Chapter 33 - Active Server Pages (ASP) : 2004 Prentice Hall, Inc. All Rights Reserved

1
Chapter 33 - Active Server Pages (ASP)

Outline
33.1 Introduction
33.2 How Active Server Pages Work
33.3 Setup
33.4 Active Server Page Objects
33.5 Simple ASP Examples
33.6 File System Objects
33.7 Session Tracking and Cookies
33.8 ActiveX Data Objects (ADO)
33.9 Accessing a Database from an Active Server Page
33.10 Server-Side ActiveX Components
33.11 Web Resources
 2004 Prentice Hall, Inc. All rights reserved.

2
Objectives
• In this tutorial, you will learn:

– To program Active Server Pages using VBScript.
– To understand how Active Server Pages work.
– To understand the differences between client-side scripting
and server-side scripting.
– To be able to pass data between Web pages.
– To be able to use server-side include statements.
– To be able to use server-side ActiveX components.
– To be able to create sessions.
– To be able to use cookies.
– To be able to use ActiveX Data Objects (ADO) to access a
database.

3
33.1 Introduction
• Server-side technologies
– Dynamically creates Web pages
• Use client information, server information and information
from the Internet
– Active Server Pages (ASP)
• Microsoft Server-side technology
• Dynamically build documents in response to client requests
– Deliver dynamic Web content
• XHTML, DHTML, ActiveX controls, client-side
scripts and Java applets

4
• Active Server Pages

– Processed by scripting engine
• Server-side ActiveX control
– .asp file extension
– Can contain XHTML tags
– Scripting written with VBScript
• JavaScript also used
• Others (Independent Software Vendors)
– Communication with Server
• Client HTTP request to server
• Active server page processes request and returns results

5
• Active Server Pages,cont.

– Communication with Server, cont.
• ASP document is loaded into memory
– asp.dll scripting engine on server
• Parses (top to bottom)

6
33.3 Setup
• Web Server
– Need to run Web server to use Active Server Pages
• IIS 5.0 (Internet Information Services) or higher
– Create a virtual directory
• Copy files to c:\InetPub\Wwwroot

7
• Built-in objects
– Communicate with a Web browser
– Gather data sent by HTTP request
– Distinguish between users
– Request
• Get or post information
• Data provided by the user in an XHTML form
• Access to information stored on client machine
– Cookies
– File upload (binary)
– Response
• Sends information to client
– XHTML, text
– Server
• Access to server methods or properties

8
Object Name Description

Request Used to access information passed by an HTTP request.
Response Used to control the information sent to the client.

Server Used to access methods and properties on the server.
Fig. 25.1 Commonly used ASP objects.

9
• ASP Scripts
– Scripting delimiters
• <% %>
• @LANGUAGE directive
– Option Explicit
• As in VBScript, forces all variables to be declared in advance
– FormatDateTime
• Time to display
– Now
• Format to display in

1 <% @LANGUAGE = VBScript %> 10
2
Scripting delimiter Outline
3 <%
wraps around code
4 ' Fig. 33.2 : clock.asp
executed on the server. clock.asp
5 ' A simple ASP example
6 Option Explicit (1 of 2)
7 %>
Processing directive
8 specifying scripting
Requires programmer explicitly
9 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 language
Transitional//EN"
10
define all variables
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
11
12 <html xmlns = "http://www.w3.org/1999/xhtml">
13
14 <head>
15 <title>A Simple ASP Example</title>
16
17 <style type = "text/css">
18 td { background-color: black;
19 color: yellow }
20 strong { font-family: arial, sans-serif;
21 font-size: 14pt; color: blue }
22 p { font-size: 14pt }
23 </style>
24
25 </head>
 2004 Prentice Hall, Inc.

All rights reserved.
26
11
27 <body>
Returns server date and time Outline
28 “<%= “ is short for
29 (Now ) as a string formatted in
Response.write
<p><strong>A Simple ASP Example</strong></p>
30 vbLongDate format
<table border = "6"> clock.asp
31 <tr> (2 of 2)
32 <td>
33 <% =FormatDateTime( Now, vbLongDate ) %>
34 </td>
35
36 <td>
37 <% =Time() %>
38 </td>
39 </tr>
40 Statement</table>
is short for:
41 <%</body>
Call Response.write( Time()) %>
42
43 </html>

12

Fig. 33.2 Simple Active Server Page.

1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" 13
2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> Outline
3
5 HTML generated by
6 <head> clock.asp
7 <title>A Simple ASP Example</title> (1 of 2)
8
10 td { background-color: black;
11 color: yellow }
12 strong { font-family: arial, sans-serif;
13 font-size: 14pt; color: blue }
14 p { font-size: 14pt }
15 </style>
16
17 </head>
18
19 <body>
20

21 <p><strong>A Simple ASP Example</strong></p> 14
22 <table border = "6"> Outline
23 <tr>
24 <td>
25 Thursday, May 24, 2001 HTML generated by
26 </td> clock.asp
27 (2 of 2)
28 <td>
29 2:22:58 PM
30 </td>
31 </tr>
32 </table>
33 </body>
34
35 </html>

15
• ASP processes input

– Form information sent by client
– E-commerce Web site
• Use to verify customer information
– Server responds to process request
– Form
• Using post method
• action attribute indicates the .asp file to which the form
information is posted
– Request object retrieves form data

1 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" 16
2 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> Outline
3
4 
5  name.html
6 (1 of 2)
8
9 <head>
10 <title>Name Request</title>
11 </head>
12
13 <body>
14
15 <p style = "font-family: arial, sans-serif">
16 Enter your name:
17 </p>
18

19  17
20 <form action = "name.asp" method = "post"> Outline
21 <input type = "text" name = "namebox" size = "20" />
22 action
<input type = "submit" name = "submitButton" set to ASP file
23 value = "Enter" /> where information is name.html
24 </form> posted. (2 of 2)
25
26 </body>
27
28 </html>

18

Fig. 33.4 XHTML document that requests an ASP.

