24 March 2008

Many time we face this issue that our HTTPS websites shows alert message "This page contains both secure and non secure items".

To resolve the second issue find any reference to non secure resource. In most of the case you probablly have a http link to any image. Best way to find any HTTP link to image any JavaScript/CSS file is to view source and search for HTTP://.

One of the reason is Google Analytics code. If you using Google Analytics code in your website for website statistics then replace that code with the new code from Google Analytics.

The biggest difference between the old code and the new code is that in new code they have removed any direct reference to HTTP or HTTPS but using based it on whether the page is HTTP or HTTPS.

23 March 2008

HTTP Error 404.11 - Not Found
The request filtering module is configured to deny a request that contains a double escape sequence.

The request contained a double escape sequence and request filtering is configured on the Web server to deny double escape sequences.

Details of the issue is available at:

Resolution summary: Would suggest to read the complete article but just for quick reference I am typing the resolution here.

%windir%\system32\inetsrv\appcmd set config "Default Web Site" -section:system.webServer/security/requestfiltering - allowDoubleEscaping="true"

Or change manually by opening the following file
%windir%\System32\inetsrv\config\applicationHost.config file in notepade. (remember to open notepade with administrator privilege.

and change following value.

20 March 2008

We are using Dotnetnuke version 4.5.5 and implemented SSL effectively. We initially faced few issues which we resolved. I hope our learning will help others as well.

Our requirement was to use SSL on only pages that need to be secure and not on other pages. Also we do not want to see any alert message "This page contains both secure and non secure items".

To resolve the second issue we had to find any reference to non secure resource. In most of the case you probablly have a http link to any image. Best wat to find any HTTP link to image any JavaScript/CSS file is to view source and search for HTTP://. In our case the issue was due to Google Analytics code. This can be easily resolve by using the new code from Google Analytics.

Following are the steps you can follow to avoid all the issues:
1. Install SSL certificate
2. Login to portal using administrator or Host (super user) account.
3. Open Admin->Site Settings page.
4. Go to Advance settings-> SSL settings.
5. Check the "SSL Enable" check box. This option will enable "Secure" checkbox on the page->settings.
6. Now open the pages that you want to secure, e.g. shopping cart. Then click at page setting and then expand the advance setting. Now check the secure check box.
7. Do the same with other pages as well that you want to SSL enable.

Problem with about solution is that once user open any SSL enabled page then url automatically turned into https:// user. This is good but then user go to other pages and url still the https://. This is not good.

To resolve this issue you need to go back to Admin->Sit settings->advance settings->SSL settings and then
8. Check the "SSL Enforced" check box. When this option is set, Pages which are not marked as Secure will not be accessible with SSL and url will automatically change back to HTTP://.

problem with this solution is that is you using a page which is not a DNN page then you will not able to secure it. I mean you will not able to use HTTPS. DNN will always try to redirect back to http url. In our case we where using a ImagePage.aspx to retrieve the images from SQL database and display it on pages. On non-secure (non https)
pages that was working find but on secure pages DNN was trying to redirect imagepage url to http url. and that was breaking images.

We had two solution that either we write fully qualifies url wherever we were using imagepage aspx page to display images or change the DNN behaviour. We selected the second option and able to resolve the issue with single line of code. following is the solution.

Open the complete Dotnetnuke solution that includes library and website projects. Now open the following file:
Then open the following method:
Public Sub OnBeginRequest(ByVal s As Object, ByVal e As EventArgs)

Now change the following lines:

' manage secure connections
If ((Request.Url.AbsolutePath.ToLower.EndsWith(".aspx")) Then
If ((Request.Url.AbsolutePath.ToLower.EndsWith(".aspx")) And (Request.Url.AbsolutePath.ToLower.Contains("imagepage.aspx") = False) And (Request.Url.AbsolutePath.ToLower.Contains("image.aspx") = False)) Then

OR change following lines:
' if a protocol switch is necessary
If ((strURL <> "") Then
' if a protocol switch is necessary
If ((strURL <> "") And (Request.Url.AbsolutePath.ToLower.Contains("imagepage.aspx") = False) And (Request.Url.AbsolutePath.ToLower.Contains("image.aspx") = False)) Then

Here you can replace the "imagepage.aspx" & "image.aspx" with the pages you want to exclude the DNN SSL enforcement.

