Updated: Saturday, November 29, 2014 Page 1

Transcription

1 ' Copyright 2013 Safe T Services - All Rights Reserved '=========================================================================================== 'Changed by Change Date Change Tag ' Description of Change 'Matt ms ' Added code to handle password recoveries. 'Matt ms ' Added code to support account reset via mobile device. 'Matt ms ' Added Prefix to mobile device numbers when sending a text via . '=========================================================================================== Partial Class AccountAssist Inherits System.Web.UI.Page Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load If Not Page.IsPostBack Then If Request.ServerVariables("SERVER_NAME").Contains("localhost") Then If (Request.ServerVariables("HTTPS") = "off") Then Dim strserver As String strserver = " & Request.ServerVariables("SERVER_NAME") & Request.ServerVariables("SCRIPT_NAME") Response.Redirect(strServer) If Request.ServerVariables("SERVER_NAME").Contains("localhost") Then Session("strEnvironment") = "Development" Session("strEnvironment") = "Production" Dim secureappsettings As NameValueCollection = System.Configuration.ConfigurationManager.GetSection("secureAppSettings" & Session("strEnvironment")) 'ms Session("strDataConnectString") = secureappsettings(session("strenvironment") & "Data") 'ms Session("strKeysConnectString") = secureappsettings(session("strenvironment") & "Keys") 'ms Dim m As New Misc Dim strunavailablemsg As String = "" strunavailablemsg = m.systemavailable() If strunavailablemsg = "" Then Session("SystemAvailable") = True If Session("strLanguage") Is Nothing Then If Request.Cookies("TTlang1") Is Nothing And Request.Cookies("TTlang2") Is Nothing Then Session("strLanguage") = "en" If Not Request.Cookies("TTlang1") Is Nothing Then Session("strLanguage") = Request.Cookies("TTlang1").Value Session("strLanguage") = Request.Cookies("TTlang2").Value If Session("strLanguage") = "" Then Session("strLanguage") = "en" If Session("strLanguage") = "en" Or strunavailablemsg <> "" Then litcontactus.text = "Contact Us" litpreferences.text = "Preferences" Updated: Saturday, November 29, 2014 Page 1

2 litprivacy.text = "Privacy" Dim local As New Local() Dim strplaceholder As String = "" local.localizetext(session("strdataconnectstring"), litcontactus.text, _ litpreferences.text, litprivacy.text, _ strplaceholder, strplaceholder, Session("strUsername"), _ Session("intUserID"), Session("strLanguage")) If Session("strEnvironment") = "Production" Then Session("strLoginURL") = " & Request.ServerVariables("SERVER_NAME") & "/SecureLogin.aspx" Session("strPWResetURL") = " & Request.ServerVariables("SERVER_NAME") & "/PWReset.aspx?code=" Session("strPWRecoveryURL") = " & Request.ServerVariables("SERVER_NAME") & "/PWRecovery.aspx?code=" Session("strLoginURL") = " & Request.ServerVariables("SERVER_NAME") & "/SecureLogin.aspx" Session("strPWResetURL") = " & Request.ServerVariables("SERVER_NAME") & "/PWReset.aspx?code=" Session("strPWRecoveryURL") = " & Request.ServerVariables("SERVER_NAME") & "/PWRecovery.aspx?code=" Session("Contact") = "customer.support@threadthat.com" Session(" FromAddress") = """ThreadThat Support"" <customer.support@threadthat.com>" Session("ApplicationName") = "ThreadThat.com" Session("IPAddress") = m.getipaddress LoadLiterals() Protected Sub LoadLiterals() Dim m As New Misc() Dim trow As New TableRow Dim tcell As New TableCell lblheading.text = m.gettext(session("strdataconnectstring"), 299, Session("strLanguage")) lbldescription.text = m.gettext(session("strdataconnectstring"), 593, Session("strLanguage")) trow = Table1.Rows(0) tcell = trow.cells(0) tcell.text = m.gettext(session("strdataconnectstring"), 570, Session("strLanguage")) trow = Table1.Rows(1) tcell = trow.cells(0) tcell.text = m.gettext(session("strdataconnectstring"), 574, Session("strLanguage")) cmdusername.text = m.gettext(session("strdataconnectstring"), 304, Session("strLanguage")) cmdpwreset.text = m.gettext(session("strdataconnectstring"), 305, Session("strLanguage")) cmdpwrecovery.text = m.gettext(session("strdataconnectstring"), 376, Session("strLanguage")) Protected Sub cmdusername_click(byval sender As Object, ByVal e As System.EventArgs) Handles cmdusername.click Dim errcode As Integer Dim m As New Misc() Dim u As New User() Dim ea As New Address() lblerrormsg.text = m.systemavailable() If lblerrormsg.text <> "" Then Exit Sub lblerrormsg.style("color") = "red" If txt address.text <> "" Then errcode = u.sendusername (session("strdataconnectstring"), Session("strKeysConnectString"), _ 'ms 'ms 'ms Updated: Saturday, November 29, 2014 Page 2

3 Session("IPAddress"), Session(" FromAddress"), txt address.text, _ Session("ApplicationName"), Session("strLoginURL"), Session("Contact"), _ lblerrormsg.text, Session("strLanguage")) If errcode <> 0 Then Exit Sub lblerrormsg.text = m.gettext(session("strdataconnectstring"), 598, Session("strLanguage")) If txtmobilenumber.text <> "" Then Dim strmobiledomain As String = "" Dim strmobileprefix As String = "" 'ms Dim strusername As String = "" Dim intuserid2 As Integer errcode = ea.getmobiledomaininfo(session("strdataconnectstring"), txtmobilenumber.text, strmobiledomain, strmobileprefix, _ strusername, intuserid2, lblerrormsg.text, Session("strLanguage")) 'ms If errcode = 0 Then Dim strfromwho As String Dim strtowho As String Dim strcc As String = "" Dim strbcc As String = "" Dim strsubject As String Dim strbody As String strfromwho = """ThreadThat Support"" <customer.support@threadthat.com>" strtowho = strmobileprefix & txtmobilenumber.text & "@" & strmobiledomain 'ms strsubject = "" strbody = m.gettext(session("strdataconnectstring"), 596, Session("strLanguage")) & strusername 'Call function to send username as a text message Dim mail As New mail.send(strfromwho, strtowho, strcc, strbcc, strsubject, strbody, False) If lblerrormsg.text = "" Then lblerrormsg.text = m.gettext(session("strdataconnectstring"), 599, Session("strLanguage")) lblerrormsg.text = m.gettext(session("strdataconnectstring"), 600, Session("strLanguage")) lblerrormsg.text = m.gettext(session("strdataconnectstring"), 594, Session("strLanguage")) If txt address.text = "" And txtmobilenumber.text = "" Then lblerrormsg.text = m.gettext(session("strdataconnectstring"), 612, Session("strLanguage")) If errcode = 0 Then lblerrormsg.style("color") = "green" cmdusername.enabled = False 'ms Protected Sub cmdpwreset_click(byval sender As Object, ByVal e As System.EventArgs) Handles cmdpwreset.click Dim errcode As Integer Dim m As New Misc() Dim u As New User() Updated: Saturday, November 29, 2014 Page 3

