Help - Search - Members - Calendar
Full Version: Login access
Forums > Resource Center > Webmasters' Corner
hermes
ok. i don't know how to have pages accesable to only some ppl..
no. i don't want to password protect the directory, it only gives you one username..
ok here it is what im planning
have a staff.sitename.com subdomain and have all of the pages under the staff subdomain to be protected.. i want to have a login system which is going to be accessible to about 10 ppl & each have they're own username.

how do i do that?
did i explain myself correctly?
PS. i want to use html not php
and i have XAMPP for testing pages just in case..
itanium
I wrote a really basic one, it's not going to be the most secure login form, but it will get the job done.

The second one has to be saved as "passList.js" in the same directory as the first one.

CODE

<html>
<head>
<title>Login</title>
<script src="passList.js"></script>
<script>
<!-- Begin
nameSW = false
passwordSW = false


function getUser() {
if (names.length != passwords.length) {alert("Database error!");return false;}
alert("Names:\n"+names); alert("Passwords\n"+passwords)
alert("# of names = "+names.length); alert("# of passwords = "+passwords.length)
name = prompt("Please enter your name");
password = prompt("Please enter your password");
for (i=0; i<names.length; i++) {
if(name == names[i]) {nameSW = true; break}
}
if (password == passwords[i]) passwordSW = true
if (nameSW && passwordSW) location.href = "YOUR PAGE HERE"
else location.href = "http://www.google.com"
}
// End -->
</script>
</head>

<body onLoad="getUser()">


</body>
</html>

CODE

/*
Title this page passList.js
*/
// begin
names = new Array()
names[0] = "USERNAME"
names[1] = "USERNAME"
names[2] = "USERNAME"
names[4] = "USERNAME"
names[5] = "USERNAME"
names[6] = "USERNAME"
names[7] = "USERNAME"
names[8] = "USERNAME"
names[9] = "USERNAME"

passwords = new Array()
passwords[0] = "PASSWORD"
passwords[1] = "PASSWORD"
passwords[2] = "PASSWORD"
passwords[3] = "PASSWORD"
passwords[4] = "PASSWORD"
passwords[5] = "PASSWORD"
passwords[6] = "PASSWORD"
passwords[7] = "PASSWORD"
passwords[8] = "PASSWORD"
passwords[9] = "PASSWORD"
// end


Tell me if this works, because I have no idea if it will or not, I only spent a few minutes writing it.
Fawaz
There is no way to use just HTML to bulid a login page and javascript as provided is not secure because to disable that all you need to do is disable javascript.

Their are other languages that you could use other than PHP.

I only know php so sorry I can't help you.
fixtatik
^ Not to mention anyone could just open the passList.js file and see all the passwords.

@ OP: what do you mean by you don't want to password-protect the directory? If you don't protect it with a password, then anyone could get in there, unless you restrict it by IP address.
itanium
QUOTE(fixtatik @ Jul 23 2009, 06:28 PM) *
^ Not to mention anyone could just open the passList.js file and see all the passwords.

@ OP: what do you mean by you don't want to password-protect the directory? If you don't protect it with a password, then anyone could get in there, unless you restrict it by IP address.

True, I just gave OP what he/she asked for.

There is always encryption.
mipadi
QUOTE(fixtatik @ Jul 23 2009, 07:28 PM) *
^ Not to mention anyone could just open the passList.js file and see all the passwords.


Or just disable JavaScript and, voilá, the "protection" is gone.

QUOTE(hermes @ Jul 23 2009, 05:39 PM) *
ok. i don't know how to have pages accesable to only some ppl..
no. i don't want to password protect the directory, it only gives you one username..
ok here it is what im planning
have a staff.sitename.com subdomain and have all of the pages under the staff subdomain to be protected.. i want to have a login system which is going to be accessible to about 10 ppl & each have they're own username.

how do i do that?
did i explain myself correctly?
PS. i want to use html not php
and i have XAMPP for testing pages just in case..


There are a couple of ways to do it:
  1. Contrary to popular belief, you can password-protected a directory for multiple users. You have to create a group that contains all the users who should have access, and then give the group read/write permissions for the protected directory. To do this, you really have to have admin access to your server, or know someone who does.
  2. Otherwise, you'll have to use server-side scripting like PHP.
tcunningham
QUOTE(mipadi @ Jul 23 2009, 07:42 PM) *
Or just disable JavaScript and, voilá, the "protection" is gone.

Isn't that what Fawaz just said? _unsure.gif

If you're not solicitating the domain all over the place, protecting the domain with a password would probably be the easiest method.
mipadi
QUOTE(tcunningham @ Jul 23 2009, 07:46 PM) *
Isn't that what Fawaz just said? _unsure.gif

I missed that. But it's not a bad idea to emphasize that "password-protecting" a site using plaintext passwords stored in a JavaScript file is not a very good method of security, and will only thwart dumb people.
hermes
QUOTE(fixtatik @ Jul 23 2009, 06:28 PM) *
@ OP: what do you mean by you don't want to password-protect the directory? If you don't protect it with a password, then anyone could get in there, unless you restrict it by IP address.

i mean goin to the cPanel and under Advanced click on 'Password Protect Directories' which only gives you one username, and i want more than 1.


so how do i do it?? doesn't matter if its html or php.. as long as it is secure. any tutorials or something?
Mikeplyts
I'm not sure if this is what you want, but I found a tutorial on Net Tuts+ that has a simple login system that would require PHP and MySQL.

