recaptcha https problem on https://api-secure.recaptcha.net/ - asp.net

I am using recpatcha on an SSL site but I am not getting the image on some browsers because the ssl certificate of it has been expired !
https://api-secure.recaptcha.net/
if I reference the non-secure link, the browser will give warning message.
so what is the alternative?
I am using it under ASP.NET MVC.

As Remy says, you need to update the links to point at Google's servers. See the announcement regarding the expiration of the old URL.
If you are using the .NET Library then you can update to the latest version
If you did not use the library then you can see the modifications made to the library here, and update your URLs in the same manner.
i.e. update https://api-secure.recaptcha.net to https://www.google.com/recaptcha/api

ReCaptcha was acquired by Google. Have you updated your code to use the new Google links yet?

Related

Custom URI Scheme and Skype links

I registered my own URL scheme.
https://msdn.microsoft.com/en-us/library/aa767914.aspx
how do I create my own URL protocol? (e.g. so://...)
Link example: oce://10000
IE, firefox, windows explorer handle it fine. Id 10000 is opened correctly in my app.
Is it possible make this links clickable in Skype?
I already find this unanswered support ticket http://community.skype.com/t5/Windows-archive/Custom-URI-scheme-handlers/td-p/3627869
You can build a redirect page as suggested here: http://www.developerstalk.net/building-a-redirect-page.aspx
Maybe the easiest way to do this is simple redirect.
Use .htaccess and 301 redirect to desired location. That's the most easiest way. Then just let the server deal with everything.
Ideally, an application need to launch/execute URIs it doesn't support or recognize with the OS shell. Skype may be ignoring custom URIs as a security precaution. They don't want to launch unknown applications.

Plone & CGI single-sign-on using mod_auth_tkt

A couple of questions have had answers suggesting making use of mod_auth_tkt to allow Plone 4 (Plone and Asp.Net Integration, Use Plone's authentication mechanism to login to other sites.) to authenticate other web applications, and since I have a couple of CGIs that already jump through hoops to authenticate via Plone, this seems ideal for my purpose. However, I can't seem to find much documentation about using mod_auth_tkt in general, and absolutely none about using it with Plone.
I have the following problems.
mod_auth_tkt expects a shared "secret". mod_auth_tkt's examples show Apache getting this from a config file. Plone doesn't share its secrets - so how does Apache know that a given Plone cookie is a valid auth_tkt?
what url would one use in the Apache config TKTAuthLoginURL? [I'm not sure that's vital, as, at the moment, I'm only really interested in ensuring that something is invoked from inside plone, rather than directly as a cgi]
Apache expects the ticket cookie to be named via TKTAuthCookieName (default 'auth_tkt'). What does Plone call it? __ac?
The documentation on using mod_auth_tkt is a man page distributed with the source.
In answer to your specific questions:
In /Plone/acl_users/session. On the Manage secrets tab set a shared secret. (This is described in the documentation for setting up a shared secret with an IIS login form.) You should set the same secret in the Apache config with the TKTAuthSecret directive.
For Plone 4.0 (or Plone 3.x with plone.session 3.x) use /Plone/login_form. For Plone 4.1 use /Plone/login, assuming that the Plone site is hosted at /Plone. Use /login_form or /login if it is hosted at the root.
Plone uses _ac by default, so use TKTAuthCookieName "_ac". (The cookie name Plone uses is set in the acl_users session settings and cookie authentication settings.)
You might have to set TKTAuthBackArgName "came_from", though I think Plone will fallback to the referrer url so it may work without. And you will need to check the "Use mod_auth_tkt compatible hashing algorithm" option on the preferences tab of acl_users/session.
It turns out that there seems to be a conflict with pas.plugins.sqlalchemy. I've been investigating PPS, and while it doesn't seem that there should be any crossover, the site I was testing had PPS installed. When I switched to a site without PPS, setting the "secret" and the mod_auth_tkt flag had the desired effect. Since I seem to have fallen into the maintenance role for pas.plugins.sqlalchemy, I guess it's my problem :-)
Domo arigato, Mr. Rowe-boto!

