Solved

does XMLHTTP work over HTTPS

Posted on 2006-06-21
8
3,052 Views
Last Modified: 2012-06-27
I recently discovered (well..for myself!) the XMLHTTP object and fell in love
I thought I had finally found a way to leverage my server side scripting without having to postback pages
and I could use client side vbscript (we require our users to use IE6)
I could just send the requests off and have them write back without leaving the page
It was all working so well - I completed an entire module, then uploaded it to my SSL secured website
but then
IT DIDNT WORK (That's love for ya)

Well...thats not precisely correct - The functions that only "read" data worked fine, but the functions that called asp pages that did add/change/delete functions would just not return anything - no errors - no other signs of problems - the pages just didnt process

For instance
 - I created a function to get the description of an item from the database, which i would then write to a textbox
-----That worked on development server and SSL server - no problem!
 - I created a function to delete an item from the database
-----That worked on development server - but NOT THE SSL server - Problem!

I did read in some documentation that it doesnt work over SSL (wish I would have read it first), but I wonder why it worked for the "read" functions, but none of the "add/change/delete" functions would work

Here is an example of a "add" function that WOULD work o nthe development server, but WOULD NOT work on SSL server

<SCRIPT LANGUAGE=vbscript>

function AddTrkOpt()
 
  Dim objXMLHTTP, xml,resvar
  ' Create an xmlhttp object:
 Set xml = CreateObject("Microsoft.XMLHTTP")

  ' Opens the connection to the remote server.
       urlStr = "AutoStepAddTrkOpt.asp?HdrRef="+cstr(document.thisForm.AddBLTrkOpts.value)
       xml.Open "get", urlStr, False
      
  ' Actually Sends the request and returns the data:
  xml.Send

    'when page processes correctly, it will return a value of "done"
    if xml.responseText = "done" then
          'call function to create listbox of all items
                call GetAllBox
          'call function to create listbox of selected items
               call getselbox
          'clear all item description textbox        
               document.thisForm.TrkOptDesc.value=""
          'clear selected item description textbox        
      document.thisForm.TrkOptDescSel.value=""
     end if

  Set xml = Nothing
 
end function

</script>

Now - that script worked on development server (Non-SSL), but on the SSL server, it would return with "done", but the actual database "insert" never took place

SO - HAS ANYBODY HAD ANY EXPERIENCE WITH GETTING THE ADD/CHANGE/DELETE METHODS TO WORK ON SLL USING THE XMLHTTP OBJECT?
0
Comment
Question by:bigbillydotcom
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 75

Expert Comment

by:Anthony Perkins
ID: 16957081
You may want to consider using the ServerHTTPRequest object.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16959557
thanks ac - but that would require page roundtrips -right, since it is a server object
what i am trying to emulate is the AJAX style interface where
the client page doesnt refresh - they just interact wit hthe page and it runs off and does its thing
behind the scenes
It works brilliantly under http, but the add/change/delete routines dont process when the url is secured with https
0
 
LVL 75

Expert Comment

by:Anthony Perkins
ID: 16959674
I suggest you read up on the differences between ServerHTTPRequest and the XMLHTTP objects.
0
Creating Instructional Tutorials  

For Any Use & On Any Platform

Contextual Guidance at the moment of need helps your employees/users adopt software o& achieve even the most complex tasks instantly. Boost knowledge retention, software adoption & employee engagement with easy solution.

 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16959759
thanks ac
I have
am i missing something?
I thought ServerHTTPRequest is a server side object - right?
that would mean a page refresh on any call using ServerHTTPRequest - right?

I need to make calls to and from client side vb
Like i said  - works perfect under HTTP but not HTTPS
0
 
LVL 75

Expert Comment

by:Anthony Perkins
ID: 16965213
Again I would suggest you re-read the differences between the two objects they are fundementally different and have nothing to do with whether you do a page refresh or not.

I am not going to get into another byzantine debate with you, so I will leave it at that.

I wish you the best of luck.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16965445
>>I am not going to get into another byzantine debate with you, so I will leave it at that.
thanks - i prefer answers to questions vs your method of debating and never getting anywhere
again - the questions was
SO - HAS ANYBODY HAD ANY EXPERIENCE WITH GETTING THE ADD/CHANGE/DELETE METHODS TO WORK ON SLL USING THE XMLHTTP OBJECT?

if you havent please refrain from posting
thanks
bbdc

0
 
LVL 75

Accepted Solution

by:
Anthony Perkins earned 500 total points
ID: 16965517
No problem.  But to answer, your question:  Yes we do it all the time with ServerHTTPRequest.

Again, good luck.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16968597
now thats an answer and i am motivated
could i bother you for some code??
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I would like to start this tip/trick by saying Thank You, to all who said that this could not be done, as it forced me to make sure that it could be accomplished. :) To start, I want to make sure everyone understands the importance of utilizing p…
Have you ever needed to get an ASP script to wait for a while? I have, just to let something else happen. Or in my case, to allow other stuff to happen while I was murdering my MySQL database with an update. The Original Issue This was written…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question