4 Dim ea As New Address() lblerrormsg.text = m.systemavailable() If lblerrormsg.text <> "" Then Exit Sub lblerrormsg.style("color") = "red" If txt address.text <> "" Then errcode = u.sendpwreset (session("strdataconnectstring"), _ Session("IPAddress"), Session(" FromAddress"), txt address.text, _ Session("ApplicationName"), Session("strPWResetURL"), Session("Contact"), _ lblerrormsg.text, Session("strLanguage")) Session("intResetUserID") = 0 If errcode <> 0 Then Exit Sub If txtmobilenumber.text <> "" Then Dim strmobiledomain As String = "" Dim strmobileprefix As String = "" 'ms Dim strusername As String = "" Dim intuserid As Integer = 0 errcode = ea.getmobiledomaininfo(session("strdataconnectstring"), txtmobilenumber.text, _ strmobiledomain, strmobileprefix, strusername, intuserid, _ lblerrormsg.text, Session("strLanguage")) 'ms If errcode = 0 Then If u.pwresetallowed(session("strdataconnectstring"), intuserid) Then Dim strfromwho As String Dim strtowho As String Dim strcc As String = "" Dim strbcc As String = "" Dim strsubject As String Dim strbody As String strfromwho = """ThreadThat Support"" <customer.support@threadthat.com>" strtowho = strmobileprefix & txtmobilenumber.text & "@" & strmobiledomain 'ms strsubject = "" 'Generate a random 6-digit number for the user to confirm they own the device. Dim rc As New Random() Dim intrandom As Integer intrandom = rc.next(100000, ) strbody = m.gettext(session("strdataconnectstring"), 595, Session("strLanguage")) & intrandom.tostring() Session("strConfirmationCode") = intrandom.tostring() Session("intResetUserID") = intuserid 'Call function to send confirmation code as a text message Dim mail As New mail.send(strfromwho, strtowho, strcc, strbcc, strsubject, strbody, False) Response.Redirect("PWReset.aspx") lblerrormsg.text = m.gettext(session("strdataconnectstring"), 610, Session("strLanguage")) lblerrormsg.text = lblerrormsg.text.replace("?1", txtmobilenumber.text) Updated: Saturday, November 29, 2014 Page 4

5 lblerrormsg.text = m.gettext(session("strdataconnectstring"), 594, Session("strLanguage")) If txt address.text = "" And txtmobilenumber.text = "" Then lblerrormsg.text = m.gettext(session("strdataconnectstring"), 612, Session("strLanguage")) If errcode = 0 Then lblerrormsg.style("color") = "green" cmdpwreset.enabled = False Protected Sub cmdpwrecovery_click(byval sender As Object, ByVal e As System.EventArgs) Handles cmdpwrecovery.click Dim errcode As Integer Dim m As New Misc() Dim u As New User() Dim ea As New Address() 'ms lblerrormsg.text = m.systemavailable() If lblerrormsg.text <> "" Then Exit Sub lblerrormsg.style("color") = "red" If txt address.text <> "" Then errcode = u.sendpwrecovery (session("strdataconnectstring"), Session("strKeysConnectString"), _ Session("IPAddress"), Session(" FromAddress"), txt address.text, _ Session("ApplicationName"), Session("strPWRecoveryURL"), Session("Contact"), _ lblerrormsg.text, Session("strLanguage")) Session("intResetUserID") = 0 If errcode <> 0 Then Exit Sub If txtmobilenumber.text <> "" Then Dim strmobiledomain As String = "" Dim strmobileprefix As String = "" 'ms Dim strusername As String = "" Dim intuserid As Integer = 0 errcode = ea.getmobiledomaininfo(session("strdataconnectstring"), txtmobilenumber.text, _ strmobiledomain, strmobileprefix, strusername, intuserid, _ lblerrormsg.text, Session("strLanguage")) 'ms If errcode = 0 Then Dim strfromwho As String Dim strtowho As String Dim strcc As String = "" Dim strbcc As String = "" Dim strsubject As String Dim strbody As String strfromwho = """ThreadThat Support"" <customer.support@threadthat.com>" Updated: Saturday, November 29, 2014 Page 5

6 strtowho = strmobileprefix & txtmobilenumber.text & "@" & strmobiledomain 'ms strsubject = "" 'Generate a random 6-digit number for the user to confirm they own the device. Dim rc As New Random() Dim intrandom As Integer intrandom = rc.next(100000, ) strbody = m.gettext(session("strdataconnectstring"), 614, Session("strLanguage")) & intrandom.tostring() Session("strConfirmationCode") = intrandom.tostring() Session("intRestoreUserID") = intuserid 'Call function to send confirmation code as a text message Dim mail As New mail.send(strfromwho, strtowho, strcc, strbcc, strsubject, strbody, False) Response.Redirect("PWRecovery.aspx") lblerrormsg.text = m.gettext(session("strdataconnectstring"), 594, Session("strLanguage")) If txt address.text = "" And txtmobilenumber.text = "" Then lblerrormsg.text = m.gettext(session("strdataconnectstring"), 612, Session("strLanguage")) If errcode = 0 Then lblerrormsg.style("color") = "green" cmdpwrecovery.enabled = False End Class Updated: Saturday, November 29, 2014 Page 6

7 ' Copyright 2014 Safe T Services - All Rights Reserved Imports System.IO Imports System.Data Imports System.Reflection Imports CuteWebUI Imports WODCRYPTCOMLib '=========================================================================================== 'Changed by Change Date Change Tag ' Description of Change 'Matt N/A ' Original Version. 'Matt ms ' Added DisplayOrder parameter to List call. 'Matt ms ' Fixed heading for uploaded file list. 'Matt ms ' Changed page size to 100. '=========================================================================================== Partial Class AddAnonAttachment Inherits System.Web.UI.Page Protected Overloads Overrides Sub OnInit(ByVal e As EventArgs) MyBase.OnInit(e) If Request.Browser.Browser = "Opera" Then Response.Cache.SetCacheability(HttpCacheability.NoCache) Protected Overloads Overrides Sub OnLoad(ByVal e As EventArgs) MyBase.OnLoad(e) If Not IsPostBack Then GridView1.DataBind() Public ReadOnly Property PageNumber() As Integer Get Dim pagenum As Integer = 1 Dim page As String = Context.Request.QueryString("Page") If Not String.IsNullOrEmpty(page) Then If Not Integer.TryParse(page, pagenum) Then pagenum = 1 If pagenum < 1 Then pagenum = 1 Return pagenum End Get End Property Sub Page_PreInit(ByVal sender As Object, ByVal e As EventArgs) Handles Me.PreInit If Not Page.IsPostBack Then Dim t As New Thread If Request.ServerVariables("SERVER_NAME").Contains("localhost") Then Session("strEnvironment") = "Development" Updated: Saturday, November 29, 2014 Page 7

