Tech Sharing Blog

Computer knowledge, news, product, SEO, earn money online sharing place

Advertisement

Archive for the ‘ Tips ’ Category


That’s nothing perfect in the world, no matter how good the application and web site is, that’s still some hole that we may need to handle. By handling that kind of hole, we try to make our application close to perfect.


This powerpoint show that Why we need the error handling, What are error, how the error being handled, type of error, type of error handling.


Advanced ColdFusion - Error Handling (192)


Error Catching with CFERROR and CFCATCH (175)

Popularity: 4% [?]

Here is the presentation slide by Pete Freitag, Principal Consultant from Founeo Inc.

In the presentation slide show it will cover the following topic include:

  • Uchecked input
  • File Uploads
  • XSS-Cross Site Scripting
  • SQL Injection
  • Cross Site Request Forgery
  • CRLF Injection
  • Session Hijacking


Secure your Coldfusion application (162)

Popularity: 4% [?]


We store a lot of important information in Excel file which we don’t want other to grant any access to that information. By using Microsoft Excel 2007 you may do so by protect your whole workbook.

 

In order to do that, click on File –> Save As.On the file-save pop up window, select the location where you which to store your file and type in the file name, after all, click on the tools at the bottom of the window and select General Options. A small window will pop up to ask you to enter the password to open as well as password to modify.

 

Pop up save as window How to secure your Microsoft Excel 2007 with password

Pop up saved as window

General option from the drop down tools menu How to secure your Microsoft Excel 2007 with password

Select general option from the drop down tools menu

enter the password for open and modify How to secure your Microsoft Excel 2007 with password

Enter the password for view and modify your excel file


By enter these 2 passwords, Microsoft will protect your entire workbook and prevent anyone else to open and view your contents. Make sure you will remember your password that you enter as if you lost that password, it’s not an easy job to get back your content in your excel file.

 

 

password require on viewing file How to secure your Microsoft Excel 2007 with password

The password will be require whenever you try to open the excel file





Popularity: 1% [?]


Google for long time regarding how to hide the HTTP header for IIS in order to mask the server identity and finally found out this tools call URLScan.
Basically URLScan is an ISAPI filter that allows Web site administrators to restrict the kind of HTTP requests that the server will process. By blocking specific HTTP requests, the URLScan filter prevents potentially harmful requests from reaching the server and causing damage.
Actually most of the features that provided by URLScan are included in IIS but not the Remove Server Header features as microsfot find out that this is not an important issue that that’s no real security benefit of include in IIS. But that’s some marketing purposes why microsoft not encourage web master to hide the identity.

How to hide the IIS identity:

  1. download the URL scan
  2. Install the URL scan in your server.
  3. go to the URLScan config file at C:\WINDOWS\system32\inetsrv\urlscan\UrlScan.ini
  4. Change RemoveServerHeader=1 (by default is 0)
  5. Save the file
  6. Restart your IIS
  7. Check on your header (http://www.rexswain.com/httpview.html)
For more detail on the URLScan and the features, you may easily get a lot of information by Google on URLScan



Popularity: 1% [?]

Google has added Sunrise and Sunset search features. These features allow you to know when the best time to view the perfect moment is. You will see a special box on top of the search result if you type in the key word of “Sunset Auckland” or “sunrise Auckland”.


google showing sunset time Google can tell you when to see the Perfect Sunset and Sunrise


Google says that this features works for almost any location. The new added search features are actually is not base on any weather forecast but they are using the latitude, longitude and the current time for a particular location. Base on their statement, the accuracy of the calculation is just about single minutes of different.

Popularity: 1% [?]

Sending free SMS from YM

By on June 29, 2010


Recently start to use the Yahoo Messenger as my girlfriend just change to a new company which only allows Yahoo Messenger but not MSN. In the mean time, I found out that that’s cool functions may attract your interest which is sending the free SMS from the YM to any phone of the world.


