<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://weblogs.asp.net/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Joshua Stengel - All Comments</title><link>http://weblogs.asp.net/jstengel/default.aspx</link><description>Yak Yak Yak Blog</description><dc:language>en</dc:language><generator>CommunityServer 2007 SP1 (Debug Build: 20510.895)</generator><item><title>re: Sorry, Vista...It's not you, it's me.</title><link>http://weblogs.asp.net/jstengel/archive/2008/06/09/sorry-vista-it-s-not-you-it-s-me.aspx#6266689</link><pubDate>Tue, 10 Jun 2008 15:26:27 GMT</pubDate><guid isPermaLink="false">c06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:6266689</guid><dc:creator>jstengel</dc:creator><description>&lt;p&gt;Yeah...it must sound like someone bitching about the fuel efficiency in their new streched Hummer, but I really do need three screens. &amp;nbsp;I did try it with just two for a couple of months but, since I work 1/2 at home and 1/2 at the office, it was tough to not have a similar environment in both places.&lt;/p&gt;
&lt;p&gt;I know, I know...&amp;quot;stupid gas guzzling streched Hummer...now I won't be able to add a hot tub.&amp;quot; :-)&lt;/p&gt;
&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=6266689" width="1" height="1"&gt;</description></item><item><title>re: Sorry, Vista...It's not you, it's me.</title><link>http://weblogs.asp.net/jstengel/archive/2008/06/09/sorry-vista-it-s-not-you-it-s-me.aspx#6265791</link><pubDate>Tue, 10 Jun 2008 09:02:57 GMT</pubDate><guid isPermaLink="false">c06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:6265791</guid><dc:creator>Guy Harwood</dc:creator><description>&lt;p&gt;stop being greedy - settle for 2 monitors ;-)&lt;/p&gt;
&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=6265791" width="1" height="1"&gt;</description></item><item><title>re: Flash/AJAX File Upload w/ Progress Server Control</title><link>http://weblogs.asp.net/jstengel/archive/2008/04/25/flash-file-upload-server-control.aspx#6252029</link><pubDate>Fri, 06 Jun 2008 05:17:34 GMT</pubDate><guid isPermaLink="false">c06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:6252029</guid><dc:creator>RN</dc:creator><description>&lt;p&gt;Thanks for the reply.&lt;/p&gt;
&lt;p&gt;As I am stuck with VS 2005, I had to use another very similar Flex app.&lt;/p&gt;
&lt;p&gt;&lt;a rel="nofollow" target="_new" href="http://www.codeproject.com/KB/aspnet/FlashUpload.aspx"&gt;www.codeproject.com/.../FlashUpload.aspx&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;RN&lt;/p&gt;
&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=6252029" width="1" height="1"&gt;</description></item><item><title>re: Flash/AJAX File Upload w/ Progress Server Control</title><link>http://weblogs.asp.net/jstengel/archive/2008/04/25/flash-file-upload-server-control.aspx#6250366</link><pubDate>Thu, 05 Jun 2008 15:41:21 GMT</pubDate><guid isPermaLink="false">c06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:6250366</guid><dc:creator>jstengel</dc:creator><description>&lt;p&gt;The project is VS2008-based. &amp;nbsp;You should be able to open in with Visual Studio 2008 or with the free Visual Web Developer Express 2008.&lt;/p&gt;
&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=6250366" width="1" height="1"&gt;</description></item><item><title>re: Flash/AJAX File Upload w/ Progress Server Control</title><link>http://weblogs.asp.net/jstengel/archive/2008/04/25/flash-file-upload-server-control.aspx#6249185</link><pubDate>Thu, 05 Jun 2008 06:27:26 GMT</pubDate><guid isPermaLink="false">c06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:6249185</guid><dc:creator>RN</dc:creator><description>&lt;p&gt;Hi&lt;/p&gt;
&lt;p&gt;Is this a VS 2008 or VS 2005?&lt;/p&gt;
&lt;p&gt;Mine is 2005 and fails to load.&lt;/p&gt;
&lt;p&gt;Thanks.&lt;/p&gt;
&lt;p&gt;RN&lt;/p&gt;
&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=6249185" width="1" height="1"&gt;</description></item><item><title>re: Flash/AJAX File Upload w/ Progress Server Control</title><link>http://weblogs.asp.net/jstengel/archive/2008/04/25/flash-file-upload-server-control.aspx#6248321</link><pubDate>Wed, 04 Jun 2008 20:52:09 GMT</pubDate><guid isPermaLink="false">c06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:6248321</guid><dc:creator>jstengel</dc:creator><description>&lt;p&gt;@Junior&lt;/p&gt;
&lt;p&gt;It sounds like you are looking for an Event hook onto. &amp;nbsp;Something like OnUploadComplete. &amp;nbsp;I don't know how you would get that from the javascript in the control.&lt;/p&gt;
&lt;p&gt;You might look at what you can do with the UploadHandler.aspx. &amp;nbsp;Maybe pass in a parameter for a session name to store the file name in?&lt;/p&gt;
