quote:

---

I know it's a cookie path issue.

But I can't figure out the solution because I am not familiar with Snitz forum.

I am asking help from another user right now.

http://cutesoft.net/forums/thread/26790.aspxhttp://cutesoft.net/forums/thread/26790.aspx[url]

---

quote:

---

Problem solved.

Indeed it is the name of the cookie. The application has to be a root application (why is that not mentioned in the documentation).

---

quote:

---

<?xml version="1.0" encoding="utf-8" ?>
<configuration>
<appSettings>
<add key="SnitzUniqueID" value="Snitz00" />
<add key="SnitzPrefix" value="FORUM_" />
<add key="ConnectionString" value="xxxxx;database=xxxxx;uid=xxxxx;pwd=xxxxxx" />
<add key="CuteChat.DataDirectory" value="/CuteChat" />
</appSettings>
<system.web>
<compilation defaultLanguage="c#" debug="false" />
<customErrors mode="Off" />
<authentication mode="None" />
<trace enabled="false" requestLimit="100" pageOutput="false" localOnly="true" />
<sessionState mode="Off" />
<globalization requestEncoding="utf-8" responseEncoding="utf-8" />
</system.web>
</configuration>

---

quote:

---

<%@ Application ClassName="Global" %>
<%@ Implements Interface="CuteSoft.Chat.IHttpApplicationConnectionStringProvider" %>
<%@ Implements Interface="CuteSoft.Chat.IHttpApplicationUserAdapter" %>
<%@ Implements Interface="CuteSoft.Chat.IHttpApplicationDataProvider" %>
<%@ Implements Interface="CuteSoft.Chat.IHttpApplicationSupportLogin" %>
<%@ Import Namespace="System.Data" %>
<%@ Import Namespace="System.Data.SqlClient" %>
<%@ Import Namespace="System.Security.Cryptography"%>
<%@ Import Namespace="CuteSoft.Chat" %>

<script runat=server>


static string _connstr;
public string ConnectionString
{
get
{
if(_connstr==null)
{
string connstr = System.Configuration.ConfigurationSettings.AppSettings["ConnectionString"];
if(connstr==null||connstr=="")
{
throw(new Exception("Missing web.config appSettings : ConnectionString"));
}
_connstr=connstr;
}
return _connstr;
}
}
public SqlConnection CreateConnection()
{
return new SqlConnection(ConnectionString);
}
private void FillParameters(SqlCommand cmd,object[] parameters)
{
if(parameters==null)return;
for(int i=0;i<parameters.Length;i++)
{
SqlParameter param;
object pvalue=parameters[i];
if(pvalue==null||Convert.IsDBNull(pvalue))
{
param=new SqlParameter("@p"+i,SqlDbType.NVarChar,50);
param.Value=DBNull.Value;
}
else if(pvalue is string)
{
param=new SqlParameter("@p"+i,SqlDbType.NVarChar,pvalue.ToString().Length+100);
param.Value=pvalue;
}
else if(pvalue is SqlParameter)
{
param=(SqlParameter)pvalue;
}
else
{
param=new SqlParameter("@p"+i,(object)pvalue);
}
cmd.Parameters.Add(param);
}
}
public SqlCommand CreateCommand(string cmdtext,params object[] parameters)
{
SqlCommand cmd = new SqlCommand(cmdtext,CreateConnection());
FillParameters(cmd,parameters);
return cmd;
}
public SqlDataAdapter CreateAdapter(string cmdtext,params object[] parameters)
{
SqlCommand cmd = new SqlCommand(cmdtext,CreateConnection());
FillParameters(cmd,parameters);
return new SqlDataAdapter(cmd);
}
public SqlDataReader ExecuteReader(string cmdtext,params object[] parameters)
{
SqlCommand cmd = new SqlCommand(cmdtext,CreateConnection());
FillParameters(cmd,parameters);
cmd.Connection.Open();
return cmd.ExecuteReader(CommandBehavior.CloseConnection);
}
public object ExecuteScaler(string cmdtext,params object[] parameters)
{
SqlCommand cmd = new SqlCommand(cmdtext,CreateConnection());
FillParameters(cmd,parameters);
cmd.Connection.Open();
using(SqlDataReader sdr=cmd.ExecuteReader(CommandBehavior.CloseConnection))
{
if(!sdr.Read())
return null;

if(sdr.IsDBNull(0))
return DBNull.Value;

return sdr.GetValue(0);
}
}

static string _prefix;
public string SnitzPrefix
{
get
{
if(_prefix==null)
{
string pre = System.Configuration.ConfigurationSettings.AppSettings["SnitzPrefix"];
if(pre==null||pre=="")
{
throw(new Exception("Missing web.config appSettings : SnitzPrefix"));
}
_prefix=pre;
}
return _prefix;
}
}

static string _snitzid;
public string SnitzID
{
get
{
if(_snitzid==null)
{
string id = System.Configuration.ConfigurationSettings.AppSettings["SnitzUniqueID"];
if(id==null||id=="")
{
throw(new Exception("Missing web.config appSettings : SnitzUniqueID"));
}
_snitzid=id;
}
return _snitzid;
}
}

public string SHA256(string str)
{
byte[] data=ConvertToWordArray(str);
byte[] hash;

