all groups > iis security > october 2005 >
You're in the

iis security

group:

My web forms will not allow users to submit.


My web forms will not allow users to submit. Loyal
10/25/2005 8:02:02 AM
iis security:
I upgraded from server 2000 to standard 2003. I can get all of my Intranet
to work with exception to web forms. The users are asked to submit a user
name and password to complete. In the past they have never been asked to do
this. Also the only user name and password the site will take is that of a
Domain Admin. I will not give that out obviously to line staf. How do I
allow the forms to be used with no username or password? I have everyone set
to basicaly no security, full control, read write and anything eles that can
be checked. I am also allowing anonomus access. Any Ideas? The web forms
Re: My web forms will not allow users to submit. Steven Burn
10/25/2005 5:41:26 PM
Try narrowing the cause down a bit..... for example, does this form work?

<!-- postback.html --!>
Enter some text then click the Submit button to test me
<br><br>
<form method="POST" name="frmPostBack" OnSubmit="alert(txtSV.value)">
<input type="Text" name="txtSV" value="">
<input type="Submit" value="Submit" name="btnSubmit">
</form>

Example:

http://mysteryfcm.plus.com/misc/postback.html

Note: after submitting the above example, you will most likely see a 405
error code. This is quite normal in the case of this example (namely, the
page is static (.html) and no action parameter has been specified).

http://aspfaq.com/show.asp?id=2253

--
Regards

Steven Burn
Ur I.T. Mate Group
www.it-mate.co.uk

Keeping it FREE!

[quoted text, click to view]

Re: My web forms will not allow users to submit. David Wang [Msft]
10/25/2005 6:29:35 PM
All you need to do is:
1. Configure authentication on IIS for the Page containing the FORM to
determine the user identity that performs the submit
2. Make sure the user identity from #1 has write permissions to wherever
they are trying to submit the FORM

For example, I have a sample Form submittal page that writes form data to a
file. To allow any user to be able to submit the form, all I did was:
1. Enable only anonymous authentication on teh Form submittal page itself
2. Obtained the anonymous user identity name (default is IUSR_MACHINENAME)
3. Configured Write ACL for IUSR_MACHINE on the FileSystem where my Form was
writing its post data

That's it. Full security enabled, no one has full-control, and nothing extra
is turned on. The proper way to configure an application, especially on a
secure platform like IIS6. Though you did upgrade, which is less than
optimal for full security benefits.

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
[quoted text, click to view]
I upgraded from server 2000 to standard 2003. I can get all of my Intranet
to work with exception to web forms. The users are asked to submit a user
name and password to complete. In the past they have never been asked to do
this. Also the only user name and password the site will take is that of a
Domain Admin. I will not give that out obviously to line staf. How do I
allow the forms to be used with no username or password? I have everyone
set
to basicaly no security, full control, read write and anything eles that can
be checked. I am also allowing anonomus access. Any Ideas? The web forms
are developed with Frontpage 2003.

Re: My web forms will not allow users to submit. Loyal
10/26/2005 8:36:07 AM
David, Thank You

I will try to state this a little better. By upgrading from 2000 to 2003,
there was a total rebuild of the server, then my saved default website was
brought back in with frontpage 2003 as it was saved on an XP client for
storage durring the rebuild. We reformated durring the 2003 install. I did
try the IUSR_machine name on all folders involved on the server and site.
Unfortunatly I get the same problem. I checked the site and it does have
allow IUSR_machine name as the default anonomus user, I have anonomus user
turned on in server extensions 2002.

My pearl scripts work on other pages, my html works as well, but the only
instance that I have problems is web forms made in frontpage 2003 that used
to work on the 2000 server. I have even rebuilt a form to try it. Same
error. My forms are set to email, and I do have a valid smtp account setup
in frontpage server extensions.

It will promt a remote desktop username and password dialog box to the
machine name of the IIS server. It will only except a user name and password
of a domain admin. I don't want the dialog box at all, because our
Coorperate Compliance Officer needs to have confidentiality for her complaint
form online, and we are planning to role out several new forms. I also am
not getting tech work-orders as efficiently now because we use an web form
for that as well that emails us the complaint information.

[quoted text, click to view]
AddThis Social Bookmark Button