Javascript newbie

[sehrlund]

Help....I am a Javascript newbie! I am trying to create a js file with login IDs and passwords for multiple users. The code I have is for one user.
How do I change this code to accomodate multiple users:

Code: Select all

function authUser(form) { 
if (form.Username.value=="member1") { 
if (form.Password.value=="testing") { 
location="Welcome.html" 
} else { 
location="UnAuthorized.html"
} 
} else { 
location="UnAuthorized.html"
} 
}

I have tried a whole lot of things but nothing recognizes more than one user. Any help would be greatly appreciated.

[c010depunkk]

You can either make an array of usernames and passwords but then that's not dynamic. Your other option is to have some kind of database (mySQL, file).

[ScottR]

When i think of JavaScript and passwords I think:

alert("DO NOT USE JAVASCRIPT FOR PASSWORDS!")

Not a good idea. I hope this is for learning purposes. If you use JS anyone can see the passwords and all the other personal information. Not to mention that they can just shut it off and access anything they want.

Use a server side language such as PHP or ASP to check for passwords and usernames against a database.

Although it is ok to use JS to validate the entry before sending off to the server.

You cannot access a MySQL database with JS.

Good Luck,
Scott

[sehrlund]

thanks. the idea was simply to validate passwword and re-type password before the form data goes off to the server.

[Kropotkin]

Code: Select all

var users = new Array();
users["mary"] = "secret"; //associative array
users["fred"] = "password";
//add new uers here
 
 
function authUser() { 
 
var user = form.Username.value;
var password = form.password.value;
 
 
if (users[user]==password) { 
alert('ok'); 
}
else
{
alert('no entry'); 
}
 
}
 
authUser();

of course like ScottR says this is no security at all.

On a minor point perhaps I can correct Scott? If you wanted to use javascript to access a mySQL database you could use JScript.net (basically Javascript with bells) or - I think Borland used to make a web server Intraserver that used Javascript. Or JScript in ASP. Unusual but possible

[joe3dge]

could one not easily hide the data in an external .js file though to keep securaty?

[Kropotkin]

I don't think so Joe

The external js file is visible - unless you are talking signing it and encrypting it - but i don't think anyone does that? Netscape had a system but as far as i know it never caught on?

Justin