName">User Name:asp:Label>

td>

asp:TextBox ID="UserName" runat="server">asp:TextBox>

asp:RequiredFieldValidator ID="UserNameRequired" runat="server"

ControlToValidate="UserName" ErrorMessage="User Name is required."

ToolTip="User Name is required." ValidationGroup="CreateUserWizard1"

Display="None">User Name is required to Loginasp:RequiredFieldValidator>

cc1:ValidatorCalloutExtender ID="UserNameRequired_ValidatorCalloutExtender"

runat="server" Enabled="True" TargetControlID="UserNameRequired" >

cc1:ValidatorCalloutExtender>

td>

tr>

td align="right">

asp:Label ID="PasswordLabel" runat="server" AssociatedControlID="Password">Password:asp:Label>

td>

asp:TextBox ID="Password" runat="server" TextMode="Password">asp:TextBox>

cc1:PasswordStrength ID="Password_PasswordStrength" runat="server"

MinimumNumericCharacters="1" MinimumUpperCaseCharacters="1" MinimumLowerCaseCharacters="1"

MinimumSymbolCharacters="1"

Enabled="True" TargetControlID="Password" RequiresUpperAndLowerCaseCharacters="True"

TextCssClass="pwdStrength"

TextStrengthDescriptions="Very Weak; Weak; Average; Strong; Unbreakable"

PrefixText=" Strength: " HelpHandlePosition="RightSide" >

cc1:PasswordStrength>

asp:RequiredFieldValidator ID="RequiredFieldValidator1" runat="server"

ControlToValidate="Password" Display="None"

ErrorMessage="RequiredFieldValidator">Password should have atlease 1 Uppercase letter, 1 lower case letter, one number and one symbol. example: Sail2Boat3asp:RequiredFieldValidator>

cc1:ValidatorCalloutExtender ID="RequiredFieldValidator1_ValidatorCalloutExtender"

runat="server" Enabled="True" TargetControlID="RequiredFieldValidator1" >

cc1:ValidatorCalloutExtender>

td>

tr>

td align="right">

asp:Label ID="ConfirmPasswordLabel" runat="server"

AssociatedControlID="ConfirmPassword">Confirm Password:asp:Label>

td>

asp:TextBox ID="ConfirmPassword" runat="server" TextMode="Password">asp:TextBox>

asp:RequiredFieldValidator ID="ConfirmPasswordRequired" runat="server"

ControlToValidate="ConfirmPassword"

ErrorMessage="Confirm Password is required."

ToolTip="Confirm Password is required."

ValidationGroup="CreateUserWizard1" Display="None">Password should be confirmed. This helps in eliminating typing errorsasp:RequiredFieldValidator>

cc1:ValidatorCalloutExtender ID="ConfirmPasswordRequired_ValidatorCalloutExtender"

runat="server" Enabled="True" TargetControlID="ConfirmPasswordRequired">

cc1:ValidatorCalloutExtender>

asp:CompareValidator ID="CompareValidator1" runat="server"

ControlToCompare="Password" ControlToValidate="ConfirmPassword" Display="None"

ErrorMessage="Passwords should match">Passwords should match.asp:CompareValidator>

cc1:ValidatorCalloutExtender ID="CompareValidator1_ValidatorCalloutExtender"

runat="server" Enabled="True" TargetControlID="CompareValidator1" >

cc1:ValidatorCalloutExtender>

td>

tr>

td align="right">

asp:Label ID="EmailLabel" runat="server" AssociatedControlID="Email">E-mail:asp:Label>

td>

asp:TextBox ID="Email" runat="server">asp:TextBox>

asp:RequiredFieldValidator ID="EmailRequired" runat="server"

ControlToValidate="Email" ErrorMessage="E-mail is required."

ToolTip="E-mail is required." ValidationGroup="CreateUserWizard1"

Display="None">Email is requiredasp:RequiredFieldValidator>

cc1:ValidatorCalloutExtender ID="EmailRequired_ValidatorCalloutExtender"

runat="server" Enabled="True" TargetControlID="EmailRequired" >

cc1:ValidatorCalloutExtender>

td>

tr>

td align="right">

asp:Label ID="QuestionLabel" runat="server" AssociatedControlID="Question">Security Question:asp:Label>

td>

asp:TextBox ID="Question" runat="server">asp:TextBox>

asp:RequiredFieldValidator ID="QuestionRequired" runat="server"

ControlToValidate="Question" ErrorMessage="Security question is required."

