Solved

does XMLHTTP work over HTTPS

Posted on 2006-06-21
8
3,037 Views
Last Modified: 2012-06-27
I recently discovered (well..for myself!) the XMLHTTP object and fell in love
I thought I had finally found a way to leverage my server side scripting without having to postback pages
and I could use client side vbscript (we require our users to use IE6)
I could just send the requests off and have them write back without leaving the page
It was all working so well - I completed an entire module, then uploaded it to my SSL secured website
but then
IT DIDNT WORK (That's love for ya)

Well...thats not precisely correct - The functions that only "read" data worked fine, but the functions that called asp pages that did add/change/delete functions would just not return anything - no errors - no other signs of problems - the pages just didnt process

For instance
 - I created a function to get the description of an item from the database, which i would then write to a textbox
-----That worked on development server and SSL server - no problem!
 - I created a function to delete an item from the database
-----That worked on development server - but NOT THE SSL server - Problem!

I did read in some documentation that it doesnt work over SSL (wish I would have read it first), but I wonder why it worked for the "read" functions, but none of the "add/change/delete" functions would work

Here is an example of a "add" function that WOULD work o nthe development server, but WOULD NOT work on SSL server

<SCRIPT LANGUAGE=vbscript>

function AddTrkOpt()
 
  Dim objXMLHTTP, xml,resvar
  ' Create an xmlhttp object:
 Set xml = CreateObject("Microsoft.XMLHTTP")

  ' Opens the connection to the remote server.
       urlStr = "AutoStepAddTrkOpt.asp?HdrRef="+cstr(document.thisForm.AddBLTrkOpts.value)
       xml.Open "get", urlStr, False
      
  ' Actually Sends the request and returns the data:
  xml.Send

    'when page processes correctly, it will return a value of "done"
    if xml.responseText = "done" then
          'call function to create listbox of all items
                call GetAllBox
          'call function to create listbox of selected items
               call getselbox
          'clear all item description textbox        
               document.thisForm.TrkOptDesc.value=""
          'clear selected item description textbox        
      document.thisForm.TrkOptDescSel.value=""
     end if

  Set xml = Nothing
 
end function

</script>

Now - that script worked on development server (Non-SSL), but on the SSL server, it would return with "done", but the actual database "insert" never took place

SO - HAS ANYBODY HAD ANY EXPERIENCE WITH GETTING THE ADD/CHANGE/DELETE METHODS TO WORK ON SLL USING THE XMLHTTP OBJECT?
0
Comment
Question by:bigbillydotcom
  • 4
  • 4
8 Comments
 
LVL 75

Expert Comment

by:Anthony Perkins
ID: 16957081
You may want to consider using the ServerHTTPRequest object.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16959557
thanks ac - but that would require page roundtrips -right, since it is a server object
what i am trying to emulate is the AJAX style interface where
the client page doesnt refresh - they just interact wit hthe page and it runs off and does its thing
behind the scenes
It works brilliantly under http, but the add/change/delete routines dont process when the url is secured with https
0
 
LVL 75

Expert Comment

by:Anthony Perkins
ID: 16959674
I suggest you read up on the differences between ServerHTTPRequest and the XMLHTTP objects.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16959759
thanks ac
I have
am i missing something?
I thought ServerHTTPRequest is a server side object - right?
that would mean a page refresh on any call using ServerHTTPRequest - right?

I need to make calls to and from client side vb
Like i said  - works perfect under HTTP but not HTTPS
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 
LVL 75

Expert Comment

by:Anthony Perkins
ID: 16965213
Again I would suggest you re-read the differences between the two objects they are fundementally different and have nothing to do with whether you do a page refresh or not.

I am not going to get into another byzantine debate with you, so I will leave it at that.

I wish you the best of luck.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16965445
>>I am not going to get into another byzantine debate with you, so I will leave it at that.
thanks - i prefer answers to questions vs your method of debating and never getting anywhere
again - the questions was
SO - HAS ANYBODY HAD ANY EXPERIENCE WITH GETTING THE ADD/CHANGE/DELETE METHODS TO WORK ON SLL USING THE XMLHTTP OBJECT?

if you havent please refrain from posting
thanks
bbdc

0
 
LVL 75

Accepted Solution

by:
Anthony Perkins earned 500 total points
ID: 16965517
No problem.  But to answer, your question:  Yes we do it all the time with ServerHTTPRequest.

Again, good luck.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16968597
now thats an answer and i am motivated
could i bother you for some code??
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Hello, all! I just recently started using Microsoft's IIS 7.5 within Windows 7, as I just downloaded and installed the 90 day trial of Windows 7. (Got to love Microsoft for allowing 90 days) The main reason for downloading and testing Windows 7 is t…
Have you ever needed to get an ASP script to wait for a while? I have, just to let something else happen. Or in my case, to allow other stuff to happen while I was murdering my MySQL database with an update. The Original Issue This was written…
This Micro Tutorial demonstrates using Microsoft Excel pivot tables, how to reverse engineer competitors' marketing strategies through backlinks.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now