Re: [IUG] Countrywatch Data Module and WAM

["Riesner, Giles" <GRIESNER at ccbcmd dot edu>]

As a follow-up to my earlier posting, I will mention, as I was reminded
off-list, that this is not
a totally secure method as anyone who knows how to get to it directly
can. That said:

a) few folks (other than folks like us who work directly with the
system) know where to look for patronview_web.html
   or even it's name  
and
b) If folks get to the page via a login page (/patroninfo) they see the
address at the top as:
     http://{library-server-address}/patroninfo/{.p-number}/top  rather
than the actual path to it
     (by the way, this is also what PageInfo in Firefox shows).

so it's essentially "security via obscurity".

--Giles


 Giles W. Riesner Jr. 
 Library Tech Support & Library System Manager
 Community College of Baltimore Co.- Catonsville
 800 S. Rolling Road
 Baltimore, MD 21228  USA
 Phone: 1-410-455-4245
 Email:  griesner at ccbcmd dot edu


-----Original Message-----
From: innopac-bounces at innopacusers dot org
[mailto:innopac-bounces at innopacusers dot org] On Behalf Of Riesner, Giles
Sent: Thursday, February 28, 2008 2:58 PM
To: IUG INNOPAC List
Subject: Re: [IUG] Countrywatch Data Module and WAM

We subscribe to Peterson's TERC (Testing & Education Research Center).
To take the tests or do some of the

College Search functions you need to login. We ended up putting a link
to that in the "My Millennium"

area with instructions to click there on our database page.

 

If you want to see how it works, touch base with me and I'll give you a
test login to use to see. Would that

idea work for you?

 

 

 

Giles W. Riesner Jr. 

Library Tech Support & Library System Manager

Community College of Baltimore Co.- Catonsville

800 S. Rolling Road

Baltimore, MD 21228  USA

Phone: 1-410-455-4245

Email:  griesner at ccbcmd dot edu

 

 

________________________________

From: innopac-bounces at innopacusers dot org on behalf of Becky Fulweiler
Sent: Thu 2/28/2008 12:56 PM
To: 'IUG INNOPAC List'
Subject: [IUG] Countrywatch Data Module and WAM

We have noticed the "Data" module on the Countrywatch database does not
work
through the WAM. The other modules work fine. After going back and forth
with Countrywatch, their explanation is:
"The CountryData module uses a modern website technique called AJAX.
AJAX
allows web pages to load faster by doing things asynchronously in the
background.    The JavaScript code from the users browser communicates
with
our web servers in smaller and quicker instances without the entire page
having to reload.  The reason you are getting the error messages is
because
in order for the JavaScript code from the users browser to communicate
with
our servers it needs to have the real URL and not the rewritten URL.
Unfortunately, the technique we are using will not work with URL
rewriting."


Their only suggestion is "In order to successfully login to our website
the
address must be set to http://www.countrywatch.com/ip."; This does work
but
makes it impossible to use the entire database from off campus. 
Have any others noticed this issue? Have you come up with a creative
solution? I realize we could put two entries, one rewritten and one not
on
our database page, but the data module would still be unavailable from
off
campus.

Feel free to complain to Countrywatch (;-)!

Becky



______________________________________
Becky Fulweiler
Assistant Director, Technical Services
Sawyer Library
Suffolk University
8 Ashburton Place
Boston, MA 02108

Phone 617 573 8541
Fax 617 573 8756



--
This message was distributed through the Innovative Users Group INNOPAC
list
Public replies:  INNOPAC at innopacusers dot org
Update your subscription options:
http://innopacusers.org/mailman/listinfo/innopac


--



--- StripMime Report -- processed MIME parts ---
multipart/mixed
  text/plain (text body -- kept)
  application/ms-tnef
---
--
This message was distributed through the Innovative Users Group INNOPAC
list
Public replies:  INNOPAC at innopacusers dot org
Update your subscription options:
http://innopacusers.org/mailman/listinfo/innopac


-- 
BEGIN-ANTISPAM-VOTING-LINKS
------------------------------------------------------

Teach CanIt if this mail (ID 35311316) is spam:
Spam:
https://ssl.ccbcmd.edu:7726/canit/b.php?i=35311316&m=65280f4f211e&c=s
Not spam:
https://ssl.ccbcmd.edu:7726/canit/b.php?i=35311316&m=65280f4f211e&c=n
Forget vote:
https://ssl.ccbcmd.edu:7726/canit/b.php?i=35311316&m=65280f4f211e&c=f
------------------------------------------------------
END-ANTISPAM-VOTING-LINKS



--- StripMime Report -- processed MIME parts ---
multipart/mixed
  text/plain (text body -- kept)
  application/ms-tnef
---