Solved

What's the big difference between local html and downloaded html

Posted on 2002-03-19
8
176 Views
Last Modified: 2010-04-09
I have an html file that works perfectly when I open it locally, but when downloaded from the web it doesn't work.

Here's the url to the file:
http://www.fcuitgeest.nl/EE_Test.html

Here's the text:
<HTML>
<HEAD>
<TITLE>Cross-Window Write</TITLE>
<SCRIPT>
newwindow=window.open();
newdocument=newwindow.document;
newdocument.write("<html><head>");
newdocument.write('<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">');
newdocument.write('<title>ANWB Routeplanner</title>');
newdocument.write('<BASE HREF="http://anwb.tensingsks.com/anwb/" >');
newdocument.write('</HEAD>');
newdocument.write('<BODY bgProperties=fixed BACKGROUND="Image3.jpg" onload="window.moveTo(0,0); if (document.all) { top.window.resizeTo(screen.availWidth,screen.availHeight)};document.frm.action.value = 1;document.frm.submit();">');
newdocument.write('<form name="frm" action="/anwb/scripts/tgigw.dll" method="post">');
newdocument.write('<input type="hidden" name="countryid0" value="0">');
newdocument.write('<input type="hidden" name="RMODE" value="FAST">');
newdocument.write('<input type="hidden" name="countryid1" value="0">');
newdocument.write('<input type="hidden" name="pcid0" value="58826">');
newdocument.write('<input type="hidden" name="TEMPLNAME" value="zoek_route_tussen.htt">');
newdocument.write('<input type="hidden" name="REDIRURL" value="http://anwb.tensingsks.com/anwb/scripts/tgigw.dll?APP=ANWBMS&CMD=ROUTE&OUTPUT=HTML&">');
newdocument.write('<input type="hidden" name="app" value="anwbresolve">');
newdocument.write('<input type="hidden" name="cmd" value="resolve1">');
newdocument.write('<input type="hidden" name="pc0" value="1911TR" >');
newdocument.write('<input type="hidden" name="pc1" value="1624AA" >');
newdocument.write('</form>');
newdocument.write('</body>');
newdocument.write('</html>');
newwindow.history.go(0);
// start polling for load finish
//setTimeOut("newwindow.stop()",2500);
</SCRIPT>
</HEAD>
</HTML>
0
Comment
Question by:WiseGuy
  • 3
  • 3
  • 2
8 Comments
 
LVL 22

Expert Comment

by:CJ_S
Comment Utility
The difference is security. Locally you can do everything: creating and using components, adjust local items etc. Online you cannot.

When I open your online page it redirects to a virtual directory "http://anwb.tensingsks.com/anwb/scripts/", this directory does not allow contents to be listed.

You submit the form and go to a dll (ISAPI I assume). For this to work the internet user will need sufficient rights to access this dll. If you work locally you are running under the logged in account (administrator or someone else), but not with the IUSR_MACHINENAME user.

Go to IIS and check the following:
1) the scripts directory allows "Scripts and executables"
2) The IUSR_MACHINENAME may access the site
3) integrated windows authentication is turned off.

CJ
0
 
LVL 1

Author Comment

by:WiseGuy
Comment Utility
Hi CJ,

The site I redirect to (anwb.tensingsks.com) is not mine. I am trying to (mis/re)use this site to supply routeplan information on predefined routes. I'm supplying start and end points.

This site allows my local files to have a piggyback ride, but when the file originates from the internet, it doesn't. If security is the difference, then it has to be about the origin of the html file. Is there a way to impersonate a local file?

WiseGuy
0
 
LVL 22

Expert Comment

by:CJ_S
Comment Utility
That must be it. They must do a check there somehow.

Why not use the direct location and change the postcodes into the correct postcode? (zipcode), and then open it directly.

