Hi All, I have to read in an xml or xsd document (XCCDF - The Extensible Configuration Checklist Description Format) and would like to create tables in the Database based on them (if they do not exist). I do NOT know what the Table names/Fields will be so I am looking to do it dynamically. XCCDF is a specification language for writing security checklists, benchmarks, and related kinds of documents. This is a view of the formt (xml):

<?xml version="1.0" encoding="utf-8"?>
<Benchmark id="MicrosoftSecurityComplianceManagementForWindows2008" resolved="0" xml:lang="en" xmlns="http://checklists.nist.gov/xccdf/1.1" xmlns:cdf="http://checklists.nist.gov/xccdf/1.1" xmlns:cpe="http://cpe.mitre.org/XMLSchema/cpe/1.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xhtml="http://www.w3.org/1999/xhtml" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="http://checklists.nist.gov/xccdf/1.1 xccdf-1.1.xsd http://cpe.mitre.org/XMLSchema/cpe/1.0 cpe-1.0.xsd">
<status date="2008-05-16">draft</status>
<title>Microsoft Security Compliance Management for Windows Server 2008</title>
<description>Microsoft Security Compliance Management for Windows Server 2008</description>
<notice id="terms-of-use" xml:lang="en">
</notice>
<front-matter>
xhtml:p
</xhtml:p>
</front-matter>
<rear-matter>
</rear-matter>
<reference href="http://checklists.nist.gov/repository/1001.html">
dc:titleMicrosoft Security Compliance Management for Windows Server 2008</dc:title>
dc:creatorMicrosoft Solution Accelerator for Security and Compliance</dc:creator>
dc:publisher
</dc:publisher>
dc:identifier
</dc:identifier>
</reference>
...
...

Full info on these files can be found here[^] So, any ideas how to do this dynamically?

Regards, Dan

Hi David, If I save it to disk, everything is there as normal. It only happens if I try to view the content of the ZIP when I click on the link (the "Open" button).

Regards, Dan

Hi Chris, Just tried http://www.codeproject.com/KB/vista/certificationbyexample.aspx[^] and got the same thing. Would you like a screen-shot of this?

Regards, Dan

Hi Chris, I am using IE 6 SP2, no add-ins. Has anyone else reported this? I had someone else tell me the same thing, but I do not know which browser he is using.

Regards, Dan

Good Point ... Done!

Regards, Dan

Hi Chris (and Co), When I click on a Zip link, and choose "Open", I get a blank Zip file? As pointed out by Luc Pattyn: it seems like an empty ZIP if you try to open it inside Internet Explorer; but when you save it in IE, then open it, everything is fine?? Before the CodeProject rework, it worked fine; Is there a reason for this (that you know of - besides it being an MS product :laugh: ) Assuming this is just a hickup, is it something that will be fix in the near future (or is it possibly a problem with WinZip/M$)?

Regards, Dan

You are 100% correct :confused: Is there a reason for this (that you know of - besides it being an MS product :laugh: )

Regards, Dan

Hi All, I haven't logged on for a while, but on every zip file I look at/download, it is empty? Did something change when I was gone?

Regards, Dan

Me too :-) , when I login, here is what I saw: Great news – Yahoo! Mail is new and improved! Thanks for being a loyal Yahoo! Mail user. To ensure that Yahoo! Mail continues to be the easiest, most enjoyable way for you to stay in touch, we've made several great improvements to your service! In addition to all the features you currently enjoy, we've made these upgrades: Streamlined interface Makes using your mail even easier 100MB of email storage Keep more of the things that are important to you – without worrying about bumping up against your storage limit. Message size up to 10MB Send monster-sized files – photos, presentations, whatever! So thanks again for choosing Yahoo! Mail to keep in touch, and we hope you enjoy the additional services now at your fingertips. For more information, please visit our Help page Regards, Dan

