<%
' Every response is dynamic and session-sensitive (CSRF tokens, flash messages), so tell
' every cache - browser, proxy, or antivirus web filter - not to store it at all.
'
' Response.CacheControl is ASP's intrinsic property that actually governs the real
' Cache-Control header IIS sends, and it defaults to "private" (which explicitly PERMITS
' browser-local caching) if never set. Response.AddHeader "cache-control", ... does NOT
' touch that property - it adds a second, separate Cache-Control header alongside it, which
' a real proxy/cache can parse unpredictably (confirmed via debug logging: a response still
' reported Response.CacheControl = "private" even after AddHeader was called). Must set the
' CacheControl property directly for this to actually take effect.
Response.ExpiresAbsolute = Now() - 1
Response.CacheControl = "no-cache"
Response.AddHeader "pragma", "no-cache"
'=======================================================================================================================
' MVC Dispatcher
'=======================================================================================================================
Class MVC_Dispatcher_Class
dim CurrentController
Public Property Get ControllerName
ControllerName = CurrentController
end Property
'---------------------------------------------------------------------------------------------------------------------
' Convenience method to resolve route and dispatch in one call
' method: HTTP method (GET, POST, etc.)
' path: Request path (already cleaned of query params)
'---------------------------------------------------------------------------------------------------------------------
Public Sub DispatchRequest(method, path)
Dim routeArray
routeArray = router.Resolve(method, path)
Dispatch routeArray
End Sub
'---------------------------------------------------------------------------------------------------------------------
' Main dispatch method - executes a resolved route
' RouteArray: Array(controller, action, params) from router.Resolve()
'---------------------------------------------------------------------------------------------------------------------
Public Sub Dispatch(RouteArray)
On Error Resume Next
Dim controllerName, actionName, hasParams, paramsArray
controllerName = RouteArray(0)
actionName = RouteArray(1)
' Security: Validate controller and action names
If Not ControllerRegistry.IsValidControllerFormat(controllerName) Then
Response.Write ""
Response.Write "Security Error: Invalid controller name format."
Response.Write "
"
Exit Sub
End If
If Not ControllerRegistry.IsValidActionFormat(actionName) Then
Response.Write ""
Response.Write "Security Error: Invalid action name format."
Response.Write "
"
Exit Sub
End If
' Security: Check controller whitelist
If Not ControllerRegistry.IsValidController(controllerName) Then
Response.Write ""
Response.Write "Security Error: Controller '" & Server.HTMLEncode(controllerName) & "' is not registered."
Response.Write "
"
Exit Sub
End If
' Initialize current controller
Dim controllerAssignment : controllerAssignment = "Set CurrentController = " & controllerName & "()"
Execute controllerAssignment
' Check if layout should be used
hasParams = (UBound(RouteArray) >= 2)
If eval(controllerName & ".useLayout") Then
%> <%
End If
' Prepare parameters
If hasParams Then
paramsArray = SurroundStringInArray(RouteArray(2))
Else
paramsArray = Empty
End If
' Execute controller action
ExecuteControllerAction controllerName, actionName, paramsArray
' Include footer if layout is used
If eval(controllerName & ".useLayout") Then
%> <%
End If
On Error GoTo 0
End Sub
' Helper method to execute controller actions (eliminates code duplication)
Private Sub ExecuteControllerAction(controllerName, actionName, paramsArray)
On Error Resume Next
Dim callString
' Build the call string based on whether we have parameters
If Not IsEmpty(paramsArray) And IsArray(paramsArray) And UBound(paramsArray) >= 0 Then
callString = "Call " & controllerName & "." & actionName & "(" & Join(paramsArray, ",") & ")"
Else
callString = "Call " & controllerName & "." & actionName & "()"
End If
' Execute the action
Execute callString
' Handle errors
If Err.Number <> 0 Then
HandleDispatchError actionName, Err.Description, Err.Number
Err.Clear
End If
On Error GoTo 0
End Sub
' Centralized error handling for dispatch errors
Private Sub HandleDispatchError(actionName, errorDesc, errorNum)
Dim isDevelopment
isDevelopment = (LCase(GetAppSetting("Environment")) = "development")
If isDevelopment Then
Response.Write ""
Response.Write "Controller Action Error
"
Response.Write "Action: " & Server.HTMLEncode(actionName) & "
"
Response.Write "Error: " & Server.HTMLEncode(errorDesc) & "
"
Response.Write "Error Number: " & errorNum
Response.Write "
"
Else
Response.Write ""
Response.Write "An error occurred
"
Response.Write "Please contact the system administrator if the problem persists."
Response.Write "
"
End If
End Sub
Public Sub RequirePost
If Request.Form.Count = 0 Then MVC.RedirectToExt "NotValid","",empty:End If
End Sub
' Shortcut for RedirectToActionExt that does not require passing a parameters argument.
Public Sub RedirectToAction(ByVal action_name)
RedirectToActionExt action_name, empty
End Sub
Public Sub RedirectTo(controller_name, action_name)
RedirectToExt controller_name, action_name, empty
End Sub
' Redirects the browser to the specified action on the specified controller with the specified querystring parameters.
' params is a KVArray of querystring parameters.
Public Sub RedirectToExt(controller_name, action_name, params)
Response.Redirect Routes.UrlTo(controller_name, action_name, params)
End Sub
Public Sub RedirectToActionExt(ByVal action_name, ByVal params)
RedirectToExt ControllerName, action_name, params
End Sub
End Class
dim MVC_Dispatcher_Class__Singleton
Function MVC()
if IsEmpty(MVC_Dispatcher_Class__Singleton) then
set MVC_Dispatcher_Class__Singleton = new MVC_Dispatcher_Class
end if
set MVC = MVC_Dispatcher_Class__Singleton
End Function
%>