Solved

does XMLHTTP work over HTTPS

Posted on 2006-06-21
8
3,049 Views
Last Modified: 2012-06-27
I recently discovered (well..for myself!) the XMLHTTP object and fell in love
I thought I had finally found a way to leverage my server side scripting without having to postback pages
and I could use client side vbscript (we require our users to use IE6)
I could just send the requests off and have them write back without leaving the page
It was all working so well - I completed an entire module, then uploaded it to my SSL secured website
but then
IT DIDNT WORK (That's love for ya)

Well...thats not precisely correct - The functions that only "read" data worked fine, but the functions that called asp pages that did add/change/delete functions would just not return anything - no errors - no other signs of problems - the pages just didnt process

For instance
 - I created a function to get the description of an item from the database, which i would then write to a textbox
-----That worked on development server and SSL server - no problem!
 - I created a function to delete an item from the database
-----That worked on development server - but NOT THE SSL server - Problem!

I did read in some documentation that it doesnt work over SSL (wish I would have read it first), but I wonder why it worked for the "read" functions, but none of the "add/change/delete" functions would work

Here is an example of a "add" function that WOULD work o nthe development server, but WOULD NOT work on SSL server

<SCRIPT LANGUAGE=vbscript>

function AddTrkOpt()
 
  Dim objXMLHTTP, xml,resvar
  ' Create an xmlhttp object:
 Set xml = CreateObject("Microsoft.XMLHTTP")

  ' Opens the connection to the remote server.
       urlStr = "AutoStepAddTrkOpt.asp?HdrRef="+cstr(document.thisForm.AddBLTrkOpts.value)
       xml.Open "get", urlStr, False
      
  ' Actually Sends the request and returns the data:
  xml.Send

    'when page processes correctly, it will return a value of "done"
    if xml.responseText = "done" then
          'call function to create listbox of all items
                call GetAllBox
          'call function to create listbox of selected items
               call getselbox
          'clear all item description textbox        
               document.thisForm.TrkOptDesc.value=""
          'clear selected item description textbox        
      document.thisForm.TrkOptDescSel.value=""
     end if

  Set xml = Nothing
 
end function

</script>

Now - that script worked on development server (Non-SSL), but on the SSL server, it would return with "done", but the actual database "insert" never took place

SO - HAS ANYBODY HAD ANY EXPERIENCE WITH GETTING THE ADD/CHANGE/DELETE METHODS TO WORK ON SLL USING THE XMLHTTP OBJECT?
0
Comment
Question by:bigbillydotcom
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 75

Expert Comment

by:Anthony Perkins
ID: 16957081
You may want to consider using the ServerHTTPRequest object.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16959557
thanks ac - but that would require page roundtrips -right, since it is a server object
what i am trying to emulate is the AJAX style interface where
the client page doesnt refresh - they just interact wit hthe page and it runs off and does its thing
behind the scenes
It works brilliantly under http, but the add/change/delete routines dont process when the url is secured with https
0
 
LVL 75

Expert Comment

by:Anthony Perkins
ID: 16959674
I suggest you read up on the differences between ServerHTTPRequest and the XMLHTTP objects.
0
Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16959759
thanks ac
I have
am i missing something?
I thought ServerHTTPRequest is a server side object - right?
that would mean a page refresh on any call using ServerHTTPRequest - right?

I need to make calls to and from client side vb
Like i said  - works perfect under HTTP but not HTTPS
0
 
LVL 75

Expert Comment

by:Anthony Perkins
ID: 16965213
Again I would suggest you re-read the differences between the two objects they are fundementally different and have nothing to do with whether you do a page refresh or not.

I am not going to get into another byzantine debate with you, so I will leave it at that.

I wish you the best of luck.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16965445
>>I am not going to get into another byzantine debate with you, so I will leave it at that.
thanks - i prefer answers to questions vs your method of debating and never getting anywhere
again - the questions was
SO - HAS ANYBODY HAD ANY EXPERIENCE WITH GETTING THE ADD/CHANGE/DELETE METHODS TO WORK ON SLL USING THE XMLHTTP OBJECT?

if you havent please refrain from posting
thanks
bbdc

0
 
LVL 75

Accepted Solution

by:
Anthony Perkins earned 500 total points
ID: 16965517
No problem.  But to answer, your question:  Yes we do it all the time with ServerHTTPRequest.

Again, good luck.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16968597
now thats an answer and i am motivated
could i bother you for some code??
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Hello, all! I just recently started using Microsoft's IIS 7.5 within Windows 7, as I just downloaded and installed the 90 day trial of Windows 7. (Got to love Microsoft for allowing 90 days) The main reason for downloading and testing Windows 7 is t…
I was asked about the differences between classic ASP and ASP.NET, so let me put them down here, for reference: Let's make the introductions... Classic ASP was launched by Microsoft in 1998 and dynamically generate web pages upon user interact…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question