Hello. I wasn't sure if this is Java related, but here it is.

I have a Password gate Java Script on my site. I can set my list of usernames and passwords. Now what I would like to do, but not sure how... is when the user logs in, I would take them to a members only page, but it will still show the address above (Address bar),

Is there a way to hid that "members only" and possibly keep it from being added to favorites? I am not good at coding. Slowly learnign everything I know. Any help would be great.

Wolphe

You need server-side code for this. That way the page can be redirected to a login page if not logged in. so even if the page is bookmarked the visitor will be redirected.

how depends on what server side code you can use. Any javascript login system is by nature insecure because the info has to be client side even the usernames and passwords will be in the page source for anyone to see.

You'll want to learn a language that can code CGI (such "perl") or PHP. These are server side codes that can do what you want to do. I would suggest getting a remote server that supports these, as setting them up on your personal computer is nearly impossible without being baby-stepped through it. I've never gotten it to work, I've never been baby-stepped through it!

websiteallies.com supports both PHP (however it is an older version) and the newest version of perl. Pageresource.com has tutorials for perl, but I'm not sure about PHP. If you learn one, you've pretty well learned the other though.

Originally Posted by chrishirst

Any javascript login system is by nature insecure because the info has to be client side even the usernames and passwords will be in the page source for anyone to see.

Thats fine. it isnt a really important thing to hide. What my site is really is based on a game. Guess you can call it a "clan site". The restricted page(s) are for clan members only. And just has Game related info is all.

So what is this server-side thing you were talking about? Is there a place I could find that script or something similar or anything?

Wolphe

depends on what server-side code you can run ASP, PHP, Perl

there are lots of PHP samples around, ASP ones are a bit rarer without using a database, My Site Login code and there is one at Elated

Thank you lots. Fromt the looks of both. I will work on the elated one.

One last question though. Does ASP work with any webhosts? Is ASP a standard feature that is available for all web hosts? Reason I ask, is that I am using a free web hosting service. I looked all around my web hosts site and found no info if ASP is accepted and/or allowed. I emailed them that question, but no response yet.

Wolphe

Nope only windows hosting supports asp mainly, there are a few hosts on *nix who run Sun one ASP (formerly ChilliSoft! ) but it does have some differences from MS ASP.

More host will support a LAMP environment (Linux, Apache, MySQL, PHP)

But it's rare to find a free host with any server-side scripting at all.

Wouldn't it be possible to use javascript to open the page in a new window with no address bar? Granted, the address can still be obtained when doing it this way but not many would know how.

I don't know... it was just my first thought when I read the question.

If you don't want to deal with messy Server-Side code, I'd have them enter in their user name only on the gate, and then have them directed to a member page specifically designed for them. This page could be encrypted with a password prompt directly on it. That way it wouldn't matter if one did know the URL or not, as it would be encrypted with a password.

One ready-made solution for doing this is the xICE Web Protection Desktop:
http://www.xice.net/webprotect.html