2
Outline
3 <%
4 ' Fig. 33.5 : name.asp
5 ' Another simple ASP example name.asp
7 %>
8
9 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
10 "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
11
13
14 <head>
15 <title>Name Information</title>
16
18 p { font-family: arial, sans-serif;
19 font-size: 14pt; color: navy }
20 .special { font-size: 20pt; color: green }
21 </style>
22 </head>

23
20
24 <body> Outline
25
26 
27 <p>Hi <% =Request( "namebox" ) %>, </p><br /> name.asp
28 Request object retrieves (2 of 2)
<p class = "special">Welcome to ASP!</p>
29 form data from text field
30 </body>
“namebox”
31
32 </html>

21

Fig. 33.5 ASP document that responds to a client request.

22
• File System Objects (FSOs)

– Allow programmer to manipulate files, directories and drives
– Read and write text
– Microsoft Scripting Runtime Library (Fig 33.6)
• FileSystemObject, File, Folder, Drive and
TextStream
– Use to create directories, move files, determine whether a
Drive exists
• FileSystemObject methods (Fig. 33.7)
– File object
• Allows programmer to gather info about files, manipulate files,
open files
• File properties and methods (Fig. 33.8)

23
Object type Description

FileSystemObject Allows the programmer to interact with Files, Folders and
Drives.
File Allows the programmer to manipulate Files of any type.
Folder Allows the programmer to manipulate Folders (i.e., directories).
Drive Allows the programmer to gather information about Drives (hard
disks, RAM disks—computer memory used as a substitute for hard
disks to allow high-speed file operations, CD-ROMs, etc.). Drives
can be local or remote.
TextStream Allows the programmer to read and write text files.
Fig. 33.6 File System Objects (FSOs).

24

Methods Description
CopyFile Copies an existing File.
CopyFolder Copies an existing Folder.

CreateFolder Creates and returns a Folder.
CreateTextFile Creates and returns a text File.
DeleteFile Deletes a File.
DeleteFolder Deletes a Folder.
DriveExists Tests whether or not a Drive exists. Returns a boolean.
FileExists Tests whether or not a File exists. Returns a boolean.
FolderExists Tests whether or not a Folder exists. Returns a boolean.
GetAbsolutePathName Returns the absolute path as a string.
Fig. 33.7 FileSystemObject methods. (Part 1 of 2)

25

Methods Description
GetDrive Returns the specified Drive.
GetDriveName Returns the Drive drive name.
GetFile Returns the specified File.
GetFileName Returns the File file name.
GetFolder Returns the specified File.
GetParentFolderName Returns a string representing the parent folder name.
GetTempName Creates and returns a string representing a file name.
MoveFile Moves a File.
MoveFolder Moves a Folder.
OpenTextFile Opens an existing text File. Returns a TextStream.
Fig. 33.7 FileSystemObject methods. (Part 2 of 2)

26

Property/method Description
Property
DateCreated Date. The date the File was created.

DateLastAccessed Date. The date the File was last accessed.
DateLastModified Date. The date the File was last modified.
Drive Drive. The Drive where the file is located.
Name String. The File name.
ParentFolder String. The File’s parent folder name.
Path String. The File’s path.
ShortName String. The File’s name expressed as a short name.
Size Variant. The size of the File in bytes.
Method
Copy Copy the File. Same as CopyFile of FileSystemObject.
Delete Delete the File. Same as DeleteFile of FileSystemObject.
Move Move the File. Same as MoveFile of FileSystemObject.
OpenAsTextStream Opens an existing File as a text File. Returns TextStream.
Fig. 33.8 Some common File properties and methods.

27

– Path property
• Contains File path in long name format
– ShortName property
• Contains File path in short name format
– Folder object
• Allows programmer to manipulate and gather info about
directories
• Folder properties (Fig. 33.9)

28

Properties
Attributes Integer. Value indicating Folder’s attributes (read only, hidden, etc.).
DateCreated Date. The date the folder was created.
DateLastAccessed Date. The date the folder was last accessed.
DateLastModified Date. The date the folder was last modified.
Drive Drive. The Drive where the folder is located.
IsRootFolder Boolean. Indicates whether or not a Folder is a root folder.
Name String. The Folder’s name.
ParentFolder Folder. The Folder’s parent folder.
Path String. The Folder’s path.
ShortName String. The Folder’s name expressed as a short name.
ShortPath String. The Folder’s path expressed as a short path.
Size Variant. The total size in bytes of all subfolders and files.
Type String. The Folder type.

Fig. 33.9 Some Folder properties and methods. (Part 1 of 2)

29

Methods
Delete Delete the Folder. Same as DeleteFolder of
FileSystemObject.
Move Move the Folder. Same as MoveFolder of
FileSystemObject.
Copy Copy the Folder. Same as CopyFolder of
FileSystemObject.
Fig. 33.9 Some Folder properties and methods. (Part 2 of 2)

30

– IsRootFolder property
• Indicates whether folder is the root folder for the Drive
• If not:
– Method ParentFolder
• Retrieves parent folder
– Method Size
• Returns the total bytes the folder contains (includes
subfolders)

31

– Drive object (Fig. 33.10)
• Gather information about drives
• Property DriveLetter
– Contains drive letter
• Property SerialNumber
– Contains drive serial number
• Property FreeSpace
– Contains number of available bytes

32
Property Description
AvailableSpace Variant. The amount of available Drive space in bytes.
DriveLetter String. The letter assigned to the Drive (e.g., “C”).

DriveType Integer. The Drive type. Constants Unknown, Removable, Fixed,
Remote, CDRom and RamDisk represent Drive types and have the
values 0–5, respectively.
FileSystem String. The file system Drive description (FAT, FAT32, NTFS, etc.).
FreeSpace Variant. Same as AvailableSpace.
IsReady Boolean. Indicates whether or not a Drive is ready for use.
Path String. The Drive’s path.
RootFolder Folder object. The Drive’s root Folder.
SerialNumber Long. The Drive serial number.
TotalSize Variant. The total Drive size in bytes.
VolumeName String. The Drive volume name.
Fig. 33.10 Drive properties.