Lack of CDN availability

I use both Telerik and Microsoft CDN, for their respective AJAX toolkits. Both work great 99% of the time. However, I was working out of two different cafes recently and went to visit my site: The first cafe did not permit the Telerik CDN, while the second one does not allow the Microsoft CDN as a URL request. I can actually see the status bar in IE shows "ajax.microsoft.com" as the file being retrieved as I am waiting for the website to load.
Lack of CDN access seems to be a very unusual problem. In fact, I cannot fathom why such URL requests would be blocked when the cafe seems to permit pretty much everything else. Any reason? Could this be an availability issue at the respective CDNs themselves (ie how reliable are these CDNs)? And of-course, is there a recommended fix, apart from discarding CDN use?
Update: I can now connect to my app. So my lack of access to ajax.microsoft.com was most likely a temporary lack of MS CDN availability, and not any domain blocking.
all you need to do is implement fallback to your local server, explained here, http://happyworm.com/blog/2010/01/28/a-simple-and-robust-cdn-failover-for-jquery-14-in-one-line/
The Telerik online demos use the CDN by default, but fallback to embedded resources if the Amazon cloud service is unavailable. If you have the RadControls for ASP.NET AJAX installed locally, then you can see the source of the demo site. The files that you need to review are ~/Common/Footer.ascx and its code file ~/App_Code/QuickStart/Footer.cs, also
~/App_Code/QuickStart/QsfCdnConfigurator.cs ~/App_Code/QuickStart/HeadTag.cs. The Footer files set a cookie using JavaScript, depending on whether the CDN is available and the last two files provide support for reading the cookie on the server side and setting the appropriate configuration for the script manager.

silverlight plugin is not working on server

i am using silverlight plugin 3.0 to display the chart.it is working fine on local pc but it is not working on server,it is not displaying any thing.
i have checked the MIME type also in iis.its over there.
please tell me whats the problem
thanking you
samir
Just to rule out the chart component itself, have you tried doing a simple "hello world" type application to see if it works?
This should test to see if it is the chart component/data source for it, or a general problem with your server/host and Silverlight.
It being a server, is IE in Extra Security Mode? It might not load up silverlight at all.
Do any silverlight things work? (I usually test with the gallery at silverlight.net).
I faced same problem. I used a perpetuum repoting tool. I had to create reporting services and these services are accessed by reporting viewer from client side. I forgot to change reporting services url. I put "localhost" and everything was blank(I saw blank page when access report).
so check if there is any issue like this...
or check this url about "URL Access Restrictions in Silverlight"
http://msdn.microsoft.com/en-us/library/cc189008(v=vs.95).aspx

Google Maps in Flex Component

I'm embedding the Google Maps Flash API in Flex and it runs fine locally with the watermark on it, etc. When I upload it to the server (flex.mydomain.com) I get a sandbox security error listed below:
SecurityError: Error #2121: Security sandbox violation: Loader.content: http://mydomain.com/main.swf?Fri, 12 Sep 2008 21:46:03 UTC cannot access http://maps.googleapis.com/maps/lib/map_1_6.swf. This may be worked around by calling Security.allowDomain.
at flash.display::Loader/get content()
at com.google.maps::ClientBootstrap/createFactory()
at com.google.maps::ClientBootstrap/executeNextFrameCalls()
Does anyone have any experience with embedding the Google Maps Flash API into Flex components and specifically settings security settings to make this work? I did get a new API key that is registered to my domain and am using that when it's published.
I've tried doing the following in the main application as well as the component:
Security.allowDomain('*')
Security.allowDomain('maps.googleapis.com')
Security.allowDomain('mydomain.com')
This sounds like a crossdomain.xml related problem. I did a quick search and there seems to be many people with the same issue. Some proxy requests through XMLHttpRequest etc..
Issue 406: Add crossdomain.xml for Google Accounts
Thanks for the help. Apparently this has something to do with including the Flex app on an ASP.NET page. When I moved it over to a flat HTML file, it worked fine. I don't have time to fully investigate right now, but that seems to have fixed it.

Resources