In TIdMessage.GenerateHeader, the From header is set using EncodeAddress, so non-ASCII characters are displayed correctly. 
The Sender header, however, is set directly, so that non-ASCII characters in TIdMessage.Sender.Name are substituted by "?".

Is that by design? Because of a standard, or because of actual behaviour by servers?

::tor

https://www.atozed.com/2019/11/intraweb-...r-is-here/

https://www.atozed.com/2019/11/intraweb-...r-is-here/

Running IntraWeb 14.2.8 with Delphi 10.1.

We have the requirement to destroy the original cookie that was generated prior to authentication, and generate a new cookie after authentication.  The genrated post-authentication cookie is different, however the difference is negligible, only the last character is changed (for example from ‘3’ to ‘8’).  Each new cookie should be randomly generated so that values cannot be predicted.

In ServerController, CookieOptions are HttpOnly(true), SessionCookies(true) and UseCookies(true).

Is there a way in IntraWeb 14.2.8 to adjust the method used, to generate a more secure/unique cookie after authentication?

Thank you.

Hi,

I have many forms in my project.
I have created a table to put the rights of each user. 
Some users only can access some forms.

What  would be the better event to check if a user is authorized to load and see the form?
I´d like to show a dialog message in that event if the user is not authorized.

I think is a a event in servercontroller. But, what? and How to send  a async message to browse saying the user is not authorized? Is possible to send a message from servercontroller and not from a form?

I will appreciate some others ideas about it

Regards , 
Luiz

I have an error when using the Chrome browser that doesn't seem to show up with Firefox.  My application has two timers on the web page, both with OnAynchTimer events.  When the user clicks on a button to call up a log file to display, which is an OnAsyncClick event which calls withtLogForm.Create(WebApplication) do Show;  the user often gets the popup dialog that says "Callback method not registered: PAGETIMER.DoOnAsyncTimer" and/or "Callback method not registered: LV_TIMER.DoOnAsyncTimer". The attachment shows one of the popups.

I have never registered callback methods and did not have this error.  I am using Delphi 10.2 and Intraweb 15.1.9.  Due to some security issues the users can't use FireFox for now, so are seeing this popup a lot.  Is there an easy fix?  (How am I supposed to do this I guess I am asking.)  

Thanks,
David

Hi guys,

new IW 15.1.9 has been released.

https://www.atozed.com/2019/11/15-1-9/

This version is compatible with new RAD Studio 10.3.3 (RAD Studio 10.3 Rio, Update 3). Update 3 has not been released to general public yet, but this IW version can be also be installed on 10.3.2 (RAD Studio 10.3 Rio, Update 2 + Runtime compatibility patch). When Update 3 is released (soon) there will be no need to reinstall IntraWeb.

Enjoy! 

Hi,

How to correctly break SSL request that is launched in background thread ?
nowadays I have situation when TIdSSLSocket is destroyed after calling Disconnect:

Quote:IdSSLOpenSSL.TIdSSLSocket.Destroy
System.TObject.Free
IdSSLOpenSSL.TIdSSLIOHandlerSocketOpenSSL.Close
IdTCPConnection.TIdTCPConnection.Disconnect(???)
IdTCPConnection.TIdTCPConnection.Disconnect

Quote:IdSSLOpenSSL.TIdSSLSocket.Send(...)
IdSSLOpenSSL.TIdSSLIOHandlerSocketOpenSSL.SendEnc(???,???,224)
IdSSL.TIdSSLIOHandlerSocketBase.WriteDataToTarget(???,???,224)
IdIOHandler.TIdIOHandler.WriteDirect(...)
IdIOHandler.TIdIOHandler.WriteBufferFlush(???)
IdIOHandler.TIdIOHandler.WriteBufferFlush
IdIOHandler.TIdIOHandler.WriteBufferClose
IdHTTP.TIdHTTPProtocol.BuildAndSendRequest(???)
IdHTTP.TIdCustomHTTP.ConnectToHost($7EA93560,???)
IdHTTP.TIdCustomHTTP.DoRequest(???,'https://.....',$7E91CBF0,$7E9B7AA0,(...))
IdHTTP.TIdCustomHTTP.Post('https://......',$8663B0,$7E9B7AA0)

Hi,
In IW wwwroot, I have a folder ".well-known" and a subfolder "acme-challenge".

Then I put a file to test("test.txt") at 

Hi

I use a datamodule pool with my program. Each user can have a different db to look at. The usersession holds the path to that database,
Now i adjusted the Lock and Unlock :