GetDotted Domains

Viewing Thread:
"members page"

The "Freeola Customer Forum" forum, which includes Retro Game Reviews, has been archived and is now read-only. You cannot post here or create a new thread or review on this forum.

Sat 15/08/09 at 12:57
Regular
Posts: 2
hi all
is it posible to make a page available to members only,ie password protected
Fri 21/08/09 at 19:59
Moderator
"Are you sure?"
Posts: 5,000
I see no one since ButchML had an (illegal) peep yesterday has managed to view my JavaScript protected 'members' page!


But I can't see any of the doubters eating any humble pie either?!?! :¬P




[s]Hmmm...[/s] My Freeola Instant Site
Fri 21/08/09 at 15:02
Regular
"Embrace the Martian"
Posts: 285
Garin wrote:
> Clever script. More secure than many server side login scripts
> I've seen. :) I imagine that hash function produces many
> collisions so not something you can reverse engineer. Still as
> has been said, brute force and a few hours on a modern PC and
> you'd soon have all the answers.
>
> I see no problem in using such scripts as long as people are
> aware of the limitations and realise that its possible for the
> url to be passed around etc.. I imagine theres an AJAX version
> around somewhere to help hide the url from being plainly visible
> on the browser too.

Introducing AJAX with a back end script would be a more secure solution since it could do the secure part on the server side, however this wouldn't be possible with InstantPro, even if you could include JavaScript, since the AJAX call would need to be to another server which is a cross domain call that by default are blocked by modern browsers for security purposes :(
Thu 20/08/09 at 16:31
Regular
"Devil in disguise"
Posts: 3,151
Clever script. More secure than many server side login scripts I've seen. :) I imagine that hash function produces many collisions so not something you can reverse engineer. Still as has been said, brute force and a few hours on a modern PC and you'd soon have all the answers.

I see no problem in using such scripts as long as people are aware of the limitations and realise that its possible for the url to be passed around etc.. I imagine theres an AJAX version around somewhere to help hide the url from being plainly visible on the browser too.
Thu 20/08/09 at 15:42
Moderator
"Are you sure?"
Posts: 5,000
LukeM wrote:
> Ergghhhh, JavaScript is not secure.
> First rule of client side coding: Do not trust the client side.

Hmmm... see tag line! :¬)


Seems some JavaScripts are better than others...
It will 'brute force' it appears.


[s]Hmmm...[/s] My Freeola Instant Site
Thu 20/08/09 at 15:24
Staff Moderator
"Freeola Ltd"
Posts: 3,299
A serious scalping! :D
Thu 20/08/09 at 15:14
Regular
"Embrace the Martian"
Posts: 285
I was not making any noises Warhunt!! :S lol

Well I'm meant to be working anyways, stop trying to distract me Hmmm! The hashing function in JavaScript is mighty, I think the only way to reverse it, would not to reverse it and brute force it instead.

I'll try it when I get home from work :D I love the challenge Hmmm, a colleague suggested a "challenge Hmmm" forum!

Oh I need a scalping :'(
Thu 20/08/09 at 14:13
Staff Moderator
"Freeola Ltd"
Posts: 3,299
Haha yeah I meant our staff. Mainly a dig seen as I'm so busy lol :D

And my other post was meant light hearted too, haha, maybe I just shouldn't post :D Bah humbug and all that :P

I think LukeM was fairly close by the way. He was making all the right noises :D
Thu 20/08/09 at 14:03
Moderator
"Are you sure?"
Posts: 5,000
Don't be so touchy! :¬)

Ha ha if anyone has time to do this rather than work, I think they need to be scalped :D -
that was what I meant about me 'wasting my time' - and I'm in agreement with you!


EDIT: I think I've read you all wrong!
were you referring to people trying the challenge? I thought you meant it was me that should be 'scalped'! :¬P


This all goes back to my InstantPro Javascript/Adsense post - I just mentioned (picking on Eccles not you!) that this was another thing to look forward to when the InstantPro JavaScript plugin is available.




[s]Hmmm...[/s] My Freeola Instant Site
Thu 20/08/09 at 13:55
Staff Moderator
"Freeola Ltd"
Posts: 3,299
Hmmm... wrote.....
> Warhunt seems to think I'm wasting my time (I am!) but thought
> the effort was worth it to reply to Eccles & LukeM's earlier
> posts.


Haha always me ain't it? No matter how nice i try to be :( LOL
No idea what I said to make you see "I think you are wasting your time" but ...meh....not important. :D

I actually thought it was fun. But I didn't have the time to look into it myself, as I'm busy. (Plus I wouldn't have been able to do anything anyway)
Thu 20/08/09 at 13:37
Moderator
"Are you sure?"
Posts: 5,000
ButchML wrote:
> That would be me...

lol - you guys! I specifically said NO CHEATING! :¬)


I think I've sort of proved my point that you can use JavaScript to 'protect' a members page. No it isn't robust but a half decent script seems to be able to keep most surfers out!

Warhunt seems to think I'm wasting my time (I am!) but thought the effort was worth it to reply to Eccles & LukeM's earlier posts.

I can see some of Freeola's biggest brains (not just staffies) have had a go ;¬)


So IMO if this page is safe guarding the local WI's recipes it would do...



[s]Hmmm...[/s] My Freeola Instant Site

Freeola & GetDotted are rated 5 Stars

Check out some of our customer reviews below:

10/10
Over the years I've become very jaded after many bad experiences with customer services, you have bucked the trend. Polite and efficient from the Freeola team, well done to all involved.
Best Provider
The best provider I know of, never a problem, recommend highly
Paul

View More Reviews

Need some help? Give us a call on 01376 55 60 60

Go to Support Centre

It appears you are using an old browser, as such, some parts of the Freeola and Getdotted site will not work as intended. Using the latest version of your browser, or another browser such as Google Chrome, Mozilla Firefox, or Opera will provide a better, safer browsing experience for you.