8 'ms Session("strEnvironment") = "Production" Dim secureappsettings As NameValueCollection = System.Configuration.ConfigurationManager.GetSection("secureAppSettings" & Session("strEnvironment")) Session("strDataConnectString") = secureappsettings(session("strenvironment") & "Data") 'ms Session("strKeysConnectString") = secureappsettings(session("strenvironment") & "Keys") 'ms If Session("intThreadID") = Nothing Then Response.Redirect("GetThread.aspx") If t.repliesareallowed(session("strdataconnectstring"), Session("intUserID"), Session("intThreadID")) Then Response.Redirect("GetThread.aspx") If Request.ServerVariables("SERVER_NAME").Contains("test") Or Request.ServerVariables("SERVER_NAME").Contains("localhost") Then If (Request.ServerVariables("HTTPS") = "off") Then Dim strserver As String strserver = " & Request.ServerVariables("SERVER_NAME") & Request.ServerVariables("SCRIPT_NAME") Response.Redirect(strServer) Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load Dim m As New Misc Dim u As New User Dim t As New Thread Dim strunavailablemsg As String = "" If Not Page.IsPostBack Then strunavailablemsg = m.systemavailable() Session("strLanguage") = "en" Dim stripaddress = m.getipaddress Session("IPAddr") = stripaddress If Not t.threadexists(session("strdataconnectstring"), Session("intThreadID")) Then Session.Remove("intThreadID") Response.Redirect("Threads.aspx") If strunavailablemsg <> "" Then Session("SystemMessage") = strunavailablemsg Response.Redirect("SystemMessage.aspx") If Session("strEnvironment") = "Production" Then Session("strLoginURL") = " & Request.ServerVariables("SERVER_NAME") & "/SecureLogin.aspx" Session("strAnonymousURL") = " & Request.ServerVariables("SERVER_NAME") & "/GetThread.aspx" Session("strLoginURL") = " & Request.ServerVariables("SERVER_NAME") & "/SecureLogin.aspx" Session("strAnonymousURL") = " & Request.ServerVariables("SERVER_NAME") & "/GetThread.aspx" InitAddAttachmentPanel() txttimeoutduration.value = 60 If boolforcetimeout.value = "true" Then lblerrormsg.text = "Your session has timed out. If you need to view this Thread again, please click the original link sent to your account." Updated: Saturday, November 29, 2014 Page 8

9 Session.Remove("intThreadID") Session.Remove("strPassKey") Protected Sub InitAddAttachmentPanel() Dim radthreadtype As New ListItem Dim m As New Misc Dim t As New Thread Dim trow As New TableRow Dim tcell As New TableCell lblheading.text = m.gettext(session("strdataconnectstring"), 232, Session("strLanguage")) lblinstructions.text = m.gettext(session("strdataconnectstring"), 233, Session("strLanguage")) Uploader1.InsertText = m.gettext(session("strdataconnectstring"), 232, Session("strLanguage")) & "(<100MB)" cmddelete.text = m.gettext(session("strdataconnectstring"), 237, Session("strLanguage")) cmdreturn.text = m.gettext(session("strdataconnectstring"), 238, Session("strLanguage")) Uploader1.FileTooLargeMsg = m.gettext(session("strdataconnectstring"), 244, Session("strLanguage")) Protected Sub GridView1_DataBinding(ByVal sender As Object, ByVal e As EventArgs) Dim pageindex As Integer = (PageNumber - 1) Dim count As Integer = 100 'ms Dim start As Integer = pageindex * count Dim total As Integer = 0 Dim errcode As Integer Dim arrattachmentid() As Integer Dim arruserid() As Integer Dim arrusername() As String Dim arrdatetime() As DateTime Dim arrinternalfilename() As String Dim arrserverfilename() As String Dim arrdisplayorder() As String 'ms Dim arrfilesize() As Integer Dim a As New Attachment() Dim m As New Misc() Dim u As New User() Dim strerrormsg As String Dim arrpasskeys() As String ReDim Preserve arrpasskeys(0) arrpasskeys(0) = Session("strPassKey") errcode = a.list(session("strdataconnectstring"), Session("strKeysConnectString"), Session("strDataEncryptionKeyToUse"), Session("IPAddr"), Session("intUserID"), _ Session("intThreadID"), "", 0, arrpasskeys, arrattachmentid, arruserid, _ arrusername, arrdatetime, arrinternalfilename, arrserverfilename, arrfilesize, arrdisplayorder, strerrormsg, Session("strLanguage")) 'ms If errcode <> 0 Then lblerrormsg.text = strerrormsg Exit Sub Dim i As Integer Dim tblattachments As New DataTable Dim AttachmentID As DataColumn = New DataColumn("AttachmentID") AttachmentID.DataType = System.Type.GetType("System.Int32") Dim FileName As DataColumn = New DataColumn("FileName") FileName.DataType = System.Type.GetType("System.String") Dim ServerFileName As DataColumn = New DataColumn("ServerFileName") Updated: Saturday, November 29, 2014 Page 9

10 ServerFileName.DataType = System.Type.GetType("System.String") Dim FileSize As DataColumn = New DataColumn("FileSize") FileSize.DataType = System.Type.GetType("System.Int32") Dim UploadTime As DataColumn = New DataColumn("UploadTime") UploadTime.DataType = System.Type.GetType("System.String") Dim UploadedBy As DataColumn = New DataColumn("UploadedBy") UploadedBy.DataType = System.Type.GetType("System.String") tblattachments.columns.add(attachmentid) tblattachments.columns.add(filename) tblattachments.columns.add(serverfilename) tblattachments.columns.add(filesize) tblattachments.columns.add(uploadtime) tblattachments.columns.add(uploadedby) Dim j As Integer = 0 If arrattachmentid Is Nothing Then For i = start To arrattachmentid.length - 1 Dim r As DataRow r = tblattachments.newrow() r.item("attachmentid") = arrattachmentid(i) r.item("filename") = arrinternalfilename(i) r.item("serverfilename") = arrserverfilename(i) r.item("filesize") = arrfilesize(i) r.item("uploadtime") = m.adjusttime(arrdatetime(i), Session("decGMTAdjustment"), False) r.item("uploadedby") = arrusername(i) tblattachments.rows.add(r) j += 1 If j = count Then Exit For Next total = arrattachmentid.length GridView1.DataSource = tblattachments Dim pagecount As Integer = total / count If pagecount = 0 Then pagecount = 1 If pageindex > 0 Then LinkFirst.Enabled = True LinkPrev.Enabled = True LinkFirst.Enabled = False LinkPrev.Enabled = False If pagecount > 1 Then If pageindex < pagecount - 1 Then LinkLast.Enabled = True LinkNext.Enabled = True LinkLast.Enabled = False LinkNext.Enabled = False Updated: Saturday, November 29, 2014 Page 10

