Secure Login with javascript

[jrp1]

I cant believe nobodys thanked him for this yet. +rep

[jenpen]

This is so cool and easy for a JS noobie like me BUT my JS menu has disappeared - there seems to have been a conflict of some type. If anyone can think of a fix, here's my page:
http://indigoedge.com.au/epublish/client/index.html

and you can log in with Client, Digipub.
Thanks, Jen

[jenpen]

Hey ignore that. I re-uploaded all files and now it's working fine. Must have missed something. Thanks anyway, it's a great little script for when it's not life-or-death security, just to make members feel special.

[nate.hernandez9]

Thank you for this code, it really comes in handy.
unfortunately, i am not too savy using JS. and i was wondering what exactly i would write/change to have the users be put in there own folder within the current directory. For example, lets say i have everything in a folder named "site" and the users are scrambled within the folder along with the other pages. how do i put them in their own folder, called "users" for instance?

[Shively-Mower]

What I would really like is to validate users via a look-up in a database already on the server, which seems to me to be a more secure method.

What code modifications does this script need.
Let's go with a table named passwords - how's that for imagination?
Field names would be User and Pass.
Keeping it simple, let's pretend it's an Access table in the /database directory.

One final totally armature question - where should I put this script within the web to assure that it only impacts access to the database application?

Thanks a 1,000,000 ±
Chuck

[samaneh1d1]

I am not very familiar with js. Would someone explain me that how this login provides security?
thanks in advance.

[keyboard1333]

Because you can't view all the files in a directory, the names (and therefor the correct username and password) are hidden.

The only way to login is to put in the correct username and password...

One easy way to crack this would be to just brute force the directory untill you find the files...

[Philip M]

Originally Posted by keyboard1333

Because you can't view all the files in a directory, the names (and therefor the correct username and password) are hidden.

The only way to login is to put in the correct username and password...

One easy way to crack this would be to just brute force the directory untill you find the files...

Not easy! Not if the file is named CrazyStanierPurpleStarling781.js or whatever.

[steveparkinson]

Oooops posted in the wrong place and can't see where to delete it...

Sorry

[steveparkinson]

Originally Posted by Ricky158

holy $*@&

i've been looking for a good password-gate-like thing for a loooooong time. this is awesome! i was about ready to post that i was having trouble, before i found out what to do. here's how i got it to work...

1) unzipped the files
2) uploaded ALL of them to my site
3) created a new "CoddingForums.js" page and renamed "CoddingForums"
4) in renamed "CoddingForums" page, paste all info from the text in the "CoddingForums.js" into the new, renamed page
5) thank borgtex for the awesome script

also, you've got to make sure the file name is "{Name}{Password}.js" no {}'s, no spaces, first letter of name and password is capitalized (or so i think. but i'm afraid to test). it works fine for me, doing the method above.

THANKS BORGTEX!!

I'm probably (no prabably about it!) really dumb, but I couldn't figure out how to get this thing working. Can anyone explain it better with examples?

I tried to put in

Username: john
password: smith

I modified the password field to hide the characters, which worked :-)

And I want it to point to a page called /johnsmith.html but when I do it it just comes back with "/auth.htm?johnsmith"

Imagine you are explaining this to a 5 year old lol...