Password Question

[Viper81]

Hi,

I saw on this site: http://www.devx.com/free/tips/tipview.asp?content_id=4024 a password protection is it possible to find the original pass or is this 100% safe?

Cheers
Viper

[x_goose_x]

Nowhere near safe. You need server-side.

[Viper81]

A friend of me has installed this on his site and he tolds me if i find the pass i have $20 :) How can you find the pass i see that everything is sum together with the ascii numbers.

[tommysphone]

whatever the page name is I think. At least I can see no other obvious code that contradicts me.


This line of code window.location=password+".htm"} would direct the user to the password protected page of the same name so if the password is testing then the html page is testing.htm

I hope I have not broken any rules in posting this reply as I am merely making an observation as requested.

I hope you get your $20 :)

[tommysphone]

whats the url of your friends site? I'd like to have a look at it.

[whammy]

usercode = john (or jhon, nojh, njoh, honj, etc.)
passcode = good (or dogo, doog, godo, ogod, odog, oodg, etc.)

The only way to be somewhat secure in javascript is to TELL the person the name of the page to go to...

Edit - after doing a little search, I found this:

http://www.dynamicdrive.com/dynamicindex9/password.htm

So it looks like our friend who submitted that script got it from dynamicdrive (no surprise, I thought it looked familiar).

What's funny is I cracked it right before I found that page... P.S. If I crack it for you can I have 50% ($10) ?
:)