This service is totally free and you may send from the computer version of YM or iPhone version of YM. For iPhone user, you may download the YM apps from the apple apps store


To send the SMS in iPhone, just login to the YM in your phone and create a contact by adding the mobile number from your phone book, or just compose a new message by entering the phone number of your recipient.


“When you send an SMS message from Yahoo! Messenger, replies from your friends come back to you in Messenger, making it a quick and convenient way to chat with your friends when they’re not online. This feature is available in all of our versions – 9.0 for Windows, Messenger for Mac, Yahoo! Messenger for the Web, iPhone and even in the chat features in Yahoo! Mail,” Product Manager Sarah Bacon explains.

yahooiphone Sending free SMS from YM

iphone yahoo messenger Sending free SMS from YM

Popularity: 1% [?]

SQLInjection1 1 Possible injection use keyword

All the web developer, web admin, as well as DB admin are always facing the attacking from all around the world toward their web site, but how to prevent it?


Some may use the 3th party software to prevent it, some may just filter all the possible keyword enter by the user, some will use the database store procedure to prevent it. The following are some of the keyword that you may need to take care of when you allow your user to enter any input to your system.


Web site injection attack keyword (204)

Popularity: 4% [?]

I just started my new blog call (Share A Video) recently and the blog is mainly use to share all the video with my reader. And the video source are mainly the video I found is intereting from other web site such as facebook, youtube, and etc.

 

But I do face a problem where facebook don’t allow you to actually embed the video into other web site, after I googling for a while and finally found the script that help you to embed the video.

facebookvideos Embed facebook video in your blog


Every video uploaded on Facebook has a unique ID that you can find in the browser’s address bar (look for the value of parameter “v”).

Copy that number and replace it with xxx in the code below.





From now, you may watch the video from facebook in your web site or blog without need to register or log in into facebook account.


The following video is one of the video from facebook


Popularity: 2% [?]

the following example use the javascript regular express to validate the value where Chinese charecter is not allow.


<script   language=javascript>   
    
  function   checkChinese(){   
    
      var   re   =   /[\u4E00-\u9FA0]+/;   
    
      if   (re.test(form1.tjiccode.value))   
    
      {   
    
          alert(“不允许输入中文!”);   
    
  return   false;   
    
      }   
    
  }   

Popularity: 1% [?]

By  default, window server 2003 only come with the 2 Remote client access, unless you bought the CAL license. (But not many of the company will buy). So only 2 active or disconnected session are allow in the sames time.


So when the 3th user would like to connect into the same server, he/she will get the error message of “The terminal server has exceeded the maximum number of allowed connection”


After googleing, found this solution:

  1. Go to Command Prompt
  2. Type mstsc /v:xxx.xxx.xxx.xxx /f -console (replace xxx.xxx.xxx.xxx with the remote IP)
  3. Login with the administrator account


This command will log you in with the 3th remote connection to your server, you should use this account to kick out the rest of the 2 account before you continue your job.


To delete the existing connection you may go to task Manager -> users -> select the user and log them off.


The alternative for this solution is you can configure the settings on terminal server to manage the connections in a variety of ways. You do that through Start > Control Panel > Administrative Tools > Terminal Services Configuration. Select the Connections folder from the left panel.


In the right panel you should see the available connection types. Most likely there will be an entry for RDP-Tcp (Microsoft RDP 5.2). Right-click on that entry and select Properties. Select the Sessions tab and you will see a number of options related to sessions. All of my drop downs were set to Never, which explained why they never timed-out. To solve our problem, you may check the ‘Override user settings‘ option and set ‘End a disconnected session’ and ‘Idle session limit’ to 15 minutes. I left the ‘Active session limit’ at Never since as long as you are actively using the connection.


rdpexceeded Terminal Server has exceeded maximum number of allowed connection

Terminal Server has exceeded maximum number of allowed connection error message


tsc Terminal Server has exceeded maximum number of allowed connection

Terminal services configuration window


Popularity: 3% [?]

SEO Powered by Platinum SEO from Techblissonline