Viewing Thread:
"members page"

hi all
is it posible to make a page available to members only,ie password protected

LukeM wrote:
> Ergghhhh, JavaScript is not secure.
> First rule of client side coding: Do not trust the client side.

Hmmm... see tag line! :¬)


Seems some JavaScripts are better than others...
It will 'brute force' it appears.


[s]Hmmm...[/s] My Freeola Instant Site

Clever script. More secure than many server side login scripts I've seen. :) I imagine that hash function produces many collisions so not something you can reverse engineer. Still as has been said, brute force and a few hours on a modern PC and you'd soon have all the answers.

I see no problem in using such scripts as long as people are aware of the limitations and realise that its possible for the url to be passed around etc.. I imagine theres an AJAX version around somewhere to help hide the url from being plainly visible on the browser too.

Garin wrote:
> Clever script. More secure than many server side login scripts
> I've seen. :) I imagine that hash function produces many
> collisions so not something you can reverse engineer. Still as
> has been said, brute force and a few hours on a modern PC and
> you'd soon have all the answers.
>
> I see no problem in using such scripts as long as people are
> aware of the limitations and realise that its possible for the
> url to be passed around etc.. I imagine theres an AJAX version
> around somewhere to help hide the url from being plainly visible
> on the browser too.

Introducing AJAX with a back end script would be a more secure solution since it could do the secure part on the server side, however this wouldn't be possible with InstantPro, even if you could include JavaScript, since the AJAX call would need to be to another server which is a cross domain call that by default are blocked by modern browsers for security purposes :(

I see no one since ButchML had an (illegal) peep yesterday has managed to view my JavaScript protected 'members' page!


But I can't see any of the doubters eating any humble pie either?!?! :¬P




[s]Hmmm...[/s] My Freeola Instant Site

Two failed attempts and a pop up box saying Incorrect password! then I cracked it popped in my next attempt and page refreshed and no pop up box so does that mean I win?

Do I get a GAD ?

Digi

Digitrader wrote:
> Two failed attempts and a pop up box saying Incorrect password!
> then I cracked it popped in my next attempt and page refreshed
> and no pop up box so does that mean I win?
>
> Do I get a GAD ?
>
> Digi

Unlucky Digi - if you mange to reach the 'members page' you will see I've added a word you can quote which shows you've cracked it.




[s]Hmmm...[/s]

Any news on that humble pie? Is it taking a long time to bake??

many thanks all, hav'nt a clue what you are talking about but thanks anyway,looks like i will have to get my 10year old granddaughter to sort it out for me

jj2 wrote:
> many thanks all, hav'nt a clue what you are talking about but
> thanks anyway,looks like i will have to get my 10year old
> granddaughter to sort it out for me


Sorry your post went a little off-topic :¬)

The answer you were looking for was posted a while back:

Eccles(Freeola):
Page protection/user control is coming but there is no time scale yet.




[s]Hmmm...[/s]

Garin wrote:
> Any news on that humble pie? Is it taking a long time to bake??



lol :¬)

I was thinking the same...






[s]Hmmm...[/s]