ToolTip="Security question is required."

ValidationGroup="CreateUserWizard1" Display="None">Security Question is required to recover lost passwordasp:RequiredFieldValidator>

cc1:ValidatorCalloutExtender ID="QuestionRequired_ValidatorCalloutExtender"

runat="server" Enabled="True" TargetControlID="QuestionRequired" >

cc1:ValidatorCalloutExtender>

td>

tr>

td align="right">

asp:Label ID="AnswerLabel" runat="server" AssociatedControlID="Answer">Security Answer:asp:Label>

td>

asp:TextBox ID="Answer" runat="server">asp:TextBox>

asp:RequiredFieldValidator ID="AnswerRequired" runat="server"

ControlToValidate="Answer" ErrorMessage="Security answer is required."

ToolTip="Security answer is required." ValidationGroup="CreateUserWizard1"

Display="None">Sequrity Answer Requiredasp:RequiredFieldValidator>

cc1:ValidatorCalloutExtender ID="AnswerRequired_ValidatorCalloutExtender"

runat="server" Enabled="True" TargetControlID="AnswerRequired" >

cc1:ValidatorCalloutExtender>

td>

tr>

td colspan="2">br />div class="headings">Personal Detailsdiv> td>

tr>

td align="right">

asp:Label ID="lblFname" runat="server" AssociatedControlID="txtFname" Text="First Name:">asp:Label>

td>

asp:TextBox ID="txtFname" runat="server">asp:TextBox>

asp:RequiredFieldValidator ID="RequiredFieldValidator2" runat="server"

ControlToValidate="txtFname" Display="None"

ErrorMessage="First Name required." ValidationGroup="CreateUserWizard1">First Name required.asp:RequiredFieldValidator>

cc1:ValidatorCalloutExtender ID="RequiredFieldValidator2_ValidatorCalloutExtender"

runat="server" Enabled="True" TargetControlID="RequiredFieldValidator2">

cc1:ValidatorCalloutExtender>

td>

tr>

td align="right">

asp:Label ID="lblLname" runat="server" AssociatedControlID="txtLname"

Text="Last Name:">asp:Label>

td>

asp:TextBox ID="txtLname" runat="server">asp:TextBox>

asp:RequiredFieldValidator ID="RequiredFieldValidator3" runat="server"

ControlToValidate="txtLname" Display="None"

ErrorMessage="Last Name required" ValidationGroup="CreateUserWizard1">Last Name requiredasp:RequiredFieldValidator>

cc1:ValidatorCalloutExtender ID="RequiredFieldValidator3_ValidatorCalloutExtender"

runat="server" Enabled="True" TargetControlID="RequiredFieldValidator3">

cc1:ValidatorCalloutExtender>

td>

tr>

td align="right">

asp:Label ID="lblAdr1" runat="server" AssociatedControlID="txtAdr1" Text="Address Line 1:">asp:Label>

td>

asp:TextBox ID="txtAdr1" runat="server">asp:TextBox>

asp:RequiredFieldValidator ID="RequiredFieldValidator4" runat="server"

ControlToValidate="txtAdr1" Display="None"

ErrorMessage="Address Required" ValidationGroup="CreateUserWizard1">Address Requiredasp:RequiredFieldValidator>

cc1:ValidatorCalloutExtender ID="RequiredFieldValidator4_ValidatorCalloutExtender"

runat="server" Enabled="True" TargetControlID="RequiredFieldValidator4">

cc1:ValidatorCalloutExtender>

td>

tr>

td align="right">

asp:Label ID="lblArd2" runat="server" AssociatedControlID="txtAdr2" Text="Address Line 2:">asp:Label>

td>

asp:TextBox ID="txtAdr2" runat="server">asp:TextBox>

td>

tr>

td align="right">

asp:Label ID="lblCountry" runat="server" AssociatedControlID="DDCountry"

Text="Country:">asp:Label>

td>

asp:DropDownList ID="ddCountry" runat="server">

asp:DropDownList>

cc1:CascadingDropDown ID="ddCountry_CascadingDropDown" runat="server"

Enabled="True" TargetControlID="ddCountry" Category="countries"

PromptText="Choose a Country"

LoadingText="Please wait ..."