33

– TextStream object (Fig. 33.11)
• Manipulate text files

34

Property/Method Description
Properties
AtEndOfLine Boolean. Indicates whether the end of a line has been encountered.
AtEndOfStream Boolean. Indicates whether the end of file has been encountered.
Column Integer. Returns the character’s position in a line.
Line Integer. Returns the current line number.
Methods
Read String. Returns a specified number of characters from the file
referenced by the TextStream object.
ReadAll String. Returns the entire contents of the file referenced by the
TextStream object.
Fig. 33.11 TextStream methods and properties. (Part 1 of 2)

35

Property/Method Description
Methods, cont.
ReadLine String. Returns one line from the file referenced by the
TextStream object.
Write String. Writes text to the file referenced by the TextStream object.
WriteBlankLines String. Writes newline characters to the file referenced by the

TextStream object.
WriteLine String. Writes one line to the file referenced by the TextStream
object.
Skip Variant. Skips a specified number of characters while reading from the
file referenced by the TextStream object.
SkipLine Variant. Skips a line of characters while reading from the file
referenced by the TextStream object.
Close Close the file referenced by the TextStream object.
Fig. 33.11 TextStream methods and properties. (Part 2 of 2)

36
• Creating a guestbook
– XHTML Form
– hidden field
• Determine if page loaded by form submission
– Write data to text file
• ServerVariables
• APPL_PHYSICAL_PATH
• OpenTextFile
• Append mode
–8

37
• Creating a guestbook, cont.

– Name returned as mailto: URL
• Request object
– Chr function
• Generate characters from ASCII code
– Always Close files

2
Outline
3 <% ' Fig. 33.12 : guestbook.asp
4 ' Demonstrating File System Objects
5 Option Explicit guestbook.asp
6 %> (1 of 5)
7
10
12
13 <head>
14 <title>GuestBook Example</title>
15
17 hr { size: 1; color: blue }
18 table { text-align: center }
19 td { font-size: 12pt }
20 p { font-size: 14pt; color: blue }
21 .font { font-family: arial, sans-serif }
22 </style>
23 </head>
24 <body>

25 <%
39
26 Dim fileObject, textFile, guestBook, mailtoUrl Outline
27
Concatenated with file
28 ' get physical path for this ASP page and
Set is required to establish a name guestbook.txt
29 ' concatenate guestbook.txt to it guestbook.asp
Pass Request method
variable in VBScript
30 guestbook = Request.ServerVariables( "APPL_PHYSICAL_PATH" ) _ (2 of 5) server key
ServerVariables
31
Creating a FSO instance
APPL_PHYSICAL_PATH
& "\guestbook.txt"
32
assigned to reference
fileObject
33 ' instantiate a FileSystemObject
34 Set fileObject = Server.CreateObject( _
35 "Scripting.FileSystemObject" )
36
37 ' Check if this request is after the user has posted the form
38 If Request( "hiddenInput" ) = "true" Then
39
40 ' Print a thank you
41 Call Response.Write( "Thanks for your entry, " & _
42 Request( "username" ) & "!" )
Request object retrieves
43 %>
hiddenInput value and tests
44 <hr />
it against
Prints string “true
string followed by ”
45 <%
46
users name input in the form
' build the mailtoUrl
47 mailtoUrl = Date() & " <a href = " & Chr( 34 ) _ Submitted name and email
48 & "mailto:" & Request( "email" ) & Chr( 34 ) _ are combined and assigned to
Pass value 34 into VBScript
49 & ">" & Request( "username" ) & "</a>:Date()
" a mailto
Displays assigns: current string mailtoUrl
link.Chr function
Request “email” of to produce double
server retrieves
date to beginning and
“username ” quotes (“”)
mailtoUrl
50
40
51
Outline
52 ' open the guestbook, 8 is for appending
53 ' create the guestbook if it does not exist
54 Set textFile = _ guestbook.asp
55 fileObject.OpenTextFile( guestbook, 8, True ) (3 of 5)
56
Method OpenTextFile
57 ' write data to guestbook.txt
retrieves TextStream object
58 Call textFile.WriteLine( "<hr Contstant 8 indicates
/>" & mailtoUrl
for & _
accessing file
59 Request( "comment" ) ) append mode (writing
guestbook.txt to
60 Call textFile.Close() the end of the file.)
61 End If
62 %>
Close()TextStream
method closesmethod
the file
WriteLine writes to
63
guestbook.txt
64 <p>Please leave a message in our guestbook.</p>
65
66 
67 <form action = "guestbook.asp" method = "post">
68 <table>
69 <tr>
70 <td>Your Name: </td> Form post action to .asp page
71 <td><input class = "font"
72 type = "text" size = "60"
73 name = "username" /></td>
74 </tr>

75
41
76 <tr> Outline
77 <td>Your email address:</td>
78 <td><input class = "font"
79 type = "text" size = "60" guestbook.asp
80 name = "email" (4 of 5)
81 value = "user@isp.com" />
82 </td> Form contains two
83 </tr> text fields and text
84 area for user input
85 <tr>
86 <td>Tell the world: </td>
87 <td><textarea name = "comment" rows = "3"
88 cols = "50">
89 Replace this text with the information
90 you would like to post.</textarea></td>
Passes parameter
91
hiddenInput
</tr>
92
value “true”
</table>
93
94 <input type = "submit" value = "submit" />
95 <input type = "reset" value = "clear" />
96 <input type = "hidden" name = "hiddenInput"
97 value = "true" />
98 </form>
99

100 <%
42
101 ' check if the file exists Outline
102 If fileObject.FileExists( guestBook ) = True Then
103
104
FSO object FileExists guestbook.asp
105
checks if guestbook.txt (5 of 5)
' open the guestbook, "1" is for reading
106
exists.
Set textFile = fileObject.OpenTextFile( guestbook, 1 )
107
108 ' read the entries from the file and write them to
109 ' the client.
110 Call Response.Write( "Guestbook Entries:<br />" & _
111 textFile.ReadAll() )
112 Call textFile.Close()
113 TextStream and ReadAll
114 End If Read entries
methodsfromread entire
115 %> guestbook.txt
contents ofand write writes
Response.Write
116 XHTML guestbook.txt
to the
text to client
client. Contains
117 </body> XHTML markup rendered
118 on client browser.
119 </html>

43

Fig. 33.12 Guestbook Active Server Page.

44

Fig. 33.12 Guestbook Active Server Page.

