hi,

I have a question about the iframe64 module. What encryption routine are you using? is it SHA1, CRC32 etc. I want to build the decryptor in the target pages.

Thanks

  Hi, 
      IFrame64 was just what I was looking for, but I am having issues with decription.

      I am trying to use the UrtUtils.DecryptParameter. I keep getting Null value errors. Here is my scenerio.    
      I have my IFrame64 set up with

     must be logged in checked.
     Encoding of Parameter Values: Encrypt
     Separator : &
     Query string is :
     Name : data     value : Static Value    the value is : "Goals"

     In Debug, this is what the qrystring looks like:
    "  Context.Request.QueryString {data=7KTwbwY6KIo%3d}  "

    This is how I am using he DecryptParameter :

   string ddata = UrlUtils.DecryptParameter(Context.Request.QueryString["data"]).ToString();    Here is the error I am getting.

Object reference not set to an instance of an object.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.NullReferenceException: Object reference not set to an instance of an object.

Source Error:

Line 40: /*string RETURNS FULL STRING ! - */ Line 41: // string datta = Server.UrlEncode(Request.QueryString["data"].ToString()); Line 42: string ddata = UrlUtils.DecryptParameter(Context.Request.QueryString["data"]).ToString(); Line 43: Line 44: //string datta = Page.Request.QueryString["data"];

Source File: c:\IQSys\iqDNN\mybodyscience\MBSLegacy\MBS_Traffic2.aspx    Line: 42

   I am just wondering If I am using the DecryptParameter correctly ?  The searches I have made look like I am.
   I did notice that when I look at what appears to be the source for this DecryptParameter Method, that it does get the GUID, but then it seems like it is getting what it
wants for a key before it calls objSecurity.Decrypt( strKey, Value );
   This is a sample : 

Should I be using something else to decrypt maybe ? 
Thanks for any advice

public static string DecryptParameter( string Value )

{

PortalSettings _portalSettings = PortalController.GetCurrentPortalSettings();

string strKey = _portalSettings.GUID.ToString(); // restrict the key to 6 characters to conserve space

PortalSecurity objSecurity = new PortalSecurity();

return objSecurity.Decrypt( strKey, Value );

}

  Hi Paul,
      I am new to dotnetnuke and C# / .NET for that matter. 
      I think it may be more than just the toString because I have tried it without the toString.
       I could be wrong, but from what I have read, it seems like when the IFrame launches this aspx file, it is said to be out of the dotnetnuke process, so it seems that some dotnetnuke classes become unavailable in this scenerio ?  So, it cant even see the UrlUtils class ?  

      When I tried it in a class I have in the app_code folder, I got a different error.

      So my questions now becomes, 
      1) you are using 3DES, correct ?
      2) did I think correctly about the aspx file being out of the dotnetnuke process when it is launched by IFrame ?
      3) Would you or anyone out there have a sample of a good decryption snippet to use with IFrame64 ?
      4) If you use base64, is it a common algorithem that can be used by someone to decrypt your URL ?

   thanks for for your time

Developing Modules for DNN can be a bit difficult if you get off to a bad start.

I would recommend you look at the Module Development book by Mitchel Sellers as it is a good introduction.  He uses the Web Application (WAP) method of development as do I.  I develop in VB.NET and find the combination very easy once you get going.

As for the decryption of the encrypted query parameters -- you should just need something like the following:

  sParameter = UrlUtils.DecryptParameter(sEncryptedParameter)

Notice, no need for the tostring.

Hopes this helps.
Paul.

  Man that came out terrible, i tried to cut and paste from an rtf document into this editor, dont know what happened there. I am just striking out with this site all the way around :-)
  Let me try to at least give you the code I used to test everything....  

public static string Decrypt3DES(string EncryptedText, string DecryptionKey)

{

// byte[] EText = System.Text.Encoding.UTF8.GetBytes(EncryptedText);
byte[] EText = Convert.FromBase64String(EncryptedText);

byte[] DKey = System.Text.Encoding.UTF8.GetBytes(DecryptionKey);

MemoryStream MStream = new MemoryStream();

TripleDESCryptoServiceProvider CSProvider = new TripleDESCryptoServiceProvider();

CryptoStream CStream = new CryptoStream(MStream, CSProvider.CreateDecryptor(DKey,

InitializationVector), CryptoStreamMode.Write);

CStream.Write(EText, 0, EText.Length);

CStream.FlushFinalBlock();

System.Text.Encoding NCoding = System.Text.Encoding.UTF8;

return NCoding.GetString(MStream.ToArray());

}