ServicePath="CountryServiceforCascading.asmx"

ServiceMethod="GetCountries">

cc1:CascadingDropDown>

td>

tr>

td align="right">

asp:Label ID="lblState" runat="server" AssociatedControlID="DDState"

Text="State / Province:">asp:Label>

td>

asp:DropDownList ID="ddState" runat="server">

asp:DropDownList>

cc1:CascadingDropDown ID="ddState_CascadingDropDown" runat="server"

Enabled="True" TargetControlID="ddState" ParentControlID="ddCountry"

Category="State"

PromptText="Choose a State...."

LoadingText="Please wait ..."

ServicePath="CountryServiceforCascading.asmx"

ServiceMethod="GetStates">

cc1:CascadingDropDown>

td>

tr>

td align="right">

asp:Label ID="lblCity" runat="server" AssociatedControlID="DDCity"

Text="City:">asp:Label>

td>

asp:DropDownList ID="DDCity" runat="server">

asp:DropDownList>

cc1:CascadingDropDown ID="DDCity_CascadingDropDown" runat="server"

Enabled="True" TargetControlID="DDCity"

ParentControlID="ddState"

Category="City"

PromptText="Choose a City...."

LoadingText="Please wait ..."

ServicePath="CountryServiceforCascading.asmx"

ServiceMethod="GetCities"

cc1:CascadingDropDown>

td>

tr>

td align="right">

asp:Label ID="lblDOB" runat="server" AssociatedControlID="txtDOB"

Text="Date of Birth:">asp:Label>

td>

asp:TextBox ID="txtDOB" runat="server">asp:TextBox>

cc1:CalendarExtender ID="txtDOB_CalendarExtender" runat="server"

Enabled="True" Format="d,MMMM, yyyy" TargetControlID="txtDOB">

cc1:CalendarExtender>

asp:RequiredFieldValidator ID="RequiredFieldValidator5" runat="server"

ControlToValidate="txtDOB" Display="None" ErrorMessage="DOB Required">DOB Requiredasp:RequiredFieldValidator>

cc1:ValidatorCalloutExtender ID="RequiredFieldValidator5_ValidatorCalloutExtender"

runat="server" Enabled="True" TargetControlID="RequiredFieldValidator5">

cc1:ValidatorCalloutExtender>

td>

tr>

td align="right">

asp:Label ID="lblContact" runat="server" AssociatedControlID="txtContact" Text="Contact Number:">asp:Label>

td>

asp:TextBox ID="txtContact" runat="server">asp:TextBox>

td>

tr>

td colspan="2">br />div class="headings">And, at last...div>td>

tr>tr>

td align="right">

td>

td valign="top">

dsweb:AutoInputProtectionControl ID="AutoInputProtectionControl1"

runat="server">

dsweb:AutoInputProtectionControl>

br />

asp:TextBox ID="TextBox1" runat="server">asp:TextBox>

td>

tr>

td align="right"> td>

td> td>

tr>

td align="center" colspan="2">

td>

tr>

td align="center" colspan="2" style="color:Red;">

asp:Literal ID="ErrorMessage" runat="server" EnableViewState="False">asp:Literal>

td>

tr>

table>

ContentTemplate>

CustomNavigationTemplate>

table border="0" cellspacing="5" style="width:100%;height:100%;">

tr align="right">

td align="right" colspan="0">

asp:Button ID="StepNextButton" runat="server" CommandName="MoveNext"

Text="Create User" ValidationGroup="CreateUserWizard1" />

td>

tr>

table>

CustomNavigationTemplate>

asp:CreateUserWizardStep>

asp:CompleteWizardStep ID="CompleteWizardStep1" runat="server">

ContentTemplate>

table border="0">

tr>

td align="center" colspan="2">

Complete

td>

tr>

td>

Your account has been successfully created.

td>

tr>

td align="right" colspan="2">

asp:Button ID="ContinueButton" runat="server" CausesValidation="False"

CommandName="Continue" Text="Continue" ValidationGroup="CreateUserWizard1" />

td>

tr>

table>

ContentTemplate>

asp:CompleteWizardStep>

WizardSteps>

asp:CreateUserWizard>

td>

td class="td_middleright"> td> --bottom left--%>

tr>

td class="td_bottomLeft"> td> --bottom left--%>

td class="td_bottomCenter"> td> --bottom left--%>

td class="td_bottomRight"> td> --bottom left--%>

tr>

table>

asp:Content>

Vishnu V.