11 LinkLast.Enabled = False LinkNext.Enabled = False SetLink(LinkFirst, 0, 239) SetLink(LinkPrev, pageindex - 1, 240) SetLink(LinkNext, pageindex + 1, 241) SetLink(LinkLast, pagecount - 1, 242) LabelPage.Text = String.Format("[ {0} ]", pageindex + 1) Protected Sub GridView1_DataBound(ByVal sender As Object, ByVal e As EventArgs) 'Set the checkbox enabled property for each visible checkbox. If the user that is logged in is not the user that uploaded the 'attachment and they are not the owner of the thread, then disable the checkbox. Dim a As New Attachment() Dim m As New Misc() Dim t As New Thread() Dim errcode As Integer Dim introwcount As Integer = 0 Dim intfileuserid As Integer Dim dtdatetime As DateTime Dim strinternalfilename As String Dim strfiledescription As String Dim strdataencryptionkeytouse As String Dim strserverfilename As String Dim intfilesize As Integer Dim strerrormsg As String If Not t.threadexists(session("strdataconnectstring"), Session("intThreadID")) Then Session.Remove("intThreadID") Response.Redirect("GetThread.aspx") Dim arrpasskeys() As String ReDim Preserve arrpasskeys(0) arrpasskeys(0) = Session("strPassKey") Dim boolisthreadowner As Boolean = t.isthreadowner(session("strdataconnectstring"), Session("intUserID"), Session("intThreadID")) For Each row As GridViewRow In GridView1.Rows If row.rowtype = DataControlRowType.DataRow Then introwcount += 1 Dim cb As CheckBox = DirectCast(row.FindControl("CheckBoxSelect"), CheckBox) Dim fileid As Integer = CInt(GridView1.DataKeys(row.RowIndex).Value) errcode = a.read(session("strdataconnectstring"), Session("strKeysConnectString"), Session("strDataEncryptionKeyToUse"), Session("IPAddr"), Session("intUserID"), _ Session("intThreadID"), "", 0, arrpasskeys, fileid, False, _ intfileuserid, dtdatetime, strinternalfilename, strserverfilename, intfilesize, strfiledescription, _ strdataencryptionkeytouse, strerrormsg, Session("strLanguage")) 'removed check for file owner/thread owner. Always make delete checkbox enabled. cb.enabled = True Next If GridView1.Rows.Count = 0 Then Dim tbl As Table = GridView1.Controls(0) Dim gvr As GridViewRow = tbl.controls(0) Dim cell As TableCell = gvr.cells(0) Dim lblempty As Label = cell.findcontrol("lblempty") lblempty.text = m.gettext(session("strdataconnectstring"), 234, Session("strLanguage")) Updated: Saturday, November 29, 2014 Page 11

12 If strerrormsg <> "" Then lblerrormsg.text = strerrormsg Protected Sub GridView1_RowCreated(ByVal sender As Object, ByVal e As GridViewRowEventArgs) If e.row.rowtype = DataControlRowType.Header Then Dim m As New Misc() Dim i As Integer = 0 For Each c As TableCell In e.row.cells Select Case i Case 2 'ms c.text = m.gettext(session("strdataconnectstring"), 245, Session("strLanguage")) Case 3 'ms c.text = m.gettext(session("strdataconnectstring"), 488, Session("strLanguage")) Case 4 'ms c.text = m.gettext(session("strdataconnectstring"), 246, Session("strLanguage")) Case 5 'ms c.text = m.gettext(session("strdataconnectstring"), 247, Session("strLanguage")) Case 6 'ms c.text = m.gettext(session("strdataconnectstring"), 248, Session("strLanguage")) End Select i += 1 Next Private Sub SetLink(ByVal link As HyperLink, ByVal pageindex As Integer, ByVal intmsgnumber As Integer) Dim m As New Misc() Dim num As Integer = pageindex + 1 link.navigateurl = "AddAttachment.aspx?Page=" & num.tostring() link.text = m.gettext(session("strdataconnectstring"), intmsgnumber, Session("strLanguage")) Protected Sub Uploader1_FileUploaded(ByVal sender As Object, ByVal args As UploaderEventArgs) Dim a As New Attachment() Dim m As New Misc() Dim errcode As Integer Dim dir As String = Server.MapPath("~/Attachments/") Dim newname As String = args.fileguid.tostring() Dim strfileextension As String Dim strencryptionpasskey As String Dim arrpasskeys() As String ReDim Preserve arrpasskeys(0) arrpasskeys(0) = Session("strPassKey") Dim i As Integer = args.filename.length() 'Edits for supported extensions and filesize are done on the client, but are repeated here in case user has javascript disabled. Do i -= 1 If i < 1 Then lblerrormsg.text = m.gettext(session("strdataconnectstring"), 235, Session("strLanguage")) lblerrormsg.text = lblerrormsg.text.replace("?1", args.filename) Exit Sub If args.filename.substring(i, 1) = "." Then Dim intextlength As Integer = args.filename.length() - i intextlength -= 1 Updated: Saturday, November 29, 2014 Page 12

13 i += 1 strfileextension = args.filename.substring(i, intextlength) If a.isfiletypesupported(session("strdataconnectstring"), strfileextension, lblerrormsg.text) Then Exit Do lblerrormsg.text = m.gettext(session("strdataconnectstring"), 235, Session("strLanguage")) lblerrormsg.text = lblerrormsg.text.replace("?1", args.filename) Exit Sub Loop 'Max file size is 100MB If args.filesize > Then lblerrormsg.text = m.gettext(session("strdataconnectstring"), 236, Session("strLanguage")) lblerrormsg.text = lblerrormsg.text.replace("?1", args.filename) Exit Sub 'When adding an anonymous attachment, we use the Address ID of the user initiating the upload. errcode = a.add(session("strdataconnectstring"), Session("strKeysConnectString"), Session("strDataEncryptionKeyToUse"), Session("IPAddr"), Session(" AddressID"), _ Session("intThreadID"), arrpasskeys, Session("strPassword"), Session("intKeyboxID"), args.filename, _ newname & ".enc", args.filesize, True, strencryptionpasskey, lblerrormsg.text, Session("strLanguage")) If errcode <> 0 Then Exit Sub args.moveto(path.combine(dir, newname)) EncryptFile(newname, strencryptionpasskey) Protected Sub Uploader1_UploadCompleted(ByVal sender As Object, ByVal args As UploaderEventArgs()) 'Setting boolselectfirstentry so that the correct entry will be selected if the user returns to the console. Session("boolSelectFirstEntry") = True 'Add a message to the thread specifying the files that were uploaded. Dim m As New Misc() Dim t As New Thread() Dim boolisdraft As Boolean = t.isdraftthread(session("strdataconnectstring"), Session("intThreadID")) Dim strmessage As String = "" For Each fn As UploaderEventArgs In args If strmessage = "" Then strmessage = m.gettext(session("strdataconnectstring"), 257, Session("strLanguage")) strmessage = strmessage.replace("?1", Session("strUsername")) strmessage += "<br />" strmessage += fn.filename Next GridView1.DataBind() Protected Sub cmddelete_click(byval sender As Object, ByVal e As EventArgs) Dim t As New Thread() Dim boolisdraft As Boolean = t.isdraftthread(session("strdataconnectstring"), Session("intThreadID")) Dim fileids As New List(Of Integer)() For Each row As GridViewRow In GridView1.Rows If row.rowtype = DataControlRowType.DataRow Then Dim cb As CheckBox = DirectCast(row.FindControl("CheckBoxSelect"), CheckBox) Updated: Saturday, November 29, 2014 Page 13

