quote:

---

I have updated the inc_top_short.asp file, if you have already downloaded it, please re-download it:

For v3.3.xx: http://forum.snitz.com/download/inc_top_short_v33xx.zip

For v3.1SR4: http://forum.snitz.com/download/inc_top_short_v31SR4.zip

---

The only update in that file for 3.3.xx is the bottom part, right? I can't just upload that file because I have CSS-ed the original file.




http://www.frutzle.com

Snitz Exchange | Do's and Dont's

set my_Conn= Server.CreateObject("ADODB.Connection")
my_Conn.Open strConnString

strDBNTUserName = Request.Cookies(strUniqueID & "User")("Name")

if strAuthType = "db" then
	if (Request.Cookies(strUniqueID & "User")("Name") <> "" and Request.Cookies(strUniqueID & "User")("PWord") <> "") then
		'## Forum_SQL
		strSql = "SELECT MEMBER_ID, M_NAME, M_PASSWORD "
		strSql = strSql & " FROM " & strMemberTablePrefix & "MEMBERS "
		strSql = strSql & " WHERE " & strDBNTSQLName & " = '" & ChkStrings(Request.Cookies(strUniqueID & "User")("Name"),"SQLString") & "'"
		strSql = strSql & " AND M_PASSWORD = '" & ChkStrings(Request.Cookies(strUniqueID & "User")("Pword"),"SQLString") & "'"
		Set rsCheck = my_Conn.Execute(strSql)
		if rsCheck.BOF or rsCheck.EOF then
			Call ClearCookiess()
			strDBNTUserName = ""
		else
			strDBNTUserName = rsCheck("M_NAME")
		end if
		rsCheck.close
		set rsCheck = nothing
	else
		strDBNTUserName = ""
	end if
end if

quote:

---

Richard,

Thanks for the quick bugfix. However, I noticed that in the updated version of inc_top_short you have added a sub ClearCookiess() (line 148). But ClearCookiess() isn't called anywhere in the file. I suppose that line 53 should be
Call ClearCookiess()?

Barbara
Edited by - _barbara on 18 May 2002 15:49:56

---

quote:

---

This code would seem to be executed every time a page is displayed. If so, is there a penalty in accessing the DB so much. Could this slow down a site. If so, should it first check the variable strDBNTUserName to see if it's null. This would then only require DB authentication once in a session. Is this secure, or is there a way of modifying variables in session.

What if you call the forum from another frame, is this the same session or not.

I'm certainly far from being expert at ASP and web stuff in general. Please let me know if I'm talking crap, but explain where I'm wrong so that I learn.

---

• In function getMemberNumber(fUser_Name)
  Find this:
  strSql = strSql & " WHERE " & strDBNTSQLName & " = '" & fUser_Name & "'"
  
  
  and replace it with this:
  strSql = strSql & " WHERE " & strDBNTSQLName & " = '" & ChkString(fUser_Name, "SQLString") & "'"
  



• In function getMemberName(fUser_Number)
  Find this:
  strSql = strSql & " WHERE MEMBER_ID = " & ChkString(fUser_Number, "SQLString")
  
  and replace it with this:
  strSql = strSql & " WHERE MEMBER_ID = " & Clng(fUser_Number)