2008/11/17 davedev <notifications@codeplex.com>

From: davedev

Hi,

I see that you've registered the AIP.ashx handler, whch is the minimum configuration requirement.

Would you mind posting an example of an .aspx page with the AIP server control on it so that I can reproduce the issue?

Or at least can you please provide more detail as to what you mean by, "the captcha image was not there"? Was there an image placeholder that specified an error message?

Also, what version of the library are you using? (1.0 or 2.0 Beta)

- Dave

Read the full discussion online.

To add a post to this discussion, reply to this email (aip@discussions.codeplex.com)

To start a new discussion for this project, email aip@discussions.codeplex.com

You are receiving this email because you subscribed to this discussion on CodePlex. You can unsubscribe on codePlex.com.

Please note: Images and attachments will be removed from emails. Any posts to this discussion will also be available online at codeplex.com

New Post: Captcha Image not found

davedev — Mon, 17 Nov 2008 16:01:41 GMT

Hi,

I see that you've registered the AIP.ashx handler, whch is the minimum configuration requirement.

Would you mind posting an example of an .aspx page with the AIP server control on it so that I can reproduce the issue?

Or at least can you please provide more detail as to what you mean by, "the captcha image was not there"? Was there an image placeholder that specified an error message?

Also, what version of the library are you using? (1.0 or 2.0 Beta)

- Dave

New Post: Captcha Image not found

vishnuvvn — Mon, 17 Nov 2008 15:32:25 GMT

Hi,

I have installed and configured the web.config when I tried to run the program the captcha image was not there..

Is there any solutions?? I am newbie.. So, it'll be helpfull if you give me more details..

Web.config file..

xml version="1.0" encoding="UTF-8"?>

<!--

Note: As an alternative to hand editing this file you can use the

web admin tool to configure settings for your application. Use

the Website->Asp.Net Configuration option in Visual Studio.

A full list of settings and comments can be found in

machine.config.comments usually located in

\Windows\Microsoft.Net\Framework\v2.x\Config

-->

configuration>

configSections>

section name="secureWebPages" type="Ventaur.Web.Security.Configuration.SecureWebPageSettings, WebPageSecurity" />

sectionGroup name="system.web.extensions" type="System.Web.Configuration.SystemWebExtensionsSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">

sectionGroup name="scripting" type="System.Web.Configuration.ScriptingSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">

section name="scriptResourceHandler" type="System.Web.Configuration.ScriptingScriptResourceHandlerSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />

sectionGroup name="webServices" type="System.Web.Configuration.ScriptingWebServicesSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">

section name="jsonSerialization" type="System.Web.Configuration.ScriptingJsonSerializationSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="Everywhere" />

section name="profileService" type="System.Web.Configuration.ScriptingProfileServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />

section name="authenticationService" type="System.Web.Configuration.ScriptingAuthenticationServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />

section name="roleService" type="System.Web.Configuration.ScriptingRoleServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" allowDefinition="MachineToApplication" />

sectionGroup>

configSections>

appSettings />

<!--

Http and Https Switching!!

-->

secureWebPages mode="On" ignoreHandlers="WithStandardExtensions" warningBypassMode="AlwaysBypass">

files>

add path="Account/Login.aspx" />

add path="Default.aspx" secure="Insecure" />

<!--

<!--

<!--

files>

directories>

add path="/" recurse="True" secure="Insecure" />

add path="Account" recurse="True" />

add path="Register" recurse="True" />

<!--

directories>

secureWebPages>

connectionStrings>

remove name="LocalSqlServer" />

system.web>

membership>

providers>

clear />

add name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" connectionStringName="LocalSqlServer" enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="true" requiresUniqueEmail="false" passwordFormat="Hashed" maxInvalidPasswordAttempts="5" minRequiredPasswordLength="7" minRequiredNonalphanumericCharacters="1" passwordAttemptWindow="10" passwordStrengthRegularExpression="" applicationName="/Project" />

providers>

membership>

<!--

Set compilation debug="true" to insert debugging

symbols into the compiled page. Because this

affects performance, set this value to true only

during development.