1 <hr />5/24/2001 <a href = "mailto:tem@deitel.com">tem</a>: ASP is a great tool 45
for server-side development. Outline
2 <hr />5/24/2001 <a href = "mailto:dan@bushycat.com">dan</a>: ASP is my
preferred server-side development tool.
XHTML generated by
guestbook.asp
(1 of 1)

46
Key name Description

APPL_PHYSICAL_PATH Returns the physical path.
HTTPS Boolean. Determines whether the request
came in through SSL (Secure Sockets Layer).
REMOTE_ADDR Client’s DNS name or IP address.
REQUEST_METHOD Request method (i.e., get and post).
SERVER_NAME Server’s hostname (DNS or IP address).
HTTP_USER_AGENT Returns information about the client making
the request.
HTTP_COOKIE Returns cookies residing on the client.
Fig. 33.13 Some server variable keys.

47
• Session Tracking and Cookies

– Helps server to distinguish between clients
– Provide custom content
• Shopping cart
• Marketing/advertising
– SessionID
• Assigned by server to each unique session
• Compared with sessionIDs stored in server
– Session object
• Timeout property
– Length of session before it expires
• Abandon property
– Terminates individual session

48
• ASP application
– Multiple ASP pages linked with session variables
– Example
• instantpage.asp
– Form, requests information from the user
– Posted to process.asp
• process.asp
– Redirects user to instantpage.asp if errors exist
– Otherwise creates users ASP page
– Stores message in session variable welcomeBack
• Every time user submits the form

49
• Server-side include
– Commands embedded in XHTML documents
– Add dynamic content
– Places a .shtml include file within another file
– Physical or virtual path
• 
– Not all Web servers support
• Written as comment
– Performed before scripting code is interpreted.
• ASP page cannot determine which includes to use
– Can contain scripting code
• Must use <script> tag or <% %> delimiters

2
Outline
3 <%
4 ' Fig. 33.15 : instantpage.asp
5 ' ASP document that posts data to process.asp instantpage.asp
7 %>
8
11
13
14 <head>
15 <title>Instant Page Content Builder</title>
16
18 table { text-align: center;
19 font-size: 12pt;
20 color: blue;
21 font-size: 12pt;
22 font-family: arial, sans-serif }
23 </style>
24
25 </head>

26
51
27 <body> Server-side include Outline
28
29 
30  instantpage.asp
31 <h2>Instant Page Content Builder</h2> (2 of 4)
32
33 <% ' if process.asp posted an error, print the error
34 ' message.
35 If Session( "errormessage" ) <> "no error" Then
36 Call Response.Write( Session( "errorMessage" ) )
37 ' otherwise, print the welcome back message, if any
38 Else Session object First time page is executed,
39 Call errorMessage
Response.Write( Session( "welcomeBack"
session )retrieves
) variable 35 returns true
linevalue
40 End If If true, errorMessage
variable used for error
41
messages value iswelcomeBack
written to client
errorMessage never sessionhas a If statement tests
42 %>
variable
value displays
unless errors are errorMessage equality
43 
encounteredback” message to “no error”. Return
44 <form actionwritten to the client
= "process.asp" method = "post">
45
to returning users True or False.
<table>
46 <tr>
47 <td>Your Name: </td>
Requests process.asp when
48
form is posted

49 <td><input type = "text" size = "60" 52
50 name = "username" /></td> Outline
51 </tr>
52
53 <tr> instantpage.asp
54 <td>Enter the Filename:</td> (3 of 4)
55
56 <td><input type = "text" size = "60"
57 name = "filename"
58 value = "yourfilename" /></td>
59 </tr>
60
61 <tr>
62 <td>Enter the Title:</td>
63
64 <td><input type = "text" size = "60"
65 name = "doctitle"
66 value = "document title" /></td>
67 </tr>
68
69 <tr>
70 <td>Enter the content:</td>
71
72 <td><textarea name = "content" rows = "3"

73 cols = "50"> 53
74 Replace this text with the
Outline
75 information you would like to post.</textarea></td>
76 </tr>
77 </table> instantpage.asp
78 (4 of 4)
79 Server-side
<input type include
= "submit" value = "submit" />
80 <input type = "reset" value = "clear" />
81 </form>
82
83 
84 </body>
85 </html>

54

Fig. 33.15 ASP that posts user information to process.asp.

55


56


1  57
2  Outline
3 <hr style = "color: blue" />
4 <img height = "100" src = "/images/bug2bug.gif" alt = "Bug" />
5 <hr style = "color: blue" /> header.shtml
(1 of 1)

1  58
2  Outline
4 <a style = "text-align: center"
5 href = "mailto:orders">ordering information</a> - footer.shtml
7 href = "mailto:editor">contact the editor</a><br /> server-side include file
for the document footer

2
Outline
3 <%
4 ' Fig. 33.18 : process.asp
5 ' ASP document that creates user's ASP document process.asp
7 %> If field is empty or
8 contains default string
9 <% yourfilename, lines 19-
10 21 assign
Dim message, q XHTML error
11 message to variable
12 message.
q = Chr( 34 Iftostatement
) ' assign quote character q validates
13 Session( "errorMessage" ) = "no error"contents of text field.
14
15 ' check to make sure that they have entered a
16 ' valid filename
17 If ( LCase( Request( "filename" ) ) = "yourfilename" ) _Assign message value to
18 Or Request( "filename" ) = "" Then session variable
19 message = "<p style = " & q & "color: red" & q & _ errorMessage
20 ">" & "Please enter a valid name or filename.</p>"
21 Session( "errorMessage" ) = message
22 Call Server.Transfer( "instantpage.asp" )
23 End If
24
Server method Transfer
25 Dim directoryPath, filePath, fileObject, fileName
requests
instantpage.asp
26
60
27 ' Create a FileSystem Object FSO object is created if validOutline
user
28 Set fileObject = Request.ServerVariables
Server.CreateObject( _ name is entered and assigned
retrieves)physical path Builds fileName by
29 "Scripting.FileSystemObject" reference fileObject
30 concatenating process.asp
31 directoryPath = _
“filename” to the(2.asp
of 6)
32 Request.ServerVariables( "APPL_PHYSICAL_PATH" )
file extension
Specify server path where
33
ASP file is written
34 fileName = Request( "filename" ) & ".asp"
35
36
If file exists, variable
' build path for text file
37
errorMessage value is set to
filePath = directoryPath & "\" & fileName
38
XHTML containing error message
39 ' check if the file already exists
40 If fileObject.FileExists( filePath ) Then
41 message = "<p style = " & q & "color: red" & q & _
42 ">" & "The file name is in use.<br />" & _
43 filePath
"Please use a different file name.</p>" passed FileExists
44 Session( "errorMessage" ) = method. Determines if file exists.
message
45 Call Server.Transfer( "instantpage.asp" )
46 End If
47
Server.Transfer method
requests instantpage.asp

