can i have only one form per ASP.Net page?

No,You can have multiple forms, but only one form can be set with the runat=”server” attribute.

How can I access web controls from a code-behind page?

In the general declaration for your code behind class, create a control variable with the same name as the id of the control in your .aspx file:

Public Class CodeBehind : Inherits Page

Public ItemsGrid As DataGrid

Protected Sub Page_Load(ByVal Sender As System.Object, ByVal e As System.EventArgs)
If Not IsPostback Then
ItemsGrid.DataSource = GetMyDataSource()
ItemsGrid.DataBind()
End If
End Sub

End Class

How do you prevent a user who doesnt log off a site from backing into a site if they leave it. Say for example a person logs into http://www.cpwebhosting.net but they dont log off, they instead type other domain name into the browser. Once they are on other domain name they decide to hit the back button to get back to cpwebhosting.net, the actually logged in account. How do i prevent them from doing so, and if they try to back into the site it tells them to log on again? Is this possible? I need help, new to ASP.

Try this one

Code:

<%
Dim objConn
Set objConn = Server.CreateObject("ADODB.Connection")
objConn.open dsn

If Session("blnValidUser") = True and Session("Admin_ID") = "" Then
Dim rsPersonIDCheck
Set rsPersonIDCheck = Server.CreateObject("ADODB.Recordset")
Dim strSQL
strSQL = "SELECT * FROM Settings WHERE Admin_ID = '" & Session("Admin_ID") & "';"
rsPersonIDCheck.Open strSQL, objConn
If rsPersonIDCheck.EOF Then
Session("blnValidUser") = False
Else
Session("Admin_ID") = rsPersonIDCheck("Admin_ID")
End If
rsPersonIDCheck.Close
Set rsPersonIDCheck = Nothing
End If

Dim strID, strPassword
strID = Request("Admin_ID")
strPassword = Request("Password")

Dim rsUsers
set rsUsers = Server.CreateObject("ADODB.Recordset")
strSQL = "SELECT * FROM Settings WHERE Admin_ID = '" & strID & "';"
rsUsers.Open strSQL, objConn

If rsUsers.EOF Then
Session("Admin_ID") = Request("Admin_ID")
Response.Redirect "default.asp?SecondTry=True"
Else
While Not rsUsers.EOF
If UCase(rsUsers("Admin_Pass")) = UCase(strPassword) Then
Session("Admin_ID") = rsUsers("Admin_ID")
Session("isLoggedIn") = True
Session("blnValidUser") = True
Response.Redirect "main.asp"
Else
rsUsers.MoveNext
End If
Wend
Session("Admin_ID") = Request("Admin_ID")
Response.Redirect "default.asp?SecondTry=True&WrongPW=True"
End If
%>
you'll need to tell us how you keep the session for logged in users, is it just a session or a cookie???


 No, it is not a cookie, just a session

chack the referer, if its not your site then Session("Admin_ID") = ""

put the site in a frameset and then have an onUnload procedure on the frameset to destroy the session.

Put this code
Code:

strURLIn = Request.ServerVariables("HTTP_REFERER")
if strURLIn <> "" AND left(strURLIn, 23)<>"http://www.cpwebhosting.net" AND left(strURLIn, 19)<>"http:/cpwebhosting.net" then
Session("Admin_ID") = ""

I have a spammer attacking my ASP contact forms on my website. They’re just a really basic ASP form using CDO. My host suggested that I redesign the forms to not allow more than a specified number of submissions per IP address. Does anyone know how to do that?

use an image captcha into your form. google “captcha”

captcha is only effective if you’ve got spammers that are spamming your site programmatically, however. If you’ve got spammers that are going in and manually submitting your forms.

You should also check and see if the CAPTCHA has a counter to block x number of wrong submitted CAPTCHA inputs. And have a redirect to set to take them to a diffrent page when it is reached.