-->

compilation debug="true" defaultLanguage="c#">

assemblies>

add assembly="System.Core, Version=3.5.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />

add assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />

add assembly="System.Data.DataSetExtensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />

add assembly="System.Xml.Linq, Version=3.5.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />

add assembly="System.Design, Version=2.0.0.0, Culture=neutral, PublicKeyToken=B03F5F7F11D50A3A" />

add assembly="System.Web.Extensions.Design, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />

add assembly="System.Windows.Forms, Version=2.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />

assemblies>

compilation>

<!--

The <authentication> section enables configuration

of the security authentication mode used by

ASP.NET to identify an incoming user.

-->

authentication mode="Forms" />

<!--

The <customErrors> section enables configuration

of what to do if/when an unhandled error occurs

during the execution of a request. Specifically,

it enables developers to configure html error pages

to be displayed in place of a error stack trace.

</customErrors>

-->

pages>

controls>

add tagPrefix="asp" namespace="System.Web.UI" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />

add tagPrefix="asp" namespace="System.Web.UI.WebControls" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />

controls>

pages>

httpHandlers>

remove verb="*" path="*.asmx" />

add verb="*" path="*.asmx" validate="false" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />

add verb="*" path="*_AppService.axd" validate="false" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />

add verb="GET,HEAD" path="ScriptResource.axd" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" validate="false" />

add verb="GET" path="AIP.ashx" type="DaveSexton.Web.Controls.AutoInputProtectionRequestHandler, DaveSexton.AutoInputProtection" />

httpHandlers>

httpModules>

add name="ScriptModule" type="System.Web.Handlers.ScriptModule, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />

httpModules>

identity impersonate="true" />

system.web>

system.codedom>

compilers>

compiler language="c#;cs;csharp" extension=".cs" warningLevel="4" type="Microsoft.CSharp.CSharpCodeProvider, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089">

providerOption name="CompilerVersion" value="v3.5" />

providerOption name="WarnAsError" value="false" />

compiler>

compiler language="vb;vbs;visualbasic;vbscript" extension=".vb" warningLevel="4" type="Microsoft.VisualBasic.VBCodeProvider, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089">

providerOption name="CompilerVersion" value="v3.5" />

providerOption name="OptionInfer" value="true" />

providerOption name="WarnAsError" value="false" />

compiler>

compilers>

system.codedom>

<!--

The system.webServer section is required for running ASP.NET AJAX under Internet

Information Services 7.0. It is not necessary for previous version of IIS.

-->

system.webServer>

validation validateIntegratedModeConfiguration="false" />

modules>

remove name="ScriptModule" />

add name="ScriptModule" preCondition="managedHandler" type="System.Web.Handlers.ScriptModule, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />

add name="WebPageSecurity" type="Ventaur.Web.Security.SecureWebPageModule, WebPageSecurity" preCondition="managedHandler" />

modules>

handlers>

remove name="WebServiceHandlerFactory-Integrated" />

remove name="ScriptHandlerFactory" />

remove name="ScriptHandlerFactoryAppServices" />

remove name="ScriptResource" />

add name="ScriptHandlerFactory" verb="*" path="*.asmx" preCondition="integratedMode" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />

add name="ScriptHandlerFactoryAppServices" verb="*" path="*_AppService.axd" preCondition="integratedMode" type="System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />

add name="ScriptResource" preCondition="integratedMode" verb="GET,HEAD" path="ScriptResource.axd" type="System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />

handlers>

system.webServer>

runtime>

assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">

dependentAssembly>

assemblyIdentity name="System.Web.Extensions" publicKeyToken="31bf3856ad364e35" />

bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0" />

dependentAssembly>

assemblyIdentity name="System.Web.Extensions.Design" publicKeyToken="31bf3856ad364e35" />

bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0" />

dependentAssembly>

publisherPolicy apply="yes" />

probing privatePath="" />

dependentAssembly>

assemblyIdentity name="System.Web" publicKeyToken="b03f5f7f11d50a3a" />

publisherPolicy apply="yes" />

bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="3.5.0.0" />

dependentAssembly>

assemblyBinding>

gcConcurrent enabled="false" />

runtime>

system.net>

mailSettings>

</mailSettings>

system.net>

configuration>

New Post: IIS 6 + AJAX + Create User Fail on first

davedev — Fri, 15 Aug 2008 20:18:47 GMT

Hi,

The configuration appears to be fine. Are you also using the AutoInputProtectionSessionRequestHandler in the httpHandler registration?

- Dave