48 ' save XHTML for the welcome back message 61
49 ' in a session variable Outline
50 message = "<p style = " & q & "color: blue" & q & _
51 ">" & "Welcome Back, " & Request( "username" ) & _
52 "</p><br />" process.asp
53 Session( "welcomeBack" ) = message (3 of 6)
54
55 Dim header, footer, textFile, openMark, closeMark
56 openMark = "<" & "%"
57 closeMark = "%" & ">"
Construct XHTML for header
58 Assigns XHTML for “welcome
59 ' build the header. back” message to welcomeBack
60
Assign ASP scriptingsession variable
' vbCrLf inserts a carriage return/linefeed into the text
61
delimiters to string variables
' string which makes the XHTML code more readable
62
openMark and closeMark
header = openMark & " @LANGUAGE = VBScript " & closeMark _
63 & vbCrLf & openMark & " ' " & fileName _
64 & " " & closeMark & vbCrLf & vbCrLf _
65 & "<!DOC" & "TYPE html PUBLIC " & q & _
66 "-//W3C//DTD XHTML 1.0 Transitional//EN" & q & _
67 vbCrLf & q & "http://www.w3.org/TR/xhtml1/" & _
68 "DTD/xhtml1-transitional.dtd" & q & ">" & vbCrLf & _
69 "<html xmlns = " & q & "http://www.w3.org/1999/xhtml" & _
70 q & ">" & vbCrLf & "<head>" & vbCrLf _
71 & "<meta name = " & q & "author" & q & " content = " _
72 & q & Request( "username" ) & q & " />" & vbCrLf _
73 & "<meta name = " & q & "pubdate" & q & " content = " _

74 & q & Date() & q & " />" & vbCrLf _ 62
75 & "<title>" & Request( "doctitle" ) & "</title>" _ Outline
76 & vbCrLf & "</head>" & vbCrLf & "<body>" & vbCrLf _
77 & "" _ process.asp
79 & vbCrLf & "<h2 style = " & q & "text-align: center" & _ (4 of 6)
80 footer
q & "><em>" & Request( "doctitle" ) & "</em></h2>" & _variable
assigned
81 vbCrLf & "<br />" & vbCrLf to XHTML footer contents
82
83 ' build the footer using a different style for
Form values retrieved
84 ' building the string using Request object
85 footer = vbCrLf & "<br /><br /><br />" & vbCrLf & _
86 "You have requested this page on " & _
87 openMark & " =Date() " & closeMark & "," & _
88 vbCrLf & "at " & openMark & " =Time() " & _
89 closeMark & "." & vbCrLf & _
90 "" _
92 & vbCrLf & vbCrLf & "</body>" & vbCrLf & "</html>"
93

94 ' create the ASP file 63
95 Set textFile = fileObject.CreateTextFile( filePath, False ) Outline
96 With textFile
97 Call .WriteLine( header & Request( "content" ) & _
98 footer ) process.asp
99 Lines
Call .Close() 103-129 send XHTML to (5 of 6)
100 End With client that contains link to
101 %> created page
102
105
107
108 <head>
109 
110 <title>File Generated: <% =fileName %></title>
111
113 h2 { font-family: arial, sans-serif;
114 text-align: center }
115 </style>
116
117 </head>
118

119 <body> 64
120  Outline
121 <h2><em>File <% =fileName %>
122 was created successfully.</em>
123 </h2><br /> process.asp
124 (6 of 6)
125 
126 <a href = "<% =fileName %>">View your file</a>
127 
128 </body>
129 </html>

2 <% ' aboutme.asp %> Outline
3
5 "http://www.w3c.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> aboutme.asp
6 <html xmlns = "http://www.w3.org/1999/xhtml"> (1 of 2)
7 <head>
8 <meta name = "author" content = "tem" />
9 <meta name = "pubdate" content = "2/27/2001" />
10 <title>About Me</title>
11 </head>
12 <body>
13 
14 
16 <img height = "100" src = "/images/bug2bug.gif" alt = "Bug" />
18 <h2 style = "text-align: center"><em>About Me</em></h2>
19 <br />
20 This page contains lots of exciting and interesting information about me!
21 <br /><br /><br />
22 You have requested this page on 10/15/2003,
23 at 11:45:47 AM.
24 
25 

66
27 <a style = "text-align: center" Outline
28 href = "mailto:orders">ordering information</a> -
30 href = "mailto:editor">contact the editor</a><br /> aboutme.asp
31 <hr style = "color: blue" /> (2 of 2)
32
33 </body>
34 </html>

67

Fig. 33.20 Welcome back message displayed by instantpage.asp.

68

Fig. 33.21 Error message generated by instantpage.asp.

69
• ADO
– Enables database connectivity
– Part of Universal Data Access architecture
• OLE DB provides low-level access
• ODBC allows C programs to access databases
• ADO allows web applications to access databases
– Provides pre-built objects for use in ASP and VBScript
• Collections

70

Fig. 33.22 Microsoft’s UDA architecture.
Application or Browser
ADO
OLE DB
ODBC
Relational data sources Non-relational data sources Legacy data

71

Fig. 33.23 Portion of the ADO object model.
Connection
Command Parameters Parameter
Errors Error
RecordSet Fields Field

72

Object/Collection Description
Connection object Connects to the data source.
Command object Contains the query that interacts with the database (the data
source) to manipulate data.
Parameter object Contains information needed by a Command object to query
the data source.
Parameters Contains one or more Parameter objects.
collection
Error object Created when an error occurs while accessing data.
Errors collection Contains one or more Error objects.
Recordset object Contains zero or more records that match the database query.
Collectively, this group of records is called a recordset.
Field object Contains the value (and other attributes) of one data source
field.
Fields collection Contains one or more Field objects.
Property object Contains a characteristic of an ADO object.
Properties Contains one or more Property objects.
collection
Record object Contains a single row of a Recordset.
Stream object Contains a stream of binary data.
Fig. 33.24 Some ADO object and collection types.