14 If cb IsNot Nothing AndAlso cb.checked Then Try Dim fileid As Integer = CInt(GridView1.DataKeys(row.RowIndex).Value) fileids.add(fileid) Catch cb.checked = False End Try Next If fileids.count = 0 Then Return Dim filedir As String = Server.MapPath("~/Attachments/") Dim errcode As Integer Dim intfileuserid As Integer Dim dtdatetime As DateTime Dim strinternalfilename As String Dim strfiledescription As String Dim strserverfilename As String Dim strencryptionpasskey As String Dim intfilesize As Integer Dim a As New Attachment() Dim m As New Misc() Dim strmessage As String = "" Dim arrpasskeys() As String ReDim Preserve arrpasskeys(0) arrpasskeys(0) = Session("strPassKey") For Each fileid As Integer In fileids errcode = a.read(session("strdataconnectstring"), Session("strKeysConnectString"), "", Session("IPAddr"), Session("intUserID"), _ Session("intThreadID"), "", Session("intKeyboxID"), arrpasskeys, fileid, False, intfileuserid, _ dtdatetime, strinternalfilename, strserverfilename, intfilesize, strfiledescription, _ strencryptionpasskey, lblerrormsg.text, Session("strLanguage")) If errcode = 0 Then errcode = a.delete(session("strdataconnectstring"), Session("IPAddr"), Session("intUserID"), fileid, _ filedir, lblerrormsg.text, Session("strLanguage")) If errcode = 0 Then If strmessage = "" Then strmessage = m.gettext(session("strdataconnectstring"), 256, Session("strLanguage")) strmessage = strmessage.replace("?1", Session("strUsername")) strmessage += "<br />" strmessage += strinternalfilename Next Dim message As New Message() GridView1.DataBind() 'Force the first entry to be selected when the user returns to the console. Session("boolSelectFirstEntry") = True Protected Sub cmdreturn_click(byval sender As Object, ByVal e As EventArgs) ScriptManager.RegisterStartupScript(Page, Me.GetType(), "Redirect1", "RedirectTo('GetThread.aspx');", True) Updated: Saturday, November 29, 2014 Page 14

15 Protected Sub EncryptFile(ByVal filename As String, ByVal strencryptionpasskey As String) Dim cm As New wodcryptcom cm.licensekey = "?" Dim infile As New FileBlob Dim outfile As New FileBlob infile.filename = Server.MapPath("~/Attachments/" & filename) infile.autodelete = True outfile.filename = Server.MapPath("~/Attachments/" & filename & ".enc") cm.secretkey = strencryptionpasskey cm.type = CryptoTypes.AES cm.encrypt(infile, outfile) infile.filename = "" infile = Nothing outfile = Nothing cm = Nothing End Class Updated: Saturday, November 29, 2014 Page 15

16 ' Copyright 2013 Safe T Services - All Rights Reserved Imports System.IO Imports System.Data Imports System.Reflection Imports CuteWebUI Imports WODCRYPTCOMLib '=========================================================================================== 'Changed by Change Date Change Tag ' Description of Change 'Matt N/A ' Original Version. 'Matt ms ' Added check for to make sure that the threadid and userid are available and replies ' are allowed when program starts. If not, redirect to Thread console. 'Matt ms ' Added file description field to Attachment Read function. 'Matt ms ' Changed to return to Threads page for draft threads. 'Matt ms ' Changed to turn draft indicator off when Continue button is clicked. 'Matt ms ' Added 2 new checkboxes for controlling notifications. 'Matt ms ' Added subject to notification call. 'Matt ms ' Added server file name to the file list. Allow anyone with access to the Thread to ' delete files. Fixed Upload time conversion. 'Matt ms ' Increased max file size to 100MB. Added check for Thread existence. 'Matt ms ' Added parameter to SendMessageNotification . 'Matt ms ' Changed to convert dates to user's preferred format. 'Matt ms ' Removed extraneous parameter from SendMessageNotification call. 'Matt ms ' Added new parameter to the Add function call. 'Matt ms ' Added updateable display order column to attachment grid. 'Matt ms ' Fixed heading for uploaded file list. 'Matt ms ' Added handling for failed file deletes. '=========================================================================================== Partial Class AddAttachment Inherits System.Web.UI.Page Protected Overloads Overrides Sub OnInit(ByVal e As EventArgs) MyBase.OnInit(e) If Request.Browser.Browser = "Opera" Then Response.Cache.SetCacheability(HttpCacheability.NoCache) Protected Overloads Overrides Sub OnLoad(ByVal e As EventArgs) MyBase.OnLoad(e) Updated: Saturday, November 29, 2014 Page 16

17 If Not IsPostBack Then GridView1.DataBind() Public ReadOnly Property PageNumber() As Integer Get Dim pagenum As Integer = 1 Dim page As String = Context.Request.QueryString("Page") If Not String.IsNullOrEmpty(page) Then If Not Integer.TryParse(page, pagenum) Then pagenum = 1 If pagenum < 1 Then pagenum = 1 Return pagenum End Get End Property Sub Page_PreInit(ByVal sender As Object, ByVal e As EventArgs) Handles Me.PreInit If Not Page.IsPostBack Then Dim t As New Thread 'ms If Request.ServerVariables("SERVER_NAME").Contains("test") Or Request.ServerVariables("SERVER_NAME").Contains("localhost") Then Session("strEnvironment") = "Development" Session("strEnvironment") = "Production" If Session("intThreadID") = Nothing Then 'ms Response.Redirect("Threads.aspx") 'ms 'ms If t.repliesareallowed(session("strdataconnectstring"), Session("intUserID"), Session("intThreadID")) Then 'ms 'ms Response.Redirect("Threads.aspx") 'ms 'ms 'ms If Request.ServerVariables("SERVER_NAME").Contains("test") Or Request.ServerVariables("SERVER_NAME").Contains("localhost") Then If (Request.ServerVariables("HTTPS") = "off") Then Dim strserver As String strserver = " & Request.ServerVariables("SERVER_NAME") & Request.ServerVariables("SCRIPT_NAME") Response.Redirect(strServer) Protected Sub Page_Load(ByVal sender As Object, ByVal e As System.EventArgs) Handles Me.Load Dim m As New Misc Dim u As New User Dim t As New Thread 'ms If Not Page.IsPostBack Then Dim strunavailablemsg As String = "" strunavailablemsg = m.systemavailable() If strunavailablemsg = "" Then Session("SystemAvailable") = True Updated: Saturday, November 29, 2014 Page 17

