Help! I am having problems with the Internet Security Settings

[janice_2k]

Dear gurus/member,
I am very new to internet security and activeX. I am facing some problems and hoping that someone out there could guide me.

I created an exe and dlls using vb6. This application is installed to the client's computer. Its a 1-time installation. Whenever the user clicks a button on my website. It will launch the application located on the user's computer. In order to call the application, I used vbscript to launch. The following is the script i used:

Dim fso,WshShell
set fso=CreateObject("Scripting.FileSystemObject")
Set WshShell = CreateObject("WScript.Shell") 

if fso.FileExists("C:\Program Files\IEBAudioRecorder\test.txt") then  'Give whole path to the file here
    msgBox("File Exists")
    WshShell.Run("C:\Progra~1\IEBAud~1\AudioRecorder.exe") 'run one.exe program
else
    msgbox("file not found, please download it")
    WshShell.Run("http://blackfeet:90/library/IEBSoundRecorder.exe") 'download installer from the server
end if

set fso=nothing
set WshShell=nothing

I noticed that if the client's internet security settings's ActiveX Controls and Plug-ins 3rd item, which is --> "Initialize and Script ActiveX controls not marked safe" is set to disabled, my vbscript will not run and the application isn't launched. If I change the setting to "prompt", an activeX pop up will be displayed to confirm whether to run or not. However, I don't think requesting all users to change their internet security to "Prompt" or "Enable" is a good idea, since by default, it is set to "Disable". However, I am not sure how could I solve my problems besides using this method.

Could signing a Digital Certificate allows the vbscript to launch the client side application despite the user's internet security setting's "Initialize and Script ActiveX controls not marked safe" is set to disabled?

How could I solve this problem? I sincerely hope that someone could help me, as I am at total lost and helpless now. Looking forward to some reply soon.

Thanks in advance,
Janice

[hypermax]

Hy Janice!

I'm understanding that u want to autoupdate your aplication (client-side). Corect me if i'm wrong.

You should see how Norton Antivirus or Yahoo Messenger is autoupdating. The autoupdate event occur when the client start the application not when he navigate the web site.

So, I sugest you to use INET (Microsoft Internet Transfer Control) like I post the recommendation in those threads:
http://www.vb-forum.com/showthread.p...hreadid=298881
http://www.vb-forum.com/showthread.p...hreadid=298442

In order to reproduce the autoupdate process, those events occur:
1) user start the application
2) the application use the inet control to communicate with the site
3) if the application find some updates, it start to download those updates
4) after download its the updates turn to start (if is an *.exe file)

The application installed on the end user pc can tell your site if the update is succeded (for this your must have a server script e.g. ASP).

Through INET you can send lot of informations and files to webserver and back.

If you have questions, please send me a private messege.

Have fun!

[janice_2k]

Hi Hypermax

Thanks for your reply. However, i think that's not really what I was looking for.

I created a vbscript function that launches an exe application on the user's PC. Since I am using Flash for my webpage, I use Actionscript (flash) to call the vbscript function. When the vbscript function is called, it 'creates an object'. The code I sent previously was the script I used in vbscript function to call the user's exe file.

I noticed that, by default, the user's browser has set 'Disable' for "Initialize and Script ActiveX controls not marked safe". If that's the case, my vbscript will not run and the application isn't launched. If I change the setting to "Prompt", an activeX pop up will be displayed to confirm whether to run or not. I don't think requesting the users to change their internet security to "Prompt" or "Enable" is a good idea as it will risk the users to malicious scriptings.

Is there any ways I can do to enable my vbscript running fine even without asking user to change their internet security settings? How could I solve this problem? Looking forward to some reply soon.

Thanks in advance,
Janice