73
33.9 Accessing a Database from an Active
Server Page
• Web applications
– Communicating with databases
• Use ActiveX Data Objects (ADO)
– Provides uniform way for programs to connect with
databases
– Three-tier distributed applications
• User interface
– Created with XHTML, DHTML or XML
– Contains ActiveX controls, client-side scripts, Java
applets
– Communicate directly with business logic
• Business logic
• Database access
• May reside on separate computers
74
Server Page
• Web applications, cont.
– Three-tier distributed applications, cont.
• Web servers build middle tier
– Provide business logic
• Manipulates databases
• Communicates with client Web browsers
– ASP communications with databases
• Use SQL-based queries
• ADO handled specifics
– Through OLE DB
• Databases provide data source for dynamic content
• Allows users who are not familiar with Web languages to create Web
pages
• Restrict access
– Password protection
• Query Access database

2
Outline
3 <%
4 ' Fig. 33.25 : database.asp
5 ' ASP document for interacting with the database database.asp
7
Ignores errors until
end of script
8 Dim connection, loginData Server method
9 When Open
CreateObject finishes
creates
10 ' provide error handling code executing, points to first
ADODB.Connection
Declares session
11 On Error Resume Next opensor EOF if no
Method Openrecord
variablewere found
records
12 Session( "errorString" ) = "" database specified by
errorString
13 ODBC System DSN
14 loginData(login
Set connection = Server.CreateObject( ) is seterrorHandlerLog
reference to
"ADODB.Connection" )
15 an ADODB.recordset object
Call connection.Open( "login" )
processes errors
Open method is passed string
16 Call errorHandlerLog() containing SQL query and
17 ADODB.Connection object
errorHandlerLog
18 ' create the record set
called again
19 Set loginData = Server.CreateObject( "ADODB.Recordset" )
20 Call loginData.Open( Session( "query" ), connection )
21 Set Session( "loginData" ) = loginData
22
23 Call errorHandlerLog() Sets session variable loginData to
24 variable loginData which references
the ADODB.recordset containing all
records matching SQL query
25 Sub errorHandlerLog() 76
26 If Err.Number <> 0 Then
If true, errorString Outline
27 Dim errorString
28 variable is assigned
XHTML text containing
Error numberdatabase.asp
29 errorString = Session( "errorString" )
error number and message and message
concatenated to of
(2 2)
30 errorString = errorString & "<p class = " & _
variable
31 Chr( 34 ) & "error" & Chr ( 34 ) & ">Error (" _
Err object Number property errorString
32 & Err.Number & ") in " & Err.Source & "<br />" & _
contains VBScript error
33 Err.Description & "</p><br />"
34
number. Tests if error has
Session( "errorString" ) = errorString
35
occurred.
End If
36 End Sub
37 %>

77
Server Page
Fig. 33.26 Error messages sent to login.asp by database.asp.

2
Outline
3 <%
4 ' Fig. 33.27 : login.asp
5 ' ASP document to login to instantpage.asp login.asp
7
8 ' create the SQL query
9 Session( "query" ) = "SELECT loginID FROM Users"
10 Call Server.Execute( "database.asp" )
11 %>
12
Assigns SQL query
to session variable
Executes database.asp to retrieve
query
15 login IDs from the database
17
18 <head>
19 <title>Login Page</title>
20
22 table { text-align: center;
23 font-size: 12pt;
24 color: blue;
25 font-size: 12pt;

26 font-family: arial, sans-serif } 79
27 .error { color: red } Outline
28 </style>
29
30 </head> login.asp
31 (2 of 7)
32 <body>
33
34 
35 <%
36 If Session( "errorString" ) = "" Then
37 ' if this is a return after a failed attempt,
38 ' print an error
39 If Session( "loginFailure" ) = True Then %>
40 <p class = "error">Login attempt failed,
41 Tests
please try again</p> if session variable
42 <% End If errorString value is
43 empty string
44 ' begin the form %>
45 <p>Please select your name and enter
46 your password to login:</p><br />
47 Lines 39-41 test is session variable
loginFailure is True

48 <form action = "submitlogin.asp" method = "post"> 80
49
Outline
50 
51 <table border = "0">
52 <tr> login.asp
53 <td>Name:</td> select structure builds drop- (3 of 7)
54 down list of loginIDs
55 <td>
56 <select name = "loginID">
57 <option value = "noSelection">
58 Requests loginID
Select your name</option> cookie
59
60 <%
61 If Request.Cookies( "loginID" ) <> "" Then Selects the returning user’s
62 Call BuildReturning() login ID option
63 Else
Build loginID options
64 Call BuildNewUser()
65 End If
66 %>
67 </select>
68 </td>
69 </tr>
70

71 <tr> 81
72 <td>Password:</td> Outline
73 <td><input type = "password"
74 name = "password" /></td>
75 </tr> login.asp
76 (4 of 7)
77 <tr>
78 <td></td>
79 <td align = "left">
80 <input type = "submit" value = "Log Me In" />
81 </td>
82 </tr>
83 </table>
84 </form>
85
86 
87 <%
88 Else
89
If false, print error
Call Response.Write( Session( "errorString" ) )
90
message to user
End If
91 %>
92 </body>
93 </html>
94

95 <%
82
96 ' builds the option items for loginIDs and writes Outline
97 ' selected for the loginID of the returning user
98 Sub BuildReturning()
99 Dim found, loginData login.asp
100 (5 of 7)
101 Set loginData = Session( "loginData" )
102
103 ' pull user names from the record set to populate the
104 ' dropdown list
105 found = False
106
107 While Not loginData.EOF Tests for EOF
108 ' create this record's dropdown entry
109 %> Iffound
statement False
set totests whether
<option
110 <%
before needs
option loop to be
' if we did not write selected for any option
111 selected
' before
112 If ( Not found ) Then
113
114 ' if the current record's loginID is equal to
115 ' the loginID cookie, then it is the loginID of
116 ' the returning user, and thus we need to write
117 ' selected for this option; in this case we also
118 ' need to signal that we have written selected
119 ' for an option by setting found to True.

