Running IntraWeb 14.2.8 with Delphi 10.1.

We have the requirement to destroy the original cookie that was generated prior to authentication, and generate a new cookie after authentication.  The genrated post-authentication cookie is different, however the difference is negligible, only the last character is changed (for example from ‘3’ to ‘8’).  Each new cookie should be randomly generated so that values cannot be predicted.

In ServerController, CookieOptions are HttpOnly(true), SessionCookies(true) and UseCookies(true).

Is there a way in IntraWeb 14.2.8 to adjust the method used, to generate a more secure/unique cookie after authentication?

Thank you.

Hi,

I have many forms in my project.
I have created a table to put the rights of each user. 
Some users only can access some forms.

What  would be the better event to check if a user is authorized to load and see the form?
I´d like to show a dialog message in that event if the user is not authorized.

I think is a a event in servercontroller. But, what? and How to send  a async message to browse saying the user is not authorized? Is possible to send a message from servercontroller and not from a form?

I will appreciate some others ideas about it

Regards , 
Luiz

I have an error when using the Chrome browser that doesn't seem to show up with Firefox.  My application has two timers on the web page, both with OnAynchTimer events.  When the user clicks on a button to call up a log file to display, which is an OnAsyncClick event which calls withtLogForm.Create(WebApplication) do Show;  the user often gets the popup dialog that says "Callback method not registered: PAGETIMER.DoOnAsyncTimer" and/or "Callback method not registered: LV_TIMER.DoOnAsyncTimer". The attachment shows one of the popups.

I have never registered callback methods and did not have this error.  I am using Delphi 10.2 and Intraweb 15.1.9.  Due to some security issues the users can't use FireFox for now, so are seeing this popup a lot.  Is there an easy fix?  (How am I supposed to do this I guess I am asking.)  

Thanks,
David

Hi guys,

new IW 15.1.9 has been released.

https://www.atozed.com/2019/11/15-1-9/

This version is compatible with new RAD Studio 10.3.3 (RAD Studio 10.3 Rio, Update 3). Update 3 has not been released to general public yet, but this IW version can be also be installed on 10.3.2 (RAD Studio 10.3 Rio, Update 2 + Runtime compatibility patch). When Update 3 is released (soon) there will be no need to reinstall IntraWeb.

Enjoy! 

Hi,

How to correctly break SSL request that is launched in background thread ?
nowadays I have situation when TIdSSLSocket is destroyed after calling Disconnect:

Quote:IdSSLOpenSSL.TIdSSLSocket.Destroy
System.TObject.Free
IdSSLOpenSSL.TIdSSLIOHandlerSocketOpenSSL.Close
IdTCPConnection.TIdTCPConnection.Disconnect(???)
IdTCPConnection.TIdTCPConnection.Disconnect

Quote:IdSSLOpenSSL.TIdSSLSocket.Send(...)
IdSSLOpenSSL.TIdSSLIOHandlerSocketOpenSSL.SendEnc(???,???,224)
IdSSL.TIdSSLIOHandlerSocketBase.WriteDataToTarget(???,???,224)
IdIOHandler.TIdIOHandler.WriteDirect(...)
IdIOHandler.TIdIOHandler.WriteBufferFlush(???)
IdIOHandler.TIdIOHandler.WriteBufferFlush
IdIOHandler.TIdIOHandler.WriteBufferClose
IdHTTP.TIdHTTPProtocol.BuildAndSendRequest(???)
IdHTTP.TIdCustomHTTP.ConnectToHost($7EA93560,???)
IdHTTP.TIdCustomHTTP.DoRequest(???,'https://.....',$7E91CBF0,$7E9B7AA0,(...))
IdHTTP.TIdCustomHTTP.Post('https://......',$8663B0,$7E9B7AA0)

Hi,
In IW wwwroot, I have a folder ".well-known" and a subfolder "acme-challenge".

Then I put a file to test("test.txt") at 

Hi

I use a datamodule pool with my program. Each user can have a different db to look at. The usersession holds the path to that database,
Now i adjusted the Lock and Unlock :

Howdy All!

I have an e-mail regexp that I have been using that validates most e-mail addresses.

I have tried it (and many others I have seen in stackoverflow) and none of them validate a test e-mail account I have been given by Viator. I have tried some of the online validators and they work!

So my question is does anyone have a C++ or Delphi regexp that can validate the following e-mail account and return True.

MSG-8b17fa92-7b35-4fdb-9f18-f8a69252e019+BR-999999999@expmessaging.tripadvisor.com

Thanks in advance,

Shane

Hi I am trying create a valid SSL certificate withn zeroSSL.

To validate the CSR I choice HTTP option and zeroSSL saids I have to put some files in "{wwwroot}.well-known/acme-challenge/" folder

I am having a problem where IW is unable to server static files when I create ".well-known/acme-challenge/"  into wwwroot.

IW returns an error of "Resource not found".

It seems IW has a problem com "hyphen". I was searching in the google, I can see "hyphen" is a legal char in a URL and doesn´t needs to encode it.
But if I encode it, I also have the same problem.

I'm using telnet client in my app, to access streaming market data.
It works ok for Windows and iOS, but on Android the app hangs
for several seconds when telnet.Disconnect is called.  So much that
Android detects the app is stalled and terminates it.

I understand that Connect and Disconnect can block the
execution, so they are not to be called from the UI thread.
But why Disconnect takes so long ?

One guy suggested on stackoverflow that the reader thread
was locked or not finishing, and that blocked the Disconnect call.

So I tried to create a thread dedicated to disconnect.
It seems to work