18 If Request.Cookies("TTlang1") Is Nothing And Request.Cookies("TTlang2") Is Nothing Then Session("strLanguage") = "en" If Not Request.Cookies("TTlang1") Is Nothing Then Session("strLanguage") = Request.Cookies("TTlang1").Value Session("strLanguage") = Request.Cookies("TTlang2").Value Dim local As New Local() local.localizetext(session("strdataconnectstring"), litcontactus.text, _ litpreferences.text, litprivacy.text, _ lnkloginlogout.text, lblusername.text, Session("strUsername"), _ Session("intUserID"), Session("strLanguage")) Dim stripaddress = m.getipaddress Session("IPAddr") = stripaddress If Session("intUserID") Is Nothing Or Session("intThreadID") Is Nothing Then Response.Redirect("Threads.aspx") If Not t.threadexists(session("strdataconnectstring"), Session("intThreadID")) Then Session.Remove("intThreadID") 'ms 'ms 'ms Response.Redirect("Threads.aspx") Session("SystemMessage") = strunavailablemsg Response.Redirect("SystemMessage.aspx") If Session("strEnvironment") = "Production" Then Session("strLoginURL") = " & Request.ServerVariables("SERVER_NAME") & "/SecureLogin.aspx" Session("strAnonymousURL") = " & Request.ServerVariables("SERVER_NAME") & "/GetThread.aspx" Session("strLoginURL") = " & Request.ServerVariables("SERVER_NAME") & "/SecureLogin.aspx" Session("strAnonymousURL") = " & Request.ServerVariables("SERVER_NAME") & "/GetThread.aspx" InitAddAttachmentPanel() txttimeoutduration.value = u.gettimeoutduration(session("strdataconnectstring"), Session("intUserID")) If boolforcetimeout.value = "true" And Not Session("intUserID") Is Nothing Then Session("loginmsg") = m.gettext(session("strdataconnectstring"), 196, Session("strLanguage")) Session("loginmsg") = Session("loginmsg").ToString.Replace("?1", txttimeoutduration.value) u.logout(session("strdataconnectstring"), Session("IPAddr"), Session("intUserID")) Session.Remove("strPassword") Session.Remove("arrPasskeys") Session.Remove("strUsername") Session.Remove("intUserID") Session.Remove("intThreadID") Session.Remove("selIndex") Response.Redirect("SecureLogin.aspx") Protected Sub InitAddAttachmentPanel() Dim radthreadtype As New ListItem Dim m As New Misc Dim t As New Thread Dim trow As New TableRow 'ms 'ms Updated: Saturday, November 29, 2014 Page 18

19 Dim tcell As New TableCell lblheading.text = m.gettext(session("strdataconnectstring"), 232, Session("strLanguage")) lblinstructions.text = m.gettext(session("strdataconnectstring"), 233, Session("strLanguage")) Uploader1.InsertText = m.gettext(session("strdataconnectstring"), 232, Session("strLanguage")) & "(<100MB)" cmddelete.text = m.gettext(session("strdataconnectstring"), 237, Session("strLanguage")) If Session("FromPage") <> "AddThread" Or (Not Request.QueryString("from") Is Nothing) Then If t.isdraftthread(session("strdataconnectstring"), Session("intThreadID")) Then cmdsend.text = m.gettext(session("strdataconnectstring"), 470, Session("strLanguage")) cmdsave.text = m.gettext(session("strdataconnectstring"), 481, Session("strLanguage")) cmdreturn.visible = False chkcustomizenotification.visible = True cmdreturn.text = m.gettext(session("strdataconnectstring"), 238, Session("strLanguage")) cmdsend.visible = False cmdsave.visible = False chksendnotifications.visible = True chksendnotifications.checked = True cmdreturn.visible = False If t.isdraftthread(session("strdataconnectstring"), Session("intThreadID")) Then cmdsend.text = m.gettext(session("strdataconnectstring"), 470, Session("strLanguage")) cmdsave.text = m.gettext(session("strdataconnectstring"), 472, Session("strLanguage")) chkcustomizenotification.visible = True cmdsend.visible = False cmdsave.visible = False chksendnotifications.visible = True chksendnotifications.checked = True If Session("boolCustomizeNotification") Is Nothing Then If chkcustomizenotification.visible = True Then chkcustomizenotification.checked = Session("boolCustomizeNotification") cmdsaveorder.text = m.gettext(session("strdataconnectstring"), 643, Session("strLanguage")) lblinfo.text = m.gettext(session("strdataconnectstring"), 642, Session("strLanguage")) Uploader1.FileTooLargeMsg = m.gettext(session("strdataconnectstring"), 244, Session("strLanguage")) chkcustomizenotification.text = m.gettext(session("strdataconnectstring"), 486, Session("strLanguage")) 'ms 'ms 'ms 'ms 'ms 'ms 'ms 'ms 'ms 'ms 'ms 'ms 'ms 'ms 'ms 'ms chkcustomizenotification.tooltip = m.gettext(session("strdataconnectstring"), 453, Session("strLanguage")) 'ms chksendnotifications.text = m.gettext(session("strdataconnectstring"), 484, Session("strLanguage")) 'ms chksendnotifications.tooltip = m.gettext(session("strdataconnectstring"), 485, Session("strLanguage")) 'ms Protected Sub GridView1_DataBinding(ByVal sender As Object, ByVal e As EventArgs) Dim pageindex As Integer = (PageNumber - 1) Dim count As Integer = 100 Dim start As Integer = pageindex * count Dim total As Integer = 0 Dim errcode As Integer Dim arrattachmentid() As Integer Dim arruserid() As Integer Dim arrusername() As String Updated: Saturday, November 29, 2014 Page 19

