Viewing Thread:
"members page"

hi all
is it posible to make a page available to members only,ie password protected

Lol, I do realise, however if I were to attempt to crack this, the only valid way would be to tell you the password, not to look at the page.

Damn ButchML for peeping! But anyways, this challenge is open until the password has been revealed by the cracker in my eyes.

Hmmm... wrote:
> I can 'see' a Freeola staffie has already looked at the members
> page!!! :¬P

That would be me, as I have nowhere near enough knowledge to crack this, I was 'reverse-engineering' a solution. LukeM knows nothing of what I discovered however :)

Just so you know LukeM, I meant no 'peeping' at the files on my web space to see where the members page is.

I can 'see' a Freeola staffie has already looked at the members page!!! :¬P





[s]Hmmm...[/s] My Freeola Instant Site

Just so you know Hmmm, nothing on the FTP will be different from viewing source in my Internet browser since your security solution you have chosen is in JavaScript which is completely client side coded and therefore available within a client browser.

Since your functions are all client side (presuming this is only a JS password login) then they will be reverse engineer-able.

So basically even if someone in the office (not myself 'cos to be honest got no time for it, and probably couldn't anyway) you'll claim they cheated? :D He he, I know I would.

Still interesting debate though. I'll check back in a bit to see if anyone has managed it :D

Freeola, remember no 'reverse engineering' by looking at my files!!!

Perhaps I should have put the demo with another host!

As long as you can explain how you cracked things I'll be happy...





[s]Hmmm...[/s] My Freeola Instant Site

Ha ha if anyone has time to do this rather than work, I think they need to be scalped :D

Expect an answer soon anyway though, if it's possible. Always the way with IT people (or people who think they know everything anyway), once a chellenge is set.........haha

As I said it isn't very robust but is an option when .htaccess isn't available.

Unless you are storing MI5 secrets then you can project a 'members' page by using JavaScript!

Still don't believe me!

A quick Google found a decent looking script.
I've cobbled together a demo for you to crack:

JavaScript Password Challenge!

As you will see I've only added one user: 'Freeola'.
I've put a word on the projected page - just tell me what it is!

FAO staffies:
I know you've got access but NO cheating by FTPing to my webspace and looking for files! :¬P





[s]Hmmm...[/s] My Freeola Instant Site

Ergghhhh, JavaScript is not secure.
First rule of client side coding: Do not trust the client side.

Hopefully Eccles can implement password protection by the time of our next release, woop woop!

Eccles wrote:
> I'm not sure how Javascript could provide password protected
> areas. It a client side scripting language that can easily be
> turned off by the user, bypassing any restrictions it controls.
> Page protection/user control is coming but there is no time
> scale yet.

As I said it isn't as robust as .htaccess; but there are a few Javascript's that will stop most surfers!

But if you are implementing improvements helping the OP then that also sounds promising!


EDIT: Or I could have just said you have to switch to a normally hosted site then you have lots of options! :¬P


[s]Hmmm...[/s] My Freeola Instant Site