oooppss, didn't see that you had the answer :-(

Hi, I created a class that uses the NtNative APIs found in the ntdll.dll. Everything works except the "Hive File" functions. Below is the "LoadKey" function: BOOL CKey::LoadKey(CString csHiveFilePathName, ULONG ulFlags /* 0x0000 */) { ASSERT(csHiveFilePathName != _T("")); ASSERT((m_csRootPath == _T("\\Registry\\User") || m_csRootPath == _T("\\Registry\\Machine"))); BOOL bSuccess = TRUE; HANDLE hRootKey = NULL, hHiveFile = NULL; NT::UNICODE_STRING usRootKeyName, usHiveFileName, usHiveFile; NT::OBJECT_ATTRIBUTES DestinationKeyName, RegHiveFileName, RegHiveFile; int n=0; // Make sure the filenames is setup correctly if (csHiveFilePathName.Left(4) != _T("\\??\\")) csHiveFilePathName.Insert(0,_T("\\??\\")); // Enable the restore privilege m_NtStatus = EnablePrivilege(SE_RESTORE_NAME, TRUE); if(!NT_SUCCESS(m_NtStatus)) { bSuccess = FALSE; goto end_it; } WCHAR wszHiveFile[1024]; for (n=0; n

Hi Mike, Agreed, Excellent idea and approach! Very useful. As asked, when do you need a bug report by:confused: I am running WinXP (SP1) on a 850Mhz, 256 mem Laptop... Regards, Dan

Hi All, I have been creating a project (on my own time) that manages the Snort IDS Tool. Unfortunately my time is so limited, I haven't been able to devote much time. Because I wanted to present this on CodeProject (as a CodeProject Application), it is time to ask for help. If there is anyone that is interested in really helping to in creating a CodeProject App. from resources at CP, let me know. Now to tell you about the Project: I decided to write a program to view the logs generated by Snort. I needed something that could view alerts/generate reports for Windows Versions of Snort (Linux in the future). I also had to come up with a name and since I was reading lines in the snort log file, I thought the name was obvious "Snort-Lines". Now that the name was born, it was time for the picture, it was obvious how this was going to turn out! This Projects Goal is to create a "Pure" CodeProject app that Manages the Snort IDS Nodes in an Enterprize Network (or smaller if needed). My first shot at doing something was SnortLines. As I read the site name "Snort-Lines Management Console", it was obvious that this needed to be more than reading log files because there is much more to snort. There are some examples on the Snort-Lines Web Site. My ideas have grown into a "Snort Management Console (SnortMC)" that one will be able to manage the Snort IDS Nodes in their network from on Management Console. Although the code is only half done, there are a lot of thoughts in how to do this. Some of the things I have finished is the Services that watch the IDS node directories on the SnortMC. When a file is modified in these directories, the service sends it (via TCP...encrypted) to the Node. There is an idea for a GUI (also Half done, but functional) to manage this. There is more to talk about, but I think I need to know if someone is really interested in creating an app that the source code will be available to all as CodeProject. Please let me know what you think! Regards, Dan

Hi All, I have been creating a project (on my own time) that manages the Snort IDS Tool. Unfortunately my time is so limited, I haven't been able to devote much time. Because I wanted to present this on CodeProject (as a CodeProject Application), it is time to ask for help. If there is anyone that is interested in really helping to in creating a CodeProject App. from resources at CP, let me know. Now to tell you about the Project: I decided to write a program to view the logs generated by Snort. I needed something that could view alerts/generate reports for Windows Versions of Snort (Linux in the future). I also had to come up with a name and since I was reading lines in the snort log file, I thought the name was obvious "Snort-Lines". Now that the name was born, it was time for the picture, it was obvious how this was going to turn out! This Projects Goal is to create a "Pure" CodeProject app that Manages the Snort IDS Nodes in an Enterprize Network (or smaller if needed). My first shot at doing something was SnortLines. As I read the site name "Snort-Lines Management Console", it was obvious that this needed to be more than reading log files because there is much more to snort. There are some examples on the Snort-Lines Web Site. My ideas have grown into a "Snort Management Console (SnortMC)" that one will be able to manage the Snort IDS Nodes in their network from on Management Console. Although the code is only half done, there are a lot of thoughts in how to do this. Some of the things I have finished is the Services that watch the IDS node directories on the SnortMC. When a file is modified in these directories, the service sends it (via TCP...encrypted) to the Node. There is an idea for a GUI (also Half done, but functional) to manage this. There is more to talk about, but I think I need to know if someone is really interested in creating an app that the source code will be available to all as CodeProject. Regards, Dan

