Hi guys,

there is a new IntraWeb update available:

https://www.atozed.com/2022/10/intraweb-15-2-66/

This new version bring some new exciting features, e.g. the new IWSummernote control and new standard Bootstrap style used in IW Notify (ShowMessage, ShowPrompt, etc) and also IWModalWindow.

Enjoy! 

Dear Reader;
yesterday (October 12, 2022) all attempts to login/connect to MS Exchange server with TIdIMAP4 failed because MS has dropped support for IMAP4.
What options do I have for my old projects written with VCL2009 and Indy10? TIA. Boba.

Hello,
I have a little question :
I developed an application with Intraweb+boostrap which works perfectly, now I have to add the taking into account of "device" of the IOT type
These are sensors controlled by a microcontroller (ESP32) which communicate through wifi.
Each microcontroller is considered as a “node”, this “node” sends at regular intervals a “Json packet” which contains the values of the different sensors, in the form:
    String address = String("http://") + String(host) + String("/vsc/data/mc");
    http. begin(customer, address);
    http.addHeader("Content-Type", "application/json");
    int httpCode = http.POST(postData);

What I am trying to do is retrieve this frame in order to be able to store it and update the display of the current web page which contains the widgets corresponding to the values contained in this frame.
For the update of the page, I use a script which is in the html of the page, for example
  source.addEventListener('new_readings', function(e) {
    console.log("new_readings", e.data);
    var obj = JSON.parse(e.data);
    document.getElementById("mvolts").innerHTML = obj.mvolts;
    document.getElementById("lvolts").innerHTML = obj.lvolts;
    document.getElementById("afr").innerHTML = obj.afr;
  }, false);

I don't know what is the solution to use for the reception of this frame, create a "Contenthandler" as in the example "dyncontenthandler"? Or use another solution?
Thank you for your time
Alain

Kindly assist to resolve the below issue.
I am using the version 15.2.62

'SSL/TLS connections are vulnerable to the 'BREACH' (Browser Reconnaissance & Exfiltration via Adaptive Compression of Hypertext) attack.Angelo Prado Neal Harris and Yoel Gluck reported that SSL/TLS attacks are still viable via a 'BREACH' (Browser Reconnaissance & Exfiltration via Adaptive Compression of Hypertext) attack which they describe as: While CRIME was mitigated by disabling TLS/SPDY compression (and by modifying gzip to allow for explicit separation of compression contexts in SPDY) BREACH attacks HTTP responses. These are compressed using the common HTTP compression which is much more common than TLS-level compression. This allows essentially the same attack demonstrated by Duong and Rizzo but without relying on TLS-level compression (as they anticipated). It is important to note that the attack is agnostic to the version of TLS/SSL and does not require TLS-layer compression. Additionally the attack works against any cipher suite. Against a stream cipher the attack is simpler: The difference in sizes across response bodies is much more granular in this case. If a block cipher is used additional work must be done to align the output to the cipher text blocks.The flaw makes it easier for man-in-the-middle attackers to obtain plaintext secret values.'


Recommendation:
Mitigation The following mitigation possibilities are available: 1. Disabling HTTP compression 2. Separating secrets from user input 3. Randomizing secrets per request 4. Masking secrets (effectively randomizing by XORing with a random secret per request) 5. Protecting vulnerable pages with CSRF 6. Length hiding (by adding random number of bytes to the responses) 7. Rate-limiting the requests Note: The mitigations are ordered by effectiveness (not by their practicality - as this may differ from one application to another).

Hi,

I'm triying to compile using RAD 11.2 and get the following error message . [dcc64 Fatal Error] ICSWebCtrlPanel.dpr(80): F2051 Unit IWMime was compiled with a different version of InCoder.TIdEncoder.EncodeString

Any Hints?

Thanks in advance,

Omar Zelaya

Hi guys,

after some changes in Let's Encrypt interface we found out that our IntraWeb Certificate Manager stopped working correctly. 2 main issues were found and fixed.

There is a new update available:

http://downloads.atozed.com/intraweb/IWC....0.0.3.zip

Enjoy! 

Can i IWListbox change color selected item? green

I run my project which starts the server controller that will host my web application. I then try to access my web application in the browser or through my phones browser, and I get the message "Your session has expired due to inactivity.". 

Is there someone that can point me in the right direction trying to debug this?

I have a TIWText component called MyText.

I do

-- Any ASYNC event (for example OnAsyncClick of a TIWButton)
MyText.Text := 'My awesome text';
-- End of Any ASYNC event

The first time I see rendered the text 'My awesome text'.

If I run again the ASYNC event (I click again on the button),  the TIWText does render nothing. Empty HTML.

If I use this workaround

-- Any ASYNC event (for example OnAsyncClick of a TIWButton)
MyText.Lines.Clear;
MyText.Lines.Add('My very beautiful text');
-- End of Any ASYNC event

Then everything work great.


Tried in 15.2.56 (D11.2), no other versions.

Thanks,
Eddy

Hi!

I recently update my PC.
I install Windows 10 Pro version 21H2; then old my delphi stuff:
* Delphi Berlin
* Intraweb 15.2.10
* Report Builder 17.03
and other components just like my other PC.

With the same old code without changing nothing in the code, suddenly I can't get the download dialog for the files of Excel and Word; now I get the window just like the image below.


What can I do to get the dialog for saving the file?

Attached Files

Thumbnail(s)