Solved

does XMLHTTP work over HTTPS

Posted on 2006-06-21
8
3,033 Views
Last Modified: 2012-06-27
I recently discovered (well..for myself!) the XMLHTTP object and fell in love
I thought I had finally found a way to leverage my server side scripting without having to postback pages
and I could use client side vbscript (we require our users to use IE6)
I could just send the requests off and have them write back without leaving the page
It was all working so well - I completed an entire module, then uploaded it to my SSL secured website
but then
IT DIDNT WORK (That's love for ya)

Well...thats not precisely correct - The functions that only "read" data worked fine, but the functions that called asp pages that did add/change/delete functions would just not return anything - no errors - no other signs of problems - the pages just didnt process

For instance
 - I created a function to get the description of an item from the database, which i would then write to a textbox
-----That worked on development server and SSL server - no problem!
 - I created a function to delete an item from the database
-----That worked on development server - but NOT THE SSL server - Problem!

I did read in some documentation that it doesnt work over SSL (wish I would have read it first), but I wonder why it worked for the "read" functions, but none of the "add/change/delete" functions would work

Here is an example of a "add" function that WOULD work o nthe development server, but WOULD NOT work on SSL server

<SCRIPT LANGUAGE=vbscript>

function AddTrkOpt()
 
  Dim objXMLHTTP, xml,resvar
  ' Create an xmlhttp object:
 Set xml = CreateObject("Microsoft.XMLHTTP")

  ' Opens the connection to the remote server.
       urlStr = "AutoStepAddTrkOpt.asp?HdrRef="+cstr(document.thisForm.AddBLTrkOpts.value)
       xml.Open "get", urlStr, False
      
  ' Actually Sends the request and returns the data:
  xml.Send

    'when page processes correctly, it will return a value of "done"
    if xml.responseText = "done" then
          'call function to create listbox of all items
                call GetAllBox
          'call function to create listbox of selected items
               call getselbox
          'clear all item description textbox        
               document.thisForm.TrkOptDesc.value=""
          'clear selected item description textbox        
      document.thisForm.TrkOptDescSel.value=""
     end if

  Set xml = Nothing
 
end function

</script>

Now - that script worked on development server (Non-SSL), but on the SSL server, it would return with "done", but the actual database "insert" never took place

SO - HAS ANYBODY HAD ANY EXPERIENCE WITH GETTING THE ADD/CHANGE/DELETE METHODS TO WORK ON SLL USING THE XMLHTTP OBJECT?
0
Comment
Question by:bigbillydotcom
  • 4
  • 4
8 Comments
 
LVL 75

Expert Comment

by:Anthony Perkins
ID: 16957081
You may want to consider using the ServerHTTPRequest object.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16959557
thanks ac - but that would require page roundtrips -right, since it is a server object
what i am trying to emulate is the AJAX style interface where
the client page doesnt refresh - they just interact wit hthe page and it runs off and does its thing
behind the scenes
It works brilliantly under http, but the add/change/delete routines dont process when the url is secured with https
0
 
LVL 75

Expert Comment

by:Anthony Perkins
ID: 16959674
I suggest you read up on the differences between ServerHTTPRequest and the XMLHTTP objects.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16959759
thanks ac
I have
am i missing something?
I thought ServerHTTPRequest is a server side object - right?
that would mean a page refresh on any call using ServerHTTPRequest - right?

I need to make calls to and from client side vb
Like i said  - works perfect under HTTP but not HTTPS
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 75

Expert Comment

by:Anthony Perkins
ID: 16965213
Again I would suggest you re-read the differences between the two objects they are fundementally different and have nothing to do with whether you do a page refresh or not.

I am not going to get into another byzantine debate with you, so I will leave it at that.

I wish you the best of luck.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16965445
>>I am not going to get into another byzantine debate with you, so I will leave it at that.
thanks - i prefer answers to questions vs your method of debating and never getting anywhere
again - the questions was
SO - HAS ANYBODY HAD ANY EXPERIENCE WITH GETTING THE ADD/CHANGE/DELETE METHODS TO WORK ON SLL USING THE XMLHTTP OBJECT?

if you havent please refrain from posting
thanks
bbdc

0
 
LVL 75

Accepted Solution

by:
Anthony Perkins earned 500 total points
ID: 16965517
No problem.  But to answer, your question:  Yes we do it all the time with ServerHTTPRequest.

Again, good luck.
0
 
LVL 13

Author Comment

by:bigbillydotcom
ID: 16968597
now thats an answer and i am motivated
could i bother you for some code??
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

I recently decide that I needed a way to make my pages scream on the net.   While searching around how I can accomplish this I stumbled across a great article that stated "minimize the server requests." I got to thinking, hey, I use more than one…
This demonstration started out as a follow up to some recently posted questions on the subject of logging in: http://www.experts-exchange.com/Programming/Languages/Scripting/JavaScript/Q_28634665.html and http://www.experts-exchange.com/Programming/…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now