Idk, I went ahead and just entered "login" as a keyword there and you can view the results here and you could see if you like something. shrug.gif You could also try searching "custom login system" at google. :|
medic
QUOTE(Mikeplyts @ Jul 25 2009, 12:19 AM) *
I'm not sure if this is what you want, but I found a tutorial on Net Tuts+ that has a simple login system that would require PHP and MySQL.

Idk, I went ahead and just entered "login" as a keyword there and you can view the results here and you could see if you like something. shrug.gif You could also try searching "custom login system" at google. :|


Net Tuts+ is actually very nice, yet has it's moments. If you have access to WHM with no limitations (So basically if you have your own server) you could do this, but without that access I would go with what Mikeplyts suggested and use that.

By the way, what are you using this area for? If you are doing just files and want to have your own designed template in the "staff" are, go for Net Tuts+. If you want a true staff area that is designed for production, look into a product management software of sorts. Two are already in Fantastico under your hosts cPanel (if they care about you) ready for installing, they are called dotProject and PHProjekt.

DotProject
Project Management featuring companies, projects, tasks (with Gantt charts), forums, files, calendar, contacts, tickets/helpdesk, language support, user/module permissions, themes.

PHProjekt
Project Management featuring optional group system, privileges, calendar, contacts, time card, projects, chat, forum, request tracker, mail client, files, notes, bookmarks, to-do list, reminder, voting, language support.

Both work very well.

Also look into some collaboration software, they differ somewhat from Project Management software, but are kinda cool.

Now, if you are looking for login security, you need a SSL certificate as well. That's a whole other story, and a somewhat complicated one.
hermes
^^thanks i'll see if that's what im looking for
@ mike too..
i'll try both
synatribe
This is a login script I found, although I havent used the login script from this author, I have used the icon sort

here http://new-place.org/scripts.php

here is a demo http://new-place.org/demo/simplelogin/
hermes
how about ASP, i looked at google but they just give you the files, the tech them, but they never say anything about making the database..

so i finally got a response from my cousin she wants this in the staff section
QUOTE
ok this is wat i want in it essentially:
-email
-announcements
-links
-discussion
-calendar of events
-file sharing
-projects currently being worked on (specified to person if possible): will have their own info
-file sharing
-production schedule
-script (movie)
-call sheet (conatains names and contact info for cast and crew of that project)
-storyboards


so i was looking for project managing software but didnt find anything useful
so any software for the site that yall recommed in addition to the ones mentioned by medi..

im clueless right now!! :/
medic
QUOTE(hermes @ Jul 27 2009, 01:12 AM) *
how about ASP, i looked at google but they just give you the files, the tech them, but they never say anything about making the database..

so i finally got a response from my cousin she wants this in the staff section
so i was looking for project managing software but didnt find anything useful
so any software for the site that yall recommed in addition to the ones mentioned by medi..

im clueless right now!! :/


To be honest I can't think of any pre-made web based software that does that for free, or even paid software. Not to mention something of that large requirements using multiple software and MySQL services will be a heavy burden on a servers CPU. Meaning she might either need a VPS or a Dedicated server to actually run it, if the site gets big enough, which in this case could be a just a few people using different areas of the site, it will be too big to host on a shared hosting server environment.
Mikeplyts
I think you could use that code I gave you from Net Tuts+ or maybe even the code Kevin (synatribe) gave you, and just manually add those pages and sections and stuff in there. I could probably help if you want. shrug.gif
Mike
Mike, I'm pretty sure it's not a manual project considering how many users Mario wants to give access to on the directory he's password-protecting. Since there are so many specifics with the cousin's request, Garrett's reply is more realistic.
synatribe
if you use ASP coding, my script wont work cause PHP dosent work side by side with the servers unless you are using mySQL. Like Medic pointed out, something you requested is going to take up alot of CPU, so you would need to get at least a VPS.
medic
It's not impossible to do, but it's impossible to do on a shared hosting account. You could install multiple software for your needs and they would have to remember a login for each system. A lot of what she is wanting to do can be done with a simple forum software and cPanel. You could mold your needs around phpBB, IPB or vBulletin.

-email (This can be done with Google Aps for your domain, it's free)
-announcements (This can be done with a simple forum software)
-links (This can be done with a simple forum software)
-discussion (This can be done with a simple forum software)
-calendar of events (This can be done with Google Aps for your domain, it's free)
-projects currently being worked on (specified to person if possible): will have their own info (This could be done in a forum software environment)
-file sharing (You could use RapidShare or MegaUpload to do this for free and post the links)
-production schedule (This could be done in a forum software environment or the Calendar that comes with Google Apps)
-script (movie)
-call sheet (This could be done in Google Apps with Google Docs for your "domain")
-storyboards (This can be done with Google Docs and/or the simple forum software)

The only problem with all of the ideas I have thrown together is having to use two logins. One for your Google Apps login area and the other for the forums. You could host the downloads on your servers, but you'd have to make a shared public FTP area for all your users.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.