Hi Team,

Got the below vulnerability in this quarter audit. In the servercontroller security option , the checkformid is already True. the version am using is 15.2.62.
Please advise how to fix this

Thanks
Pramod

HTML Form Without Anti-CSRF Token Detected

Cross-Site Request Forgery (CSRF/XSRF) is a vulnerability where an attacker tricks the victim into making a request victim did not make. So the attacker abuses the trust a web application has with a victim's browser. Mostly the HTML forms submitted have CSRF tokens embedded in them while submitting the request. If a form is without this preventive measure enabled then it's very much prone to CSRF attacks and other dependent attacks. We are checking for the existence of the known list of CSRF tokens if none of the tokens are found the target will be flagged.

Hello,
I've encountered 404 while switching Google OAuth from SA to ISAPI (IIS).
On SA everything works fine (return to localhost:8888/$/oauth/v2 works fine). However when switching to ISAPI I got 404 when returning to mydomain.com/$/oauth/v2.
I suppose it's more server side IIS then Intraweb, but not sure if I miss something.
Any ideas how to troubleshoot? Could you please suggest debug ideas? 
Regards,

Hi,

I am using a CGIRunner to perform some database tasks.
But before the CGIRunner finishes successfully, I get a Timeout error.

What can I do to prevent this from happening?

Thanks in advance!

Cheers, Paul

Hi folks,

there is a new update available:

https://www.atozed.com/2023/06/intraweb-15-3-8/

1 important fix regarding IWButtons and also 1 feature that should have included in the previous build but due to a build failure it hasn't

Cheers

Hello!

How can I change the font / fontsize used for the buttons and the Title in a TIWModalWindow?

Best regards, Mikael

Hello!

If I set the Align property of aTIWLabel to alNone the control resizes nicely depending on Font and text  

But If I set Align to alTop the height of the control does not adjust!?

Best regads, Mikael

Hello,

I am currently encountering an issue which requires me to have 2 different sessions at the same time on a browser and on the same device.

Is there any way to do this with intraweb ?

Best regards,
Florian

Hi folks,

there is a new update available for IW 15:

https://www.atozed.com/2023/06/intraweb-15-3-7/

This new release contains many interesting new features. One new demo will be published soon showing this.

Also it contains our new online help (check subfolder \Help). This is the first version but we are working hard to include more content in the next releases.

Enjoy! 

Hi Friends.  I've been fighting for days to get Indy 10 working in DXE3 Up2
Compiling, I get this 

   

And this

   

What am I doing wrong?

Regards

Hello!

I'm converting a VCL application and I'm really missing the ShowModal function in IntraWeb :-)

is there an example how I can "fake" this?

What I want to do is this;

From Form1 I want to create Form2.
Then I want to show Form2.
Depending on what button I press in From2 I want to set a return value and close Form2 making Form1 reappear.

Best regards, Mikael