I am not proficient with the Indy components.  Years ago I researched and struggled and finally got the following to work.  This code calls an API to get an authorization code.   Look at the code and then please continue reading the information following.

  HTTP := TIdHTTP.Create(nil);
  try
    SSL := TIdSSLIOHandlerSocketOpenSSL.Create(HTTP);
    // configure SSL options as needed...
    HTTP.IOHandler := SSL;
    FResponseText := Trim(HTTP.Get('https://evs.e2value.com/evs/remote_auth.asp?username=' + TIdURI.ParamsEncode(username)
      + '&password=' + TIdURI.ParamsEncode(password) + '&vusername=' + TIdURI.ParamsEncode(vusername)));

    (* Parse the document *)
    XMLDocument1.XML.Clear;
    XMLDocument1.XML.Add(Trim(FResponseText));
    XMLDocument1.Active := True;
    AuthId := XMLDocument1.DocumentElement.ChildNodes[0].Text;
    if Copy(AuthId, 1, 5) = 'Sorry' then
      raise Exception.Create('Unable to authenticate.  Bad username or password.')
    else
      if Copy(AuthId, 1, 14) = 'Please provide' then
        raise Exception.Create('Unable to authenticate.  Bad password.');
    AuthCode := XMLDocument1.DocumentElement.ChildNodes[1].Text;
  finally
    XMLDocument1.Active := False;
    SSL.Free;
    HTTP.Free;
  end;


The code no longer works.  It breaks on the line

    FResponseText := Trim(HTTP.Get('https://evs.e2value.com/evs/remote_auth.asp?username=' + TIdURI.ParamsEncode(username)
      + '&password=' + TIdURI.ParamsEncode(password) + '&vusername=' + TIdURI.ParamsEncode(vusername)));

and then of course jumps to the code within the "finally" section.  A couple of weeks ago I received the notice below from the owners of the API.  How do I change my code to make it work?  Can I make it work?  Any help you can provide will be greatly appreciated.


Effective October 1, 2018 we will no longer accept any HTTP requests via XML Integration, also known as API. We will only accept HTTPS requests.
 
Internet Security is a significant concern for us. To offer the best security we can, e2Value continually updates protocols. There have been a number of worldwide changes this year that seem to have caused disruptions for some clients.
 
Any steps we take are to protect ourselves—and more importantly—our customers. None of the security protocols we have instituted or will institute in the future are ones that e2Value decided independently. We were merely complying with the standards we are expected to maintain by and for our customers.
 
Among our recent updates is the requirement of Transport Layer Security (TLS) 1.2 communication with our servers, as the latest security guidelines recommend. TLS 1.2 encryption protocol helps keep data safe during its transmission over the internet.
 
We renew our SSL certificates annually.
 
SSL certificates are either valid or expired and they should be read by a customer’s server during the actual transaction—not stored on the customer’s servers.
 
Storing them on one’s server is typically done because the server has an HTTP connection versus an HTTPS connection. That HTTP connection is an unsecure link that will be blocked after September 30, 2018. To that end:
 

1. Any HTTP connections will be severed starting October 1, 2018.
   
2. If you have an HTTP connection in any postback, you may want to have a security review of your connections, e2Value’s and others, if applicable.
   
3. We recommend no one store the SSL certificates.
   
4. If a certificate is stored, note and diary the SSL expiration date. We will not be sending out future notices about expiring certificates.
   

We are currently using IntraWeb 14.2.3 with Delphi 10.1 Berlin and have an ISAPI application running under IIS 8.5.  We have recently had a scan done on our app which uncovered the "Information Leakage in Server Response" vulnerability.  Specifically it shows X-Powered-By: IntraWeb which we cannot figure out how to remove.  We have tried adding <remove name="X-Powered-By" /> to the custom headers section of the web.config however that did not seem to have an effect.  We don't see where in the Server Controller this can be done either.  Can the X-Powered-By header be removed or at the very least overwritten?  If so please explain.

I have been looking at using Google's material components to help bring my current intraweb applications to a nice UI.     https://material.io/develop/

With iw17 on the horizon does anyone have any input on if this would work well with iw17?

or is there a better suggestion?

Hi,

Thanks for Help me to Register forums.


I using IW15.0.13 with Delphi 10.2.3 Tokyo, I have made a test case with a very simple form for show a normal PDF with http.sys on IW,
 
{$IFDEF SA-HttpSys}  //15.0.13
addr := TIdURI.URLDecode(addr); //Decode Chinese directory and PDF file
{$ENDIF}
    WebApplication.ShowMessage(addr);// displaying correct。
IWURLWindow1.URI := addr; //404 error, PDF can not show, but all works as expected with Indy.