&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=6248321" width="1" height="1"&gt;</description></item><item><title>re: Flash/AJAX File Upload w/ Progress Server Control</title><link>http://weblogs.asp.net/jstengel/archive/2008/04/25/flash-file-upload-server-control.aspx#6248085</link><pubDate>Wed, 04 Jun 2008 18:36:33 GMT</pubDate><guid isPermaLink="false">c06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:6248085</guid><dc:creator>Junior</dc:creator><description>&lt;p&gt;Congratulations... thats really a great experience to final user. &lt;/p&gt;
&lt;p&gt;I'm trying to modified the control to return the file name uploaded, but I'm having very dificuty to make it. &lt;/p&gt;
&lt;p&gt;Do you have any idea of how do it ?&lt;/p&gt;
&lt;p&gt;Thanks&lt;/p&gt;
&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=6248085" width="1" height="1"&gt;</description></item><item><title>re: Problem: Existing users will try to create new accounts</title><link>http://weblogs.asp.net/jstengel/archive/2008/06/02/problem-existing-users-try-to-create-new-accounts.aspx#6245097</link><pubDate>Tue, 03 Jun 2008 14:57:26 GMT</pubDate><guid isPermaLink="false">c06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:6245097</guid><dc:creator>jstengel</dc:creator><description>&lt;p&gt;Thanks for the good comments Raj,&lt;/p&gt;
&lt;p&gt;I know it *sounds* risky to just use the information from the registration form, but is it really? &amp;nbsp;Is the username/password somehow more valid on an official sign in form as opposed to the registration form, or does it just *feel* more valid?&lt;/p&gt;
&lt;p&gt;I would argue the source of the credentials is not relevant, in many cases, to authentication--valid credentials are valid credentials. Now if &amp;quot;valid credentials&amp;quot; means more than just a correct combination of username/password, then maybe this won't work but the majority of authentication schemes just rely on username/password.&lt;/p&gt;
&lt;p&gt;I've use the method of asking for an email address first as well and that's not a bad way to go.&lt;/p&gt;
&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=6245097" width="1" height="1"&gt;</description></item><item><title>re: Problem: Existing users will try to create new accounts</title><link>http://weblogs.asp.net/jstengel/archive/2008/06/02/problem-existing-users-try-to-create-new-accounts.aspx#6243542</link><pubDate>Tue, 03 Jun 2008 00:34:21 GMT</pubDate><guid isPermaLink="false">c06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:6243542</guid><dc:creator>rajbk</dc:creator><description>&lt;p&gt;Make the registration process two step. &lt;/p&gt;
&lt;p&gt;The first step asks for their email address. If the email address is not found, take them to the second step of the registration process. The registration step should collect a secret question/answer field and if possible, other personal information about the user.&lt;/p&gt;
&lt;p&gt;If the email address is found, the user is told that an account with the email address already exists and they are taken to the password recovery page. On the password recovery page, the users is prompted for a secret question or other personal information and if they get it right, a temporary password to the email. &lt;/p&gt;
&lt;p&gt;A caveat is that a user will be able to create multiple accounts using a different email address/different information. This is possible with most registration based websites anyway.&lt;/p&gt;
&lt;p&gt;I would not attempt authentication based on the information in a registration form - sounds risky. The only ways a person should be logged onto the system are:&lt;/p&gt;
&lt;p&gt;a) valid username/password&lt;/p&gt;
&lt;p&gt;b) knowledge of secret question/answer etc&lt;/p&gt;
&lt;p&gt;c) password reset by admin after verifying the user&lt;/p&gt;
&lt;p&gt;You could add more checks (roadblocks) depending on how secure you want the process to be.&lt;/p&gt;
&lt;p&gt;In addition, don't forget CAPTCHA like this one: &lt;a rel="nofollow" target="_new" href="http://recaptcha.net/"&gt;http://recaptcha.net/&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;This could grow into a long comment so I am stopping for now:-)&lt;/p&gt;
&lt;p&gt;Raj&lt;/p&gt;
&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=6243542" width="1" height="1"&gt;</description></item><item><title>re: What does it take to qualify for upgrade pricing for VS2008?</title><link>http://weblogs.asp.net/jstengel/archive/2008/03/04/what-does-it-take-to-qualify-for-upgrade-pricing-for-vs2008.aspx#6242856</link><pubDate>Mon, 02 Jun 2008 19:33:55 GMT</pubDate><guid isPermaLink="false">c06e2b9d-981a-45b4-a55f-ab0d8bbfdc1c:6242856</guid><dc:creator>jstengel</dc:creator><description>&lt;p&gt;I got a new workstation and re-installed VS from my upgrade disc with NO other developer tools installed and it went right on. &amp;nbsp;Never asked for my VS 2005 disc or anything. I think the license is probably relying on the &amp;quot;honor&amp;quot; system as opposed to actually checking the machine for a qualifying product. &lt;/p&gt;
&lt;img src="http://weblogs.asp.net/aggbug.aspx?PostID=6242856" width="1" height="1"&gt;</description></item></channel></rss>