120 If Request.Cookies( "loginID" ) _ 83
121 = loginData( "loginID" ) Then Outline
If statement writes
122 Call Response.Write( "selected = " & _
selected for an
123 Chr( 34 ) & "selected" & Chr( 34 ) )
option
124 found = True login.asp
125 End If (6 of 7)
126 End If
Once selected is
Determines whether current
127 %> value = "<% =loginData( "loginID"
written for an option,
) %>">loginID field is
record’s
128 found set to true
equal to loginID cookie
<% =loginData( "loginID" ) %></option>
129 <% Call loginData.MoveNext()
130 Wend
131 End Sub
132

133 ' builds the option items for loginIDs without writing 84
134 ' selected for any loginID Outline
135 Sub BuildNewUser()
136 Dim loginData
137 login.asp
138 Set loginData = Session( "loginData" ) (7 of 7)
139
140 Increments
' pull user names from the record set to populate the the record set pointer
141 ' dropdown list to next record
142 While Not loginData.EOF
143 ' create this record's dropdown entry
144 %> <option value = "<% =loginData( "loginID" ) %>">
145 <% =loginData( "loginID" ) %></option>
146 <% Call loginData.MoveNext()
147 Wend
148 End Sub
149 %>
Writes option display as
while loop (lines
current107-130)
login IDiterates
through loginData’s records Sets option value to
current login ID

85
Server Page
Fig. 33.27 ASP document that allows the user to log in to a site.

86
Server Page
Fig. 33.27 ASP document that allows the user to log in to a site.

2
Check whether password Outline
3 <% ' Fig. 33.28 : submitlogin.asp
4 field is empty or id
' ASP document to check user's username and password
5 Option Explicit
loginID field contains submitlogin.asp
6 default value (1 of 2)
7 ' test if a user name and a password were
If so, variable
8 loginFailure set to
' entered. If not, transfer back to the login page.
9 If Request( "password" ) = "" Or _
true, client redirected
10 Request( "loginID" ) = "noSelection" back to login.asp
Then
11 Session( "loginFailure" ) = True
12 Call Server.Transfer( "login.asp" )
13 End If
14
WHERE specifies
Checks password against the a
15 Dim connection, loginData
password in recordset
condition on which records
16
are selected
17 ' create the SQL query
18 Session( "query" ) = _
Sets reference
Executes loginData to
database.asp to
19 "SELECT * FROM Users WHERE loginID = '" & _
20
session variable loginData
query database
Request( "loginID" ) & "'"
21
(contains records matching
22
query.)
Call Server.Execute( "database.asp" )
23 Set loginData = Session( "loginData" )
24

25 If Request( "password" ) = loginData( "password" ) Then 88
26
Sets cookie’s expiration date to Outline
27 ' password is OK, adjust loginFailure
current date plus 3 days Sets session variable
If true, line writes form’s loginID
28 Session( "loginFailure" ) = False loginFailure value
value as cookie named loginIDsubmitlogin.asp
29
to False
30 ' write a cookie to recognize them the next time they
(2 of 2)
31 ' go to login.asp
32 Response.Cookies( "loginID" ) = Request( "loginID" )
33
34 ' give it three days to expire
Calls Server method Transfer to
35 Response.Cookies( "loginID" ).Expires = Date() + 3
redirect client to instantpage.asp
36
37 Otherwise
' send them loginFailure
to instantpage.asp set to True
38 Call and client is "instantpage.asp"
Server.Transfer( redirected to login.asp
)
39 Else
40 Session( "loginFailure" ) = True
41 Call Server.Transfer( "login.asp" )
42 End If
43 %>

89
Server Page
Fig. 33.28 ASP document that validates user login.

90
Server Page
Fig. 33.28 ASP document that validates user login.

91
Server Page
Fig. 33.29 Cookies folder before and after cookie creation.

92
• ActiveX controls on the server with no GUI

– Make features available in ASP
– AdRotator ActiveX component
• Rotates advertisements on a Web page
• Randomly displays one of several advertisements
• Minimizes space on a Web page committed to advertisements
• Client does not have to support ActiveX technologies (on the
server)
– PageCounter ActiveX component
• Page “hit” counter

93

Component name Description
MSWC.BrowserType ActiveX component for gathering information about the
client’s browser (e.g., type, version).
MSWC.AdRotator ActiveX component for rotating advertisements on a
Web page.
MSWC.NextLink ActiveX component for linking Web pages together.
MSWC.ContentRotator ActiveX component for rotating HTML content on a
Web page.
MSWC.PageCounter ActiveX component for storing the number of times a
Web page has been requested.
MSWC.Counters ActiveX components that provide general-purpose
persistent counters.
MSWC.MyInfo ActiveX component that provides information about a
Web site (e.g., owner name, owner address).
Scripting.FileSystemObje ActiveX component that provides an object library for
ct accessing files on the server or on the server’s network.
ActiveX Data Objects (ADO) ActiveX components that provide an object library
Data Access Components for accessing databases.
Fig. 33.30 Some server-side ActiveX components.