Any ideas?
Thank

The Indy website may have a few issues for short periods today. We are moving and updating it. However to get our SSL certificate and other things I have to first update the public DNS to get the processes started. We apologize for any inconvenience.

When ready, it will be at the same url http://www.IndyProject.org

Hi guys its me again i have problem with with user with more than 2 have error showing form is already created. how to deal with this kind of logic i tried release and create method like i asked before its not use 

thank you

Hi,

In IW14 I started using TIWModalWindow to show a region that has it's own templateprocessor to add some layout. The content of the modalwindow was not centered on the screen. Only after a resize action of the browser the modalwindow got centered. IW15 didn't bring changes to this.
By using the ServerController.JavascriptOptions I could get my hands on the IWModalWindow javascript object and made a change so the content is centered.

Alexandre: Can I send you an e-mail with example project so you can check?

Using IW15.0.13 with Delphi 10.1 Berlin.

Hi there

Im trying to email a calendar appointment to outlook, that shows the email as an appointment (with Accept,Decline at the top of the email etc) with an .ics icalendar file attached.  Basically, its the sames as sending an appointment from Googles gmail to MS Outlook.

I can send the email appointment OK with ....


    MailMessage.From.Address := 'mail@server.com';
    MailMessage.Recipients.EMailAddresses := 'lparvin@bjphomesupport.co.uk';
    MailMessage.Subject     := 'Send calendar';
    MailMessage.ContentType := 'text/calendar;method=REQUEST';

I can also send an .ics attatchment with plain text email with ....

    Attachment:=TIdAttachmentFile.Create(MailMessage.MessageParts, CalendarFile) ;
    Attachment.ContentType:='text/calendar';


However, I can NOT combine the two, ie send the email appointment with the .ics file attached.

As soon I set  MailMessage.ContentType to anything other than   'text/calendar;method=REQUEST'; eg change it to 'multipart/alternative', it fails.

Do you have any suggestions on how to send the email with MessageParts, but with the main MailMessage.ConentType = 'text/calendar'.

Many thanks

Lee Parvin

Hello.

My project is deployed over IIS 8.5 (windows 2012 R2 server) as isapi, and it's configurated by the follows of this paper
http://docs.atozed.com/docs.dll/deployment/isapi/Deploying%20ISAPI%20using%20IIS.html

info about the project, IW 14.1 and CGdevtools, Servercontroller timeout to 20 mins.

everything works fine, it's a simple project where clients makes login and displays some simple data. When the user makes clic over a menu the IWproject answers quickly.

But, am noticed that if the user is working on a sesion (navigating through the menus ), and leaves the application still for more than 1 minute (minimum) in absolutly inactivity, 
the first clic wherever is it (even if the clic is just to show some frame and not accesing any data), takes around 1 minute to be procesed, experiencing a LAG.

I don't know why it is happening, because if the user work on the IWproject making constant clics and accesing the data, all seems to be fine.
the problem is if you make a pause for more than 1 minute.

I don't know the cause, but it seems like the IIS lost the reference of the session, and after 1 minute , at a new request, it has to build again (am not sure about this).

somebody has the same behavior?
is left some setup on IIS??
maybe something about garbage, or cache files, something?

I want to say that IW its a great product, but this bug make unhhappy the customers who thinks that thw webbrowser is freezing.

NOTES:
1.  I saw a report with this same case, but noones answered to him, at   https://www.atozed.com/forums/showthread.php?tid=641
2.  Your first clue will be the database connection, but, I'd made a sample project with just navigate throug menus, showning controls, and the LAG is present too.
3. this demo, from CGDevTools, has the same behavior, after 1 minute of inactivity, a new request takes a long time (like a new connection)


https://www.cgdevtools.com/demo/JQueryDemoV3_IW14_ISAPI.dll

test it by yourself.


Can you help us?
anyone in the Atozed community have the same problem?

I just solved what I hope is the last issue in the conversion of my massive IW 14 app to IW 15.

I had one screen where I allow the user to set a wide array of filters, then I build the WHERE clause and open the query (FireDAC) in a regular Click event on a TIWButton.

It worked great in IW 14. But in IW 15 I would set the parameters, click Search -- and nothing would show up. I quickly learned that if I clicked the button twice, data would show up.

Very odd.

Just today I tracked it down to the code in OnRender that checks for (not IsPostBack) before initializing the adapter for my ORM. Somehow after a click IsPostBack is NOT True on the first PostBack. This led to my adapter being created again, overwriting the first one and closing my query.

I changed my code to use IsFirstRequest, and it works fine now.

But I think y'all oughtta take a look at IsPostBack in IW 15 in Delphi 10 Seattle -- something's wrong.