20 Dim arrdatetime() As DateTime Dim arrinternalfilename() As String Dim arrserverfilename() As String Dim arrdisplayorder() As String 'ms Dim arrfilesize() As Integer Dim a As New Attachment() Dim m As New Misc() Dim u As New User() 'ms Dim strdateformat As String = u.getdateformatpreference(session("strdataconnectstring"), Session("intUserID")) 'ms Dim strerrormsg As String errcode = a.list(session("strdataconnectstring"), Session("strKeysConnectString"), "", Session("IPAddr"), Session("intUserID"), _ Session("intThreadID"), Session("strPassword"), Session("intKeyboxID"), Session("arrPasskeys"), arrattachmentid, arruserid, _ arrusername, arrdatetime, arrinternalfilename, arrserverfilename, arrfilesize, arrdisplayorder, strerrormsg, Session("strLanguage")) 'ms If errcode <> 0 Then lblerrormsg.text = strerrormsg Exit Sub Dim i As Integer Dim tblattachments As New DataTable Dim AttachmentID As DataColumn = New DataColumn("AttachmentID") AttachmentID.DataType = System.Type.GetType("System.Int32") Dim FileName As DataColumn = New DataColumn("FileName") FileName.DataType = System.Type.GetType("System.String") Dim ServerFileName As DataColumn = New DataColumn("ServerFileName") 'ms ServerFileName.DataType = System.Type.GetType("System.String") 'ms Dim FileSize As DataColumn = New DataColumn("FileSize") FileSize.DataType = System.Type.GetType("System.Int32") Dim UploadTime As DataColumn = New DataColumn("UploadTime") UploadTime.DataType = System.Type.GetType("System.String") Dim UploadedBy As DataColumn = New DataColumn("UploadedBy") UploadedBy.DataType = System.Type.GetType("System.String") tblattachments.columns.add(attachmentid) tblattachments.columns.add(filename) tblattachments.columns.add(serverfilename) 'ms tblattachments.columns.add(filesize) tblattachments.columns.add(uploadtime) tblattachments.columns.add(uploadedby) Dim j As Integer = 0 If arrattachmentid Is Nothing Then For i = start To arrattachmentid.length - 1 Dim r As DataRow r = tblattachments.newrow() r.item("attachmentid") = arrattachmentid(i) r.item("filename") = arrinternalfilename(i) r.item("serverfilename") = arrserverfilename(i) 'ms r.item("filesize") = arrfilesize(i) r.item("uploadtime") = m.adjusttime(arrdatetime(i), Session("intGMTAdjustment"), False).ToString(strDateFormat & " hh:mm tt") r.item("uploadedby") = arrusername(i) tblattachments.rows.add(r) j += 1 If j = count Then 'ms Updated: Saturday, November 29, 2014 Page 20

21 Exit For Next total = arrattachmentid.length GridView1.DataSource = tblattachments Dim pagecount As Integer = total / count If pagecount = 0 Then pagecount = 1 If pageindex > 0 Then LinkFirst.Enabled = True LinkPrev.Enabled = True LinkFirst.Enabled = False LinkPrev.Enabled = False If pagecount > 1 Then If pageindex < pagecount - 1 Then LinkLast.Enabled = True LinkNext.Enabled = True LinkLast.Enabled = False LinkNext.Enabled = False LinkLast.Enabled = False LinkNext.Enabled = False SetLink(LinkFirst, 0, 239) SetLink(LinkPrev, pageindex - 1, 240) SetLink(LinkNext, pageindex + 1, 241) SetLink(LinkLast, pagecount - 1, 242) LabelPage.Text = String.Format("[ {0} ]", pageindex + 1) Protected Sub GridView1_DataBound(ByVal sender As Object, ByVal e As EventArgs) 'Set the checkbox enabled property for each visible checkbox. If the user that is logged in is not the user that uploaded the 'attachment and they are not the owner of the thread, then disable the checkbox. Dim a As New Attachment() Dim m As New Misc() Dim t As New Thread() Dim errcode As Integer Dim introwcount As Integer = 0 Dim intfileuserid As Integer Dim dtdatetime As DateTime Dim strinternalfilename As String Dim strfiledescription As String 'ms Dim strdataencryptionkeytouse As String Dim strserverfilename As String Dim intfilesize As Integer Dim strerrormsg As String If Not t.threadexists(session("strdataconnectstring"), Session("intThreadID")) Then 'ms Session.Remove("intThreadID") 'ms Response.Redirect("Threads.aspx") 'ms Updated: Saturday, November 29, 2014 Page 21

22 'ms Dim boolisthreadowner As Boolean = t.isthreadowner(session("strdataconnectstring"), Session("intUserID"), Session("intThreadID")) For Each row As GridViewRow In GridView1.Rows If row.rowtype = DataControlRowType.DataRow Then introwcount += 1 Dim cb As CheckBox = DirectCast(row.FindControl("CheckBoxSelect"), CheckBox) Dim fileid As Integer = CInt(GridView1.DataKeys(row.RowIndex).Value) errcode = a.read(session("strdataconnectstring"), Session("strKeysConnectString"), "", Session("IPAddr"), Session("intUserID"), _ Session("intThreadID"), Session("strPassword"), Session("intKeyboxID"), Session("arrPasskeys"), fileid, False, _ intfileuserid, dtdatetime, strinternalfilename, strserverfilename, intfilesize, strfiledescription, _ strdataencryptionkeytouse, strerrormsg, Session("strLanguage")) 'ms 'ms removed check for file owner/thread owner. Always make delete checkbox enabled. cb.enabled = True Next If GridView1.Rows.Count = 0 Then Dim tbl As Table = GridView1.Controls(0) Dim gvr As GridViewRow = tbl.controls(0) Dim cell As TableCell = gvr.cells(0) Dim lblempty As Label = cell.findcontrol("lblempty") lblempty.text = m.gettext(session("strdataconnectstring"), 234, Session("strLanguage")) If strerrormsg <> "" Then lblerrormsg.text = strerrormsg Protected Sub GridView1_RowCreated(ByVal sender As Object, ByVal e As GridViewRowEventArgs) If e.row.rowtype = DataControlRowType.Header Then Dim m As New Misc() Dim i As Integer = 0 For Each c As TableCell In e.row.cells Select Case i Case 2 'ms c.text = m.gettext(session("strdataconnectstring"), 647, Session("strLanguage")) 'ms Case 3 'ms c.text = m.gettext(session("strdataconnectstring"), 245, Session("strLanguage")) Case 4 'ms c.text = m.gettext(session("strdataconnectstring"), 488, Session("strLanguage")) Case 5 'ms c.text = m.gettext(session("strdataconnectstring"), 246, Session("strLanguage")) Case 6 'ms c.text = m.gettext(session("strdataconnectstring"), 247, Session("strLanguage")) Case 7 'ms c.text = m.gettext(session("strdataconnectstring"), 248, Session("strLanguage")) End Select i += 1 Next Protected Sub GridView1_RowDataBound(ByVal sender As Object, ByVal e As GridViewRowEventArgs) 'ms If e.row.rowtype = DataControlRowType.DataRow Then Dim a As New Attachment() Dim TxtOrder As TextBox = e.row.findcontrol("txtorder") Dim intattachmentid As Integer = Convert.ToInt32(DataBinder.Eval(e.Row.DataItem, "AttachmentID")) Updated: Saturday, November 29, 2014 Page 22