SHA256Managed sha=new SHA256Managed();
try
{
hash=sha.ComputeHash(data);
}
finally
{
sha.Clear();
}
return BitConverter.ToString(hash).Replace("-","");
}

//Snitz/inc_sha256
private byte[] ConvertToWordArray(string str)
{
//OK,,Only support ascii code , for the password only..
return System.Text.Encoding.ASCII.GetBytes(str);
}

public bool CheckUser(string username,string pwdencry)
{
if(username==null||username=="")return false;
if(pwdencry==null||pwdencry=="")return false;

using(SqlDataReader sdr=ExecuteReader("SELECT M_PASSWORD FROM "+SnitzPrefix+"MEMBERS WHERE M_NAME=@p0 AND M_STATUS=1"
,username))
{
if(!sdr.Read())
return false;

string pwd=sdr.GetString(0);

if(pwd==null||pwd=="")
return false;

return pwd.ToUpper()==pwdencry.ToUpper();
}
}

//Public Property/Method for...

#region CuteSoft.Chat.IHttpApplication..

public string GetConnectionString(CuteSoft.Chat.UserIdentity user)
{
return ConnectionString;
}

public string GetUserUniqueName()
{
HttpCookie cookie = Request.Cookies[SnitzID+"User"];
if(cookie==null)
return null;

string username=cookie["Name"];
string pwdencry=cookie["Pword"];

if(CheckUser(username,pwdencry))
return username;

return null;
}

public CuteSoft.Chat.UserIdentity GetUserIdentity()
{
string uniquename=GetUserUniqueName();
if(uniquename==null)
return CuteSoft.Chat.UserIdentity.CreateNull();

return new CuteSoft.Chat.UserIdentity(uniquename,null,Request.UserHostAddress);
}


public bool IsLobbyAdmin(string useruniquename, CuteSoft.Chat.CuteChatLobby lobby)
{
return false;
}

public string[] SearchUserUniqueNameByDisplayName(string userDisplaName)
{
if(userDisplaName==null||userDisplaName=="")
return new string[0];

ArrayList list=new ArrayList();
using(SqlDataReader sdr=ExecuteReader("SELECT M_NAME FROM "+SnitzPrefix+"MEMBERS WHERE M_NAME LIKE '%'+@p0+'%'"
,userDisplaName))
{
while(sdr.Read())
list.Add(sdr.GetString(0));
}
return (string[])list.ToArray(typeof(string));
}

public string GetUserDisplayName(string useruniquename)
{
return useruniquename;
}

public bool IsAdministrator(string useruniquename)
{
//M_LEVEL>3
object level=ExecuteScaler("SELECT M_LEVEL FROM "+SnitzPrefix+"MEMBERS WHERE M_NAME=@p0"
,useruniquename);
if(level==null)
return false;

return Convert.ToInt32(level)>=3;
}

public string[] ListUserUniqueName()
{
ArrayList list=new ArrayList();
using(SqlDataReader sdr=ExecuteReader("SELECT M_NAME FROM "+SnitzPrefix+"MEMBERS"))
{
while(sdr.Read())
list.Add(sdr.GetString(0));
}
return (string[])list.ToArray(typeof(string));
}


public void SupportInit()
{
}

public bool SupportLogin(string username, string password)
{
if(username==null||username=="")return false;
if(password==null||password=="")return false;

password=SHA256(password);

if( ! CheckUser(username,password) )
return false;

if( CuteSoft.Chat.ChatApi.FindOperator(username) == null )
return false;

HttpCookie cookie=Response.Cookies[SnitzID+"User"];
cookie["Name"]=username;
cookie["Pword"]=password;//encrypted..

return true;
}

#endregion

</script>

---

quote:

---

I know it's a cookie path issue.

But I can't figure out the solution because I am not familiar with Snitz forum.

---

quote:

---

It does say to do that in their read me, however according to their support, it can be outside the forum folder.

---