password for members-only section

[milo]

I was asked by my club to put a password on our members-
only section. There needn't be a different password for
everyone; just a word we all know (let's say "parrot") to
validate against.

I tried doing this with a form, but there were two
problems:
1) it wants to send the data to a file or email. i don't
want the data
2) even though I set it to be a password field, when the
wrong password is put in, the validation message comes
back saying "Please enter a value equal to "parrot" in the
Password field". Sort of defeats the purpose!

What's the right approach in FP2002 for this sort of thing?

 

[Rod Potter]

You need to set up a sub-web which you can set permissions for only certain
people who have password can gain access. Check to see if host allows
subwebs. If so, open www.yoursite.com and make new folder called protected,
convert that folder to web which now makes it www.yoursite.com/protected/
and set permissions for it.

 

[Stefan B Rusynko]

See http://support.microsoft.com/default.aspx?scid=kb;en-us;825451
Your host will have to support subwebs and unique permissions under the FP Server Extensions





| I was asked by my club to put a password on our members-
| only section. There needn't be a different password for
| everyone; just a word we all know (let's say "parrot") to
| validate against.
|
| I tried doing this with a form, but there were two
| problems:
| 1) it wants to send the data to a file or email. i don't
| want the data
| 2) even though I set it to be a password field, when the
| wrong password is put in, the validation message comes
| back saying "Please enter a value equal to "parrot" in the
| Password field". Sort of defeats the purpose!
|
| What's the right approach in FP2002 for this sort of thing?

 

[Kevin Spencer]

The reason that passwords are not shared by groups of people is that
eventually, someone IN the group gets OUT. When your ONE password gets out
to the world, it is then time to change the password, and make EVERYONE
memorize the new one.

Using JavaScript to check a password is equivalent to giving out your
password to the entire world, as JavaScript can only read the same HTML
you're looking at in the browser. If the JavaScript can read it, you can
view the HTML source code and read it too. And so can anyone else.

I would suggest reading the following article on the Microsoft web site. It
tells you how to set up a restricted access web site. This can be a subweb
of your existing site, with special permissions:

http://support.microsoft.com/default.aspx?scid=kb;en-us;825451&Product=fpw

--
HTH,
Kevin Spencer
..Net Developer
Microsoft MVP
I get paid good money to
solve puzzles for a living

 

[Ronx]

The best approach is to use something on the server to provide security.
For a few users a subweb with unique permissions (as mentioned by others in
this thread), for many users a database application with ASP, PHP - whatever
your host supports.
see
http://support.microsoft.com/default.aspx?scid=kb;en-us;825498&Product=fpw
for an example using Access and ASP.

If you must use JavaScript (definitely not recommended for anything
requiring security) there is a better script at
www.rxs-enterprises.com/tests/jspass/

Ron