Something like

zip1 = "1911TR";
zip2 = "1624AA";

window.open("http://anwb.tensingsks.com/anwb/scripts/tgigw.dll?APP=ANWBMS&CMD=ROUTE&OUTPUT=HTML&RMODE=FAST&resseltype0=1&rescountryid0=0&respc0=1911TR&respcid0=58826&resdescr0=postcode+"+zip1+"&resx0=1479918&resy0=1979606&resseltype1=1&rescountryid1=0&respc1=1624AA&respcid1=45078&resdescr1=postcode+"+zip2+"&resx1=1503859&resy1=1993065");

All on one line.

CJ


CJ
0
 
LVL 12

Expert Comment

by:lexxwern
Comment Utility
wait. one more ting. in the code posted
WHERE IS THE <BODY>.
All html have got to have a <BODY>.

your script is javascript so here's a correction for your code

<HTML>
<HEAD>
<TITLE>Cross-Window Write</TITLE>
<SCRIPT language="javascript">
function loaded(){
newwindow=window.open();
newdocument=newwindow.document;
newdocument.write("<html><head>");
newdocument.write('<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">');
newdocument.write('<title>ANWB Routeplanner</title>');
newdocument.write('<BASE HREF="http://anwb.tensingsks.com/anwb/" >');
newdocument.write('</HEAD>');
newdocument.write('<BODY bgProperties=fixed BACKGROUND="Image3.jpg" onload="window.moveTo(0,0); if (document.all)
{ top.window.resizeTo(screen.availWidth,screen.availHeight)};document.frm.action.value = 1;document.frm.submit();">');
newdocument.write('<form name="frm" action="/anwb/scripts/tgigw.dll" method="post">');
newdocument.write('<input type="hidden" name="countryid0" value="0">');
newdocument.write('<input type="hidden" name="RMODE" value="FAST">');
newdocument.write('<input type="hidden" name="countryid1" value="0">');
newdocument.write('<input type="hidden" name="pcid0" value="58826">');
newdocument.write('<input type="hidden" name="TEMPLNAME" value="zoek_route_tussen.htt">');
newdocument.write('<input type="hidden" name="REDIRURL" value="http://anwb.tensingsks.com/anwb/scripts/tgigw.dll?APP=ANWBMS&CMD=ROUTE&OUTPUT=HTML&">');
newdocument.write('<input type="hidden" name="app" value="anwbresolve">');
newdocument.write('<input type="hidden" name="cmd" value="resolve1">');
newdocument.write('<input type="hidden" name="pc0" value="1911TR" >');
newdocument.write('<input type="hidden" name="pc1" value="1624AA" >');
newdocument.write('</form>');
newdocument.write('</body>');
newdocument.write('</html>');
newwindow.history.go(0);
// start polling for load finish
//setTimeOut("newwindow.stop()",2500);
}
</SCRIPT>
</HEAD>
<body onload="loaded()">
</body>
</HTML>

does this work?


lhn.
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 12

Expert Comment

by:lexxwern
Comment Utility
what i have done is put your script in a function.
and then i asked the browser to load the function. so it'll work as well as your original script.


lhn.
0
 
LVL 1

Author Comment

by:WiseGuy
Comment Utility
Hi CJ,

Well you comment with the direct window.open(...) worked, so could you post an answer please.

Thanx for the support

WiseGuy
0
 
LVL 22

Accepted Solution

by:
CJ_S earned 200 total points
Comment Utility
Glad to help!

CJ
0
 
LVL 1

Author Comment

by:WiseGuy
Comment Utility
Good work!

Both an answer to the question and a solution for the underlying problem.

CU, WiseGuy
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

This article describes how to create custom column layout styles for Bootstrap. The article uses 5 columns to illustrate the concept, but the principle can be extended to any number of columns.
This article discusses four methods for overlaying images in a container on a web page
In this tutorial viewers will learn how add a full-size background image to a webpage using CSS3. Create a new HTML document with an internal stylesheet.: In CSS, define the html element to have a background image. Use a high resolution image.: In t…
HTML5 has deprecated a few of the older ways of showing media as well as offering up a new way to create games and animations. Audio, video, and canvas are just a few of the adjustments made between XHTML and HTML5. As we learned in our last micr…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now