locked
DHTML Editor installer for PosReady or WePos RRS feed

  • Question

  • Microsoft provides packages to fix XP SP2 for DHTMLED.OCX. Microsoft provides a package for Vista and up to install this functionality but I have not found a package to install or enable this functionality on the PosReady 2009 or WePos. For testing only, i have been able to install and make this thing work but I need an official package from Microsoft for this purpose
    Tuesday, February 15, 2011 9:42 PM

Answers

  • Dr Noah,

    After further research DHTMLED.OCX was provided with IE prior to IE 7 and as such available in Windows XP through until SP2.  The security vulnerabilities that it presented caused Microsoft to deprecate its functionality. 

    * http://www.microsoft.com/technet/security/bulletin/MS05-013.mspx

    * http://support.microsoft.com/kb/973869

    There was an article published in 2006 providing detail about the use of deprecation of DHTMLED.OCX along with mitigation strategies.

    * http://msdn.microsoft.com/en-us/library/aa663363.aspx

    Given the nature of retail payment processing a component such as this could be used to hack into and extract credit card data from Point of Sale systems. Furthermore, in addition to Windows Embedded POSReady 2009, these binaries did not exist in Windows Embedded for Point of Service (released in 2005).  These binaries were also excluded from the XP Embedded (SP2) and Windows Embedded Standard 2009 (SP3) toolkits for the same reason.

    Terry Warwick
    Microsoft


    Terry Warwick Microsoft
    Sunday, February 20, 2011 10:27 PM

All replies

  • Dr. Noah,

    Please try this http://support.microsoft.com/kb/906216.  There is an XP Pro SP2 update near the bottom of the article that you could apply to WEPOS (pre SP3), however POSReady 2009 is already based on SP3 which may have this fix in place already. If this is not the update you are looking for, please be more specific by providing the KB associated with the specific fix that you are interested in.  Both WEPOS and POSReady 2009 should be able to directly consume the XP Pro updates provided the update services binaries that are already included in WEPOS and POSReady.

    Terry Warwick
    Microsoft

     


    Terry Warwick Microsoft
    Thursday, February 17, 2011 5:57 AM
  • Our software requires the Dynamic HTML Editor for modeling. This was disabled in XP SP2. A KB896180 was issued to tend to this problem for this service pack. This fix does test for the service pack level and will not install on a SP3. For Vista and up, there is a separate installer to supply the functionality altogether. This installer works well for Vista, Windows server 2008, Windows 2008 R2 and Windows 7. It will not install anything on WePos SP3 or PosReady 2009. Under the KB896180, Microsoft does supply another package for Windows server 2003 and this package also works for XP 64bit. My problem is that the triedit.dll and dhtmled.ocx are apparently missing on WePos XP SP3 and from what i have seen in the field, the functionality is also missing in the PosReady 2009 which is also based on XP SP3.

    What i did as an experiment was to copy and install the triedit.dll and dhtmled.ocx from a standard XP computer into the WePos SP3. I found out that i needed also the dtcrt.dll to complete the functionality. A few dozen registry keys were needed to properly register the functionality. My problem is that this was done only as an experiment because I can not dare distribute Microsoft copyrighted material to our clients. Also, I did not create an intelligent and functional installer that would know all the rules needed to apply the update properly. Microsoft has this kind of information. I can only guess what is needed. My problem is that we have people out there that are buying these operating systems expecting them to work fine with our software but they are deceived because the WePos SP3 and PosReady 2009 are the only platforms that do not have the required files to make DHTML work correctly and i have not found any package or Knowledge Base fix that applies to this specific issue.

    Our software currently installs to all platforms of Windows 32 or 64 bits except the Itanium series. We support Windows 2000 up to Windows 7 and we apply the necessary patches and fixes provided by Microsoft to make our software work on all those platforms. The WePos and PosReady are based on XP but they apparently do not contain the whole of XP. This part is missing from the SP3 apparently and i have yet to find a package, fix or anything that applies to these O/S that would restore the missing pieces. 

     

     

    Thursday, February 17, 2011 3:07 PM
  • Dr Noah,

    After further research DHTMLED.OCX was provided with IE prior to IE 7 and as such available in Windows XP through until SP2.  The security vulnerabilities that it presented caused Microsoft to deprecate its functionality. 

    * http://www.microsoft.com/technet/security/bulletin/MS05-013.mspx

    * http://support.microsoft.com/kb/973869

    There was an article published in 2006 providing detail about the use of deprecation of DHTMLED.OCX along with mitigation strategies.

    * http://msdn.microsoft.com/en-us/library/aa663363.aspx

    Given the nature of retail payment processing a component such as this could be used to hack into and extract credit card data from Point of Sale systems. Furthermore, in addition to Windows Embedded POSReady 2009, these binaries did not exist in Windows Embedded for Point of Service (released in 2005).  These binaries were also excluded from the XP Embedded (SP2) and Windows Embedded Standard 2009 (SP3) toolkits for the same reason.

    Terry Warwick
    Microsoft


    Terry Warwick Microsoft
    Sunday, February 20, 2011 10:27 PM