Login Code

[kookie09]

I have a website I am building for school. It is done in Frontpage.. ya go ahead and laugh but I had no choice. I would like to add a login for members of the site and I found a code in javascript that works for one name and password but I'm not sure how to add more names and passwords.. what I have tried hasn't worked. Does anyone have a code or know how to add to this one?? Any help would be appreciated.

function authUser(form) {
if (form.Username.value=="kookie09") {
if (form.Password.value=="flossy") {
location="Local Clubs.htm"
} else {
if (form.Username.value=="giggen") {
if (form.Password.value=="celica") {
location="Local Clubs.htm"
} else {
location="UnAuthorized.html"
}
} else {
location="UnAuthorized.html"
}
}

[Rob]

You definitly DO NOT want to use javascript for 'login' functionality.

This is because anyone hitting 'view -> source' will see the usernames and passwords.

You really want some sort of SERVER SIDE scripting for this.

Javascript login scripts are unheard of... simply because they offer no security what-so-ever.

[GillBates]

Originally Posted by kookie09

I have a website I am building for school.

Just out of interest, what kind of school is it?

It's a jolly bad idea as rob says. Rather like hiding your key under the door mat. Anyone who wanted to break in would have a quick look there, just to see if you were really careless enough with your security to leave it there.

[kookie09]

Rob-Well... I'm not too concerned about security, its only for show for the class and if I ever host it live I wont have a login or anything but that is a very useful tip. I will have to keep that in mind for future. Lots more studying to do lol.

GillBates-I'm just doing a very wasteful Computer Systems Technician course at the local college. I realised too late its a big waste of money for what I'm getting out of it and will have to head to Waterloo or U of T when I find financing.

[spinal007]

u dont need money to learn this stuff.

i think most of the users of this website, and in fact most of really good web-dudes out there are self-taught.

just stick around and you'll pick it up...


btw: GillBates, you crack me up! love you site! 8)

[avitar.net]

Never use this, veiw source will let people bypass it as previously mentioned, however:

Code: Select all

// change your file Local Clubs.htm to Local_Clubs.htm
// do not use spaces in filenames!

var usrs = [
["bob","bobspassword"],
["ann","annspassword"],
["bill","billspassword"],
["john","johnspassword"]
];

function chkusr(u,p){ 
  var flag = 0;
  for (var a=0; a<=usrs.length;a++){
      if (u == usrs[0][0] && p == usrs[0][1]){flag++;break;}
  }
  return flag;
}

function authUser(){
   var myu = document.form.username.value;
   var myp = document.form.username.value;
   var redirstr = (chkusr(myu,myp))?"Local_Clubs.htm":"UnAuthorized.html";
window.location.href=redirstr;
}

if worst comes to worst look up paj's MD5 and SHA1 algorthm and store the password and username as those instead to afford basic security... then again they can always look up the redirect so its futile.