Welcome Guest Search | Active Topics

Add Reply New Topic

File Downloader won't work on HTTPS

Options
GK
Posted: Wednesday, September 10, 2008 1:57:25 AM
Rank: Newbie
Groups: Member

Joined: 6/17/2008
Posts: 2
Points: 6
We are in UAT phase of a critical project and cannot release to the client for testing becuase of this problem. Can anyone suggest a solution:

When user selects Save to Disk option on our site, this puts files from a database to a location on the web server. The File Downloader (version 2.0.10) component is then invoked and should fetch the file list. But the file list pop-up does not display at all. As a result we cannot download files to the user PC.
The license is properly registered.

NB: This code is working 100% in the QA environment (which does not use HTTPS). Also, we use Image Uplader (version 5) on this site with no issues.


Code snippet below:

Extract from FileDownloader.aspx
Javascript Function to handle FileDownloader Steps:


function FileDownloader_DownloadStep(Step)
{
var htxtSessionFolderPath = document.getElementById("htxtSessionFolderPath");
//The file list is going to be downloaded
if (Step == 2)
{
//Change the path to the server script if necessary
getFileDownloader("FileDownloader").setFileList("./GetFileList.aspx?SessionFolderPath=" + htxtSessionFolderPath.value);
}
else if (Step == 11)
{
window.location.href = "DeleteFileList.aspx?SessionFolderPath=" + htxtSessionFolderPath.value;
}
else if (Step == 1)
{
window.close();
}
}

HTML code to display FileDownloader control:
<script type="text/javascript">
//Create JavaScript object that will embed File Downloader to the page
var fd = new FileDownloaderWriter("FileDownloader", 122, 44);

//For ActiveX control full path to CAB file (including file name) should be specified
fd.activeXControlCodeBase = "../FileDownloader2.cab";

fd.activeXControlVersion = "2,0,10,0";

//Set the Download button text
fd.addParam("ButtonDownloadText", "Download files");

//Set license key
fd.addParam("LicenseKey", "73020-2AB8A-00000-0AFD8-92C29;73020-10000-97D4E-A97DD-03D7A");

//The following listener will perform some actions when the file list is about to be downloaded
fd.addEventListener("DownloadStep", "FileDownloader_DownloadStep");

//The following listner will be raised when the whole download process is completed.
fd.addEventListener("DownloadComplete", "FileDownloader_DownloadComplete");

//fd.addEventListener("Error", "onError");

//Tell File Downloader writer object to generate all necessary HTML code to embed File Downloader into the page
fd.writeHtml();
</script>

Extract from GetFileList.aspx.cs
Code behind to generate file list for Downloader:


strBasePath = Server.MapPath("");
strBasePath = strBasePath + "\\";

Response.ContentType = "text/plain";
Response.Charset = "UTF-8";

//Check if the selected subfolder exists
if (Directory.Exists(strBasePath + strFolderPath))
{
DirectoryInfo objDir = new DirectoryInfo(strBasePath + strFolderPath);
//Iterate through all files in the subfolder and build a file list
foreach (FileInfo objFile in objDir.GetFiles())
{
if (objFile.Name.Contains(Request.QueryString["SessionFolderPath"]))
{
//Add the MIME type, the size, and the name for saving
Response.Write("*/* | " + objFile.Length + " | " + objFile.Name + " | ");
//Add the URL to the file and the CRLF combination
Response.Write(EncodeFileName(objFile.Name) + "\r\n");
}
}
}
GK
Posted: Thursday, September 11, 2008 4:14:24 AM
Rank: Newbie
Groups: Member

Joined: 6/17/2008
Posts: 2
Points: 6
Further to this, I found I the information below on Aurigma website. Our site effectively uses two URL's, one as an an independant SSO site to verify the client, and the second as the main site.

Not sure if File Downloader is having a problem with the domain context and licenses may need to be registered for each.

More info at http://www.aurigma.com/Support/DocViewer/24.aspx

As security is one of our main concerns, a couple of limitations take place.
The first limitation relates to the domain name of the website where File Downloader is used. It can be stated as follows:
• Domain name of the server from which the files are downloaded (item host name) must be registered with full license key.
• Domain name of the server which hosts the Web page with File Downloader must be equal to the item host name or reside within the same organization-level domain as it.
• Domain name of the server from which the file list is requested must be equal to the item host name.
See the detailed information on how to register domain name of the server where File Downloader is used in the Removing Limitations of the Evaluation Version topic.
This is done to prevent potential abusers from sending malicious files to the user. It implies that if you registered a server where files are situated, you are responsible for it and guarantee the safety of the content you provide your users with. If a malicious user tries to falsify a file list and force your users to download files from a false server, File Downloader prevents this attempt, because this server is not registered.
Dmitry
Posted: Thursday, September 11, 2008 9:26:22 AM
Dmitry's avatar
Rank: Advanced Member
Groups: Administration , Member

Joined: 8/3/2003
Posts: 914
Points: 990
Hello,

Sorry I did not catch, does your deployment scheme meet these requirements?
Quote:

• Domain name of the server from which the files are downloaded (item host name) must be registered with full license key.
• Domain name of the server which hosts the Web page with File Downloader must be equal to the item host name or reside within the same organization-level domain as it.
• Domain name of the server from which the file list is requested must be equal to the item host name.


Sincerely yours,
Dmitry Sevostyanov.
snicole
Posted: Thursday, February 19, 2009 6:46:54 AM
Rank: Newbie
Groups: Member

Joined: 12/17/2008
Posts: 6
Points: 18
Hi,

It as been posted about 2 weeks ago that the https problem will be fixed in the next release. Do you have an idea when this release will happen?

This issue is really a show stopper for me.


Thank you,

Sylvain
Dmitry
Posted: Sunday, February 22, 2009 10:37:32 PM
Dmitry's avatar
Rank: Advanced Member
Groups: Administration , Member

Joined: 8/3/2003
Posts: 914
Points: 990
Hello Sylvain,

Infortunately the update will not be available in the nearest future. We plan to release next version of File Downloader in about 2 months.

I am really sorry for that.

Sincerely yours,
Dmitry Sevostyanov.
snicole
Posted: Thursday, February 26, 2009 8:19:42 AM
Rank: Newbie
Groups: Member

Joined: 12/17/2008
Posts: 6
Points: 18
Hello Dmitri,

Do you have a workaround for me?

I cannot wait 2 months for that fix.

Sylvain
Dmitry
Posted: Friday, February 27, 2009 2:08:43 AM
Dmitry's avatar
Rank: Advanced Member
Groups: Administration , Member

Joined: 8/3/2003
Posts: 914
Points: 990
Hello Sylvain,

Okay, I just talked to development team. The update will be available by 15-17, March. Unfortunately there is no workaround for this problem.

Sincerely yours,
Dmitry Sevostyanov.
Dmitry
Posted: Thursday, March 12, 2009 3:28:23 AM
Dmitry's avatar
Rank: Advanced Member
Groups: Administration , Member

Joined: 8/3/2003
Posts: 914
Points: 990
Hello,

Today I posted File Downloader 2.0.16 to the site. This version contains fix for this problem. Please, download this version and try it out.

Sincerely yours,
Dmitry Sevostyanov.
Users browsing this topic
Guest

Add Reply New Topic

Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

Main Forum RSS : RSS

YAFVision Theme Created by Jaben Cargman (Tiny Gecko)
Yet Another Forum.net version 1.9.1.6 running under Cuyahoga.
Copyright © 2003-2006 Yet Another Forum.net. All rights reserved.