2
Outline
3 <%
4 ' Fig. 33.31 : component.asp
5 ' Demonstrating Server-side ActiveX Components component.asp
7 %>
8
11
13
14 <head>
15 <title>ActiveX Component Example</title>
16 </head>
17
18 <body>
19
20 <strong style = "font-family: arial, sans-serif">
21 Server-side ActiveX Components
22 </strong>
23
24 <p>

25 <%
95
26 Dim rotator, browser, information, counter Outline
27
Sends advertisement as HTML to client. Method
28
GetAdvertisement
' create an AdRotator object called using reference rotator.
29 Set rotator = Server.CreateObject(
Retrieves advertisements from"MSWC.AdRotator"
config.txt )
component.asp
30 (2 of 4)
31 ' use config.txt to send an advertisement to theCreates
client AdRotator component instance,
32 Call Response.Write( _ assigns it reference rotator
33 rotator.GetAdvertisement( "config.txt" ) )
34
35 ' create a BrowserType object
36 Set browser = Server.CreateObject( "MSWC.BrowserType" )
37
38 If browser.VBScript = True Then
39 %> Obtains information about user’s browser
40 <script language = "VBScript">
41 Call Msgbox( "Client browser supports VBScript!" )
42
Check property VBScript value
</script>
43 <%
44 End If
45
46 If browser.JavaScript = True Then
47 %>
48 <script language = "JavaScript">
49 alert( "Client browser supports JavaScript!" );
50 </script>
Test JavaScript property
51 <%
96
52 End If BrowserType object’s Browser, Outline
53
Version and MinorVer properties
54 ' get client's browser information
can obtain similar client information Passes server variable key
55 information = "<p>Your browser information is:<br />" & _ component.asp
56 Request.ServerVariables( "HTTP_USER_AGENT" ) & _
HTTP_USER_AGENT(3 toof 4)
57 "<br />Browser: " & browser.Browser & " Version: " & _
ServerVariables, obtains string
58 browser.Version & " Minor version: " & _
containing user information
59 browser.MinorVer & "<br />Cookies are "
60
61 If browser.Cookies Then
62 information = information & "enabled</p><br />"
63 Else
64 information = information & "disabled</p><br />"
Tests Cookies property to determine if
65 End If
browser supports cookies
66
67 Call Response.Write( information )
68
69 ' create Page Counter Object
70 Set counter = Server.CreateObject( "MSWC.PageCounter" )
71 Call counter.PageHit() ' page has been "hit"
72 %>
Increments number of “hits” by one

73 </p> 97
74 Returns number of “hits” Outline
75 <p style = "color: blue; font-size: 12pt">
76 This page has been visited <% =counter.Hits() %>
77 times!</p> component.asp
78 </body> (4 of 4)
79 </html>

98

Fig. 33.31 Demonstrating server-side ActiveX components.

99


100


1 REDIRECT redirect.asp 101
2 width 54 Header contains Outline
3 height 36 REDIRECT file URL
4 border 1
Image URL, destination
Advertisement URL,
dimensions
5 *
alt value,
Asterisk separates
imageheader
display ratio config.txt
6 /images/us.gif
from advertisements (1 of 1)
7 http://www.odci.gov/cia/publications/factbook/geos/us.html
8 United States Information
9 20
10 /images/france.gif
11 http://www.odci.gov/cia/publications/factbook/geos/fr.html
12 France Information
13 20
14 /images/germany.gif
15 http://www.odci.gov/cia/publications/factbook/geos/gm.html
16 Germany Information
17 20
18 /images/italy.gif
19 http://www.odci.gov/cia/publications/factbook/geos/it.html
20 Italy Information
21 20
22 /images/spain.gif
23 http://www.odci.gov/cia/publications/factbook/geos/sp.html
24 Spain Information
25 20

2
Outline
3 <%
4 ' Fig. 33.33 : redirect.asp
5 ' Redirection Page for AdRotator Component redirect.asp
7
8 Call Response.Redirect( Request( "url" ) )
9 %>

Chapter 33 - Active Server Pages (ASP) : 2004 Prentice Hall, Inc. All Rights Reserved

Hochgeladen von

Dokumentinformationen

Originalbeschreibung:

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

Chapter 33 - Active Server Pages (ASP) : 2004 Prentice Hall, Inc. All Rights Reserved

Hochgeladen von

Copyright:

Verfügbare Formate

1

Chapter 33 - Active Server Pages (ASP)

 2004 Prentice Hall, Inc. All rights reserved.

• In this tutorial, you will learn:

 2004 Prentice Hall, Inc. All rights reserved.

 2004 Prentice Hall, Inc. All rights reserved.

33.2 How Active Server Pages Work

• Active Server Pages

 2004 Prentice Hall, Inc. All rights reserved.

33.2 How Active Server Pages Work

• Active Server Pages,cont.

 2004 Prentice Hall, Inc. All rights reserved.

 2004 Prentice Hall, Inc. All rights reserved.

33.4 Active Server Page Objects

 2004 Prentice Hall, Inc. All rights reserved.

33.4 Active Server Page Objects

Object Name Description

Response Used to control the information sent to the client.

 2004 Prentice Hall, Inc. All rights reserved.

33.5 Simple ASP Examples

 2004 Prentice Hall, Inc. All rights reserved.

 2004 Prentice Hall, Inc.

 2004 Prentice Hall, Inc.

33.5 Simple ASP Examples

 2004 Prentice Hall, Inc. All rights reserved.

 2004 Prentice Hall, Inc.

 2004 Prentice Hall, Inc.

33.5 Simple ASP Examples

• ASP processes input

 2004 Prentice Hall, Inc. All rights reserved.

 2004 Prentice Hall, Inc.

 2004 Prentice Hall, Inc.

33.5 Simple ASP Examples

 2004 Prentice Hall, Inc. All rights reserved.

 2004 Prentice Hall, Inc.

 2004 Prentice Hall, Inc.

33.5 Simple ASP Examples

 2004 Prentice Hall, Inc. All rights reserved.

33.6 File System Objects

• File System Objects (FSOs)

 2004 Prentice Hall, Inc. All rights reserved.

33.6 File System Objects

Object type Description

 2004 Prentice Hall, Inc. All rights reserved.

33.6 File System Objects

CopyFolder Copies an existing Folder.

 2004 Prentice Hall, Inc. All rights reserved.

33.6 File System Objects

 2004 Prentice Hall, Inc. All rights reserved.

33.6 File System Objects

DateCreated Date. The date the File was created.

 2004 Prentice Hall, Inc. All rights reserved.

33.6 File System Objects

• File System Objects (FSOs)

 2004 Prentice Hall, Inc. All rights reserved.

33.6 File System Objects

Type String. The Folder type.

 2004 Prentice Hall, Inc. All rights reserved.

33.6 File System Objects

 2004 Prentice Hall, Inc. All rights reserved.

33.6 File System Objects

• File System Objects (FSOs)