自己编的Active X ocx 为何用到web上会有安全性警告，如何解决

[ggg]

[x86]

没关系的,一半只提示一次.
你可以将控件加上数字签名,不过我现在手头没资料,而且也挺麻烦的,并且也有提示.

[ggg]

没有提示不行吗

[anstern]

赞成x86的说法,其实Flash文件也是通过它的控件容器来播放的,只不过swflash.ocx加了数字签名,所以用户观看flash时没有出现警告提示.
浏览器观看带未签名的ocx的网页一般会有警告提示,不过如果用户在选项中的安全性
一栏置为低,或允许下载运行未签名的Active x控件,则浏览器就不会有警告提示了!不过这样做很危险.
现在网页内嵌ocx的这种做法已经被淘汰了,原因是它的安全性和支持性.网页上流行的是Applet,script和Flash,而由于前两者编程的繁锁性与后者的简单实用性,Flash的应用是将来人们做动态网页的首选.

[ggg]

但是在要实现一些低层的任务，你说的那些就没用了。如网上的视频播放。shockwave本身就是AX ocx 或 AX dll.由于安全性的考虑 java applet,script功能不强.flash的应用需要看不同场合

[lgs]

这样就不会有提示了：
1:先添加三个全局函数
// Helper function to create a component category and associated description
HRESULT CreateComponentCategory(CATID catid, WCHAR* catDescription)
{
ICatRegister* pcr = NULL ;
HRESULT hr = S_OK ;
hr = CoCreateInstance(CLSID_StdComponentCategoriesMgr,
NULL, CLSCTX_INPROC_SERVER, IID_ICatRegister, (void**)&pcr);
if (FAILED(hr))
return hr;
// Make sure the HKCR\Component Categories\{..catid...}
// key is registered
CATEGORYINFO catinfo;
catinfo.catid = catid;
catinfo.lcid = 0x0409 ; // english
// Make sure the provided description is not too long.
// Only copy the first 127 characters if it is
int len = wcslen(catDescription);
if (len>127) len = 127;
wcsncpy(catinfo.szDescription, catDescription, len);
// Make sure the description is null terminated
catinfo.szDescription[len] = '\0';
hr = pcr->RegisterCategories(1, &catinfo);
pcr->Release();
return hr;
}

// Helper function to register a CLSID as belonging to a component category
HRESULT RegisterCLSIDInCategory(REFCLSID clsid, CATID catid)
{
// Register your component categories information.
ICatRegister* pcr = NULL ;
HRESULT hr = S_OK ;
hr = CoCreateInstance(CLSID_StdComponentCategoriesMgr,
NULL, CLSCTX_INPROC_SERVER, IID_ICatRegister, (void**)&pcr);
if (SUCCEEDED(hr))
{
// Register this category as being "implemented" by
// the class.
CATID rgcatid[1] ;
rgcatid[0] = catid;
hr = pcr->RegisterClassImplCategories(clsid, 1, rgcatid);
}
if (pcr != NULL)
pcr->Release();
return hr;
}

// Helper function to unregister a CLSID as belonging to a component category
HRESULT UnRegisterCLSIDInCategory(REFCLSID clsid, CATID catid)
{
ICatRegister* pcr = NULL ;
HRESULT hr = S_OK ;
hr = CoCreateInstance(CLSID_StdComponentCategoriesMgr,
NULL, CLSCTX_INPROC_SERVER, IID_ICatRegister, (void**)&pcr);
if (SUCCEEDED(hr))
{
// Unregister this category as being "implemented" by
// the class.
CATID rgcatid[1] ;
rgcatid[0] = catid;
hr = pcr->UnRegisterClassImplCategories(clsid, 1, rgcatid);
}

if (pcr != NULL)
pcr->Release();
return hr;
}

2:将控件类的UpdateRegistry(BOOL bRegister)函数替换如下：
BOOL CLCCBatmanCtrl::CLCCBatmanCtrlFactory::UpdateRegistry(BOOL bRegister)
{
// TODO: Verify that your control follows apartment-model threading rules.
// Refer to MFC TechNote 64 for more information.
// If your control does not conform to the apartment-model rules, then
// you must modify the code below, changing the 6th parameter from
// afxRegApartmentThreading to 0.

if (bRegister)
{
HRESULT hr = S_OK;
//register as Safe for Scripting
hr = CreateComponentCategory(CATID_SafeForScripting,
L"Controls that are safely scripting");
if(FAILED(hr))
return FALSE;

hr = RegisterCLSIDInCategory(m_clsid,CATID_SafeForScripting);
if(FAILED(hr))
return FALSE;

//register as safe for initializing
hr = CreateComponentCategory(CATID_SafeForInitializing,
L"Controls safely initializing form persistent data");
if(FAILED(hr))
return FALSE;

hr = RegisterCLSIDInCategory(m_clsid,CATID_SafeForInitializing);
if(FAILED(hr))
return FALSE;

return AfxOleRegisterControlClass(
AfxGetInstanceHandle(),
m_clsid,
m_lpszProgID,
IDS_LCCBATMAN,
IDB_LCCBATMAN,
afxRegApartmentThreading,
_dwLCCBatmanOleMisc,
_tlid,
_wVerMajor,
_wVerMinor);
}
else
{
HRESULT hr = S_OK;

hr = UnRegisterCLSIDInCategory(m_clsid,CATID_SafeForScripting);
if(FAILED(hr))
return FALSE;

hr = UnRegisterCLSIDInCategory(m_clsid,CATID_SafeForInitializing);
if(FAILED(hr))
return FALSE;

return AfxOleUnregisterClass(m_clsid, m_lpszProgID);
}
}
OK!

[CoolHg]

我的NT4.0出了问题
无论打开那一个有ActiveX控件的网页都会弹出不安全的提示
我把所有安全属性都设置为最低了
搞得我连msdn都不能很好的运行
又没勇气重装一遍系统

[lgs]

添加上面三个函数后，100%不会有任何提示，有不必设置安全级别。

[oldworm]

attation