Compile the solution and you good to go.

14 March 2008

"Sab maya hai, says Mukesh Ambani"

It has been many years since I was using this word Sab Maya Hai and many friends were annoyed because of me continuously using this sentence. Well today Ambani said the same thing...

My friends must be remembering me today whoever read this story...

Well Sab maya Hai.

08 March 2008

Sponsored by Free Kids Coloring

Now sure how many people aware of Google Sightseeing website. I found it interesting e.g. this page give information on black Taj Mahal at http://googlesightseeing.com/2006/07/04/taj-mahal. At Google site seeing website you can find some other Indian places to read about.

Another interesting website is 360 panorama of Taj Mahal available at http://geoimages.berkeley.edu/worldwidepanorama/wwp304/html/KeithWilson.html. This website has panorama for many other places.

And to cover the topic here is the link to know all about Taj Mahal at http://en.wikipedia.org/wiki/Taj_Mahal and at History Channel at http://www.history.com/minisite.do?content_type=Minisite_Generic&content_type_id=54822&display_order=5&mini_id=54814.

Another good website about the Black Taj is http://www.blacktaj.org/
Me and Vedic found two good websites for the kids Jokes & riddles.

http://www.jokesbykids.com/ (check also the My Other Websites link on homepage)

Some other good websites that Vedic likes:

There is another website that review all the kids website and list the good and bad about them on their website:

Other Websites - Links copied from www.jokesbykids.com

06 March 2008

We are currently working on the CTMC (Central Texas Medical Center) website - www.ctmc.org. The publishers are working on contents and the site will go live on 17-March-2008.

The efforts was continuation to the CMS (content management system) system we built last year and it took us more then 6 months to enhance the same with new modules and online payment facility. Users will able to pay for foundation online and also able to register and pay for classes.

We have used Dotnetnuke (more at www.dotnetnuke.com) and customized it as per our our needs. We not only created new modules but changed the core library to customize it. Dotnetnuke is an open source CMS system build using .NET.

List of AHS facility websites that we worked on during 2008:
  1. Adventist Health System
  2. Adventist Midwest, La Grange
  3. Adventist Midwest, Bolingbrook

Facility Web Site Address
1 CTMC www.ctmc.org
2 HMMC www.huguley.org
3 Metroplex/Rollins Brook www.mplex.org
4 Adventist Midwest, Main www.keepingyouwell.com
5 Adventist Midwest, Bolingbrook www.keepingyouwell.com/Bolingbrook
6 Adventist Midwest, GlenOaks www.keepingyouwell.com/GlenOaks
7 Adventist Midwest, Hinsdale www.keepingyouwell.com/Hinsdale
8 Adventist Midwest, Lagrange www.keepingyouwell.com/Lagrange
9 Emory www.emoryadventist.org
10 Gordon www.gordonhospital.com
11 Park Ridge www.parkridgehospital.org
12 Takoma www.takoma.org
13 FHHD www.fhhd.org
14 FHZ www.fhzeph.org
15 FH DeLand www.fhdeland.org
16 Fish www.fhfishmemorial.org
17 Jellico www.jellicohospital.com
18 Manchester www.manchestermemorial.org
19 FHMD/FHMS www.fhmd.com
20 FHW www.fhwat.org
21 SMMC www.shawneemission.org
22 FH Flagler www.floridahospitalflagler.com
23 AHS Corporate www.adventisthealthsystem.com
This is a good site to know your IP address. They also provides other services like IP Lookup, Trace Email, Visual Traceroute, Traceroute etc.