23 TxtOrder.Text = a.getdisplayorder(session("strdataconnectstring"), intattachmentid) Private Sub SetLink(ByVal link As HyperLink, ByVal pageindex As Integer, ByVal intmsgnumber As Integer) Dim m As New Misc() Dim num As Integer = pageindex + 1 link.navigateurl = "AddAttachment.aspx?Page=" & num.tostring() link.text = m.gettext(session("strdataconnectstring"), intmsgnumber, Session("strLanguage")) Protected Sub Uploader1_FileUploaded(ByVal sender As Object, ByVal args As UploaderEventArgs) Dim a As New Attachment() Dim m As New Misc() Dim errcode As Integer Dim dir As String = Server.MapPath("~/Attachments/") Dim newname As String = args.fileguid.tostring() Dim strfileextension As String Dim strencryptionpasskey As String Dim i As Integer = args.filename.length() 'Edits for supported extensions and filesize are done on the client, but are repeated here in case user has javascript disabled. Do i -= 1 If i < 1 Then lblerrormsg.text = m.gettext(session("strdataconnectstring"), 235, Session("strLanguage")) lblerrormsg.text = lblerrormsg.text.replace("?1", args.filename) Exit Sub If args.filename.substring(i, 1) = "." Then Dim intextlength As Integer = args.filename.length() - i intextlength -= 1 i += 1 strfileextension = args.filename.substring(i, intextlength) If a.isfiletypesupported(session("strdataconnectstring"), strfileextension, lblerrormsg.text) Then Exit Do lblerrormsg.text = m.gettext(session("strdataconnectstring"), 235, Session("strLanguage")) lblerrormsg.text = lblerrormsg.text.replace("?1", args.filename) Exit Sub Loop 'Max file size is 100MB If args.filesize > Then 'ms lblerrormsg.text = m.gettext(session("strdataconnectstring"), 236, Session("strLanguage")) lblerrormsg.text = lblerrormsg.text.replace("?1", args.filename) Exit Sub errcode = a.add(session("strdataconnectstring"), Session("strKeysConnectString"), "", Session("IPAddr"), Session("intUserID"), _ Session("intThreadID"), Session("arrPasskeys"), Session("strPassword"), Session("intKeyboxID"), args.filename, _ newname & ".enc", args.filesize, False, strencryptionpasskey, lblerrormsg.text, Session("strLanguage")) 'ms If errcode <> 0 Then Exit Sub args.moveto(path.combine(dir, newname)) EncryptFile(newname, strencryptionpasskey) Updated: Saturday, November 29, 2014 Page 23

24 Protected Sub Uploader1_UploadCompleted(ByVal sender As Object, ByVal args As UploaderEventArgs()) 'Setting boolselectfirstentry so that the correct entry will be selected if the user returns to the console. Session("boolSelectFirstEntry") = True 'Add a message to the thread specifying the files that were uploaded. Dim m As New Misc() Dim t As New Thread() Dim boolisdraft As Boolean = t.isdraftthread(session("strdataconnectstring"), Session("intThreadID")) Dim strmessage As String = "" For Each fn As UploaderEventArgs In args If strmessage = "" Then strmessage = m.gettext(session("strdataconnectstring"), 257, Session("strLanguage")) strmessage = strmessage.replace("?1", Session("strUsername")) strmessage += "<br />" strmessage += fn.filename Next 'add a message entry with the name of all added files and send a notification if this is not a new or draft thread If Session("FromPage") = "AddThread" Or boolisdraft Or chksendnotifications.checked = False Then 'ms Dim message As New Message() Dim errcode As Integer Dim arrpasskeys() As String If Session("arrPasskeys") Is Nothing Then arrpasskeys = Session("arrPasskeys") errcode = message.add(session("strdataconnectstring"), Session("strKeysConnectString"), Session("strDataEncryptionKey"), _ Session("IPAddr"), Session("intUserID"), Session("intThreadID"), arrpasskeys, Session("strPassword"), _ Session("intKeyboxID"), "", strmessage, False, lblerrormsg.text, Session("strLanguage")) message.issystemgenerated(session("strdataconnectstring"), Session("intThreadID")) m.sendmessagenotification (session("strdataconnectstring"), Session("strKeysConnectString"), _ Session("intUserID"), Session("intThreadID"), 0, _ Session(" FromAddress"), Session("strLoginURL"), Session("strAnonymousURL"), _ Session("Contact"), Session("strThreadSubject"), Session("strLanguage")) 'ms GridView1.DataBind() Protected Sub cmddelete_click(byval sender As Object, ByVal e As EventArgs) Dim t As New Thread() UpdateDisplayOrder() 'ms Dim boolisdraft As Boolean = t.isdraftthread(session("strdataconnectstring"), Session("intThreadID")) Dim fileids As New List(Of Integer)() For Each row As GridViewRow In GridView1.Rows If row.rowtype = DataControlRowType.DataRow Then Dim cb As CheckBox = DirectCast(row.FindControl("CheckBoxSelect"), CheckBox) If cb IsNot Nothing AndAlso cb.checked Then Try Dim fileid As Integer = CInt(GridView1.DataKeys(row.RowIndex).Value) fileids.add(fileid) Catch cb.checked = False End Try Updated: Saturday, November 29, 2014 Page 24

25 Next If fileids.count = 0 Then Return Dim filedir As String = Server.MapPath("~/Attachments/") Dim errcode As Integer Dim intfileuserid As Integer Dim dtdatetime As DateTime Dim strinternalfilename As String Dim strfiledescription As String 'ms Dim strserverfilename As String Dim strencryptionpasskey As String Dim intfilesize As Integer Dim a As New Attachment() Dim m As New Misc() Dim strmessage As String = "" For Each fileid As Integer In fileids errcode = a.read(session("strdataconnectstring"), Session("strKeysConnectString"), "", Session("IPAddr"), Session("intUserID"), _ Session("intThreadID"), Session("strPassword"), Session("intKeyboxID"), Session("arrPasskeys"), fileid, False, intfileuserid, _ dtdatetime, strinternalfilename, strserverfilename, intfilesize, strfiledescription, _ strencryptionpasskey, lblerrormsg.text, Session("strLanguage")) 'ms If errcode = 0 Then 'ms errcode = a.delete(session("strdataconnectstring"), Session("IPAddr"), Session("intUserID"), fileid, _ filedir, lblerrormsg.text, Session("strLanguage")) If errcode = 0 Then If strmessage = "" Then strmessage = m.gettext(session("strdataconnectstring"), 256, Session("strLanguage")) strmessage = strmessage.replace("?1", Session("strUsername")) strmessage += "<br />" strmessage += strinternalfilename 'ms Exit Sub 'ms Next Dim arrpasskeys() As String If Session("arrPasskeys") Is Nothing Then arrpasskeys = Session("arrPasskeys") Dim message As New Message() If Session("FromPage") = "AddThread" Or boolisdraft Or chksendnotifications.checked = False Then 'ms errcode = message.add(session("strdataconnectstring"), Session("strKeysConnectString"), Session("strDataEncryptionKey"), _ Session("IPAddr"), Session("intUserID"), Session("intThreadID"), arrpasskeys, Session("strPassword"), _ Session("intKeyboxID"), "", strmessage, False, lblerrormsg.text, Session("strLanguage")) message.issystemgenerated(session("strdataconnectstring"), Session("intThreadID")) GridView1.DataBind() 'Force the first entry to be selected when the user returns to the console. Updated: Saturday, November 29, 2014 Page 25