At work, we're a 100% Windows Shop, and the vast majority of our code so far is written in classic ASP, which means the web service calls we do all depend on the [Microsoft XML Core Services library. It's a great library, and has served us well, but we have, more than once, been bitten by the Windows Update bug.
When we upgraded to Windows Server 2008, we found we needed to start explicitly using MSXML 6.0 (at least for one of our applications). That took a short while to debug, but what we're doing is simple enough that it was no big problem. However, a Windows Update our sys-admin installed last week evidently created a problem with setting some headers that we simply hadn't had before.
Our use case is simple. A user logs into our site, we get their SSN from one web-service, and issue a call to the National Student Clearinghouse, which returns a HTML page which should redirect the user to the NSC in a logged in status, which will allow them to perform some self-service stuff through the NSC that saves our office some work. The code, is therefore, pretty straightforward.
Dim xmlhttp Set xmlhttp = CreateObject("MSXML2.ServerXMLHTTP.6.0") xmlhttp.Open "POST", "http://www.studentclearinghouse.com/", False xmlhttp.SetRequestHeader "Referer", "http://blog.foxxtrot.net/" xmlhttp.SetRequestHeader "Content-Type", "application/x-www-form-urlencoded" xmlhttp.Send postData
However, since we installed (I believe) KB954459, it no longer works. For some reason, it refuses to attach the "Referer" header, I tested this by modifying the above script to call a script on my local server which merely sends me an e-mail with the Raw headers using the
Request.ServerVariables("ALL_RAW")contents. The return value:
Connection: Keep-Alive Content-Length: 45 Content-Type: application/x-www-form-urlencoded Accept: */* Host: test.foxxtrot.net User-Agent: Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
Notable absent is the Referer header. I'm not sure why this is, nor have I found a workaround just yet. I am contacting the Microsoft XML Team over this, as we'd like to have the security update installed, but we really do need this application to be working. If anyone has any ideas...I'm all ears.