How are the Scopes figured out (for example: 22.0.0.0/8, 22.22.0.0/16, 22.22.0.0/20, /21, /22, etc...)?? Is there someone with a program example to figure this out?? Regards, Dan

Hi Vivek, thanks for the reply! Ok, if this is because of failure, then I will set the value in the IDL myself. It should be an "ADO Recordset" it is returning...It compiled ok now...I added the below to the IDL: importlib("C:\Program Files\Common Files\System\ADO\MSADO15.DLL"); HRESULT SearchTickets( [in, out] VARIANT* rsGotSchema, [in, out] VARIANT* Criteria, [in, out] VARIANT* ServerName, [out, retval] _Recordset **ptrRs ); Ok done and I get it compiled, but when ran it errors here (see below): // param #1: a passed recordset (checked before OK...) // param #2: Query for the new recordset // param #3: Server name // param #4: the recorset to be filled _RecordsetPtr pRsTickets; hr = pRsTickets.CreateInstance(__uuidof (Recordset)); if(SUCCEEDED(hr)) { hr = IQUIZ->SearchTickets( (VARIANT*)&pRsSchema, COleVariant("Some query..."), COleVariant("Server..."), (_Recordset**) &pRsTickets); // ***************************************************** // When here, both recordsets have been set to NULL???? // ***************************************************** } Output from DOS... BEFORE CreateInstance()...pRsTickets: 0 AFTER CreateInstance()...pRsTickets: 1 BEFORE SearchTickets()...pRsSchema: 1 SearchTickets Failed (hr): -2146827864 AFTER SearchTickets()...pRsTickets: 0 AFTER SearchTickets()...pRsSchema: 0 Release OK... This is where it blows-up (C:\...VC98\include\COMIP.H): // Returns the address of the interface pointer contained in this // class. This is useful when using the COM/OLE interfaces to create // this interface. // Interface** operator&() throw() { _Release(); m_pInterface = NULL; return &m_pInterface; } Can you (or anyone) help???? Regards, Dan

Use CFileDialog... Regards, Dan

Hi All, I have a dll that works great in VB/ASP, but when I created an .idl file, I get an error when compiling: :(( .\test.idl(31) : error MIDL2025 : syntax error : expecting a type specification near "<" .\test.idl(31) : error MIDL2026 : cannot recover from earlier syntax errors; aborting compilation below is where it is happening: NOTE: On the following line, I had to put quotes in the code so you could see the code because it looked like a TAG in HTML...("<"GetRefTypeInfo failed">"**) HRESULT GetItem([in, out] VARIANT* Server, [in, out] VARIANT* Category, [in, out] VARIANT* CType, [out, retval] ("<"GetRefTypeInfo failed">"** ); The idl file was generated by OLE View (cut/paste) to test.idl and compiled with "C:>MIDL test.idl /h test.h" Can anyone tell me why this is giving this error :confused: Regards, Dan

I sent you the Assertion I am getting in a seperate mail. It is failing on...(BTW, this is a SDI Application) // Dispatch commands specified on the command line if (!ProcessShellCommand(cmdInfo)) return FALSE; This doesn't mean it is not my code, but it won't let me debug to find the Assertion...any ideas?? Thanks in advance, Dan

Hi, I am developing an Aplication to watch/manage my IDS Nodes. It runs fine when I run in Release mode. Once I go to Debug I get the Assertion. // Dispatch commands specified on the command line if (!ProcessShellCommand(cmdInfo)) return FALSE; Any help appreciated... Thanks in advance, Dan