I have made a log in page and it redirects to the other page fine. However I notice that the page name is not masked in the address bar. What stops a person from just copying the protected page address and accessing it directly if they wanted to?
Is there a way to hide the page address or protect it from direct access?
My sites: www.cedarstreetchurch.org, www.lojope.com and www.dteu.info
Mark Sleep
Registered User
388 posts
Bruzer
Senior Advisor
3,910 posts
I kept this from here in the forums maybe this can help you!
The strongest security is using a .htaccess file but not everyone has access to that. There is a work around however
To make sure that no one goes directly to the protected page, instead of through the Password Applet, you can use the following steps.
It requires use of Frames and JavaScript. If you are unfamilair with Frames, I suggest you read over this article, it explain them in an easy to understand fashion. Frames are a Picinic
1. This step should be done on the page where you want the password applet to be. For instance, I would create a page called "index.html" and put the following code in it:
(The Frameset code must be before the <BODY> tag)
<frameset rows="*,100%" border=0>
<frame name=hidden src=hidden.html marginwidth=0 marginheight=0 scrolling=no frameborder=0>
<frame name=visible src=password.html marginwidth=0 marginheight=0 scrolling=auto frameborder=0>
</frameset>
The "password.html" should have the Password Wizard code in it. It's what is displaying the Password Wizard login box.
2. This following code should be put in the <head> tag on the page you are protecting.
<script language=javascript>
<!--
if (parent.frames.length==0)
window.location.replace("URL_to_Password_Page")
// -->
</script>
"URL_to_Password_Page" should point back to "index.html" in this case. It's basically saying "You didn't get here through the right channel, go back to the login page"
IMPORTANT: Within Password Wizard you will need to make sure the target for the link is set to _self.
Could also try doing a forum search. good luck. "It's A Smart Person That Asks"
The strongest security is using a .htaccess file but not everyone has access to that. There is a work around however
To make sure that no one goes directly to the protected page, instead of through the Password Applet, you can use the following steps.
It requires use of Frames and JavaScript. If you are unfamilair with Frames, I suggest you read over this article, it explain them in an easy to understand fashion. Frames are a Picinic
1. This step should be done on the page where you want the password applet to be. For instance, I would create a page called "index.html" and put the following code in it:
(The Frameset code must be before the <BODY> tag)
<frameset rows="*,100%" border=0>
<frame name=hidden src=hidden.html marginwidth=0 marginheight=0 scrolling=no frameborder=0>
<frame name=visible src=password.html marginwidth=0 marginheight=0 scrolling=auto frameborder=0>
</frameset>
The "password.html" should have the Password Wizard code in it. It's what is displaying the Password Wizard login box.
2. This following code should be put in the <head> tag on the page you are protecting.
<script language=javascript>
<!--
if (parent.frames.length==0)
window.location.replace("URL_to_Password_Page")
// -->
</script>
"URL_to_Password_Page" should point back to "index.html" in this case. It's basically saying "You didn't get here through the right channel, go back to the login page"
IMPORTANT: Within Password Wizard you will need to make sure the target for the link is set to _self.
Could also try doing a forum search. good luck. "It's A Smart Person That Asks"
Mark Sleep
Registered User
388 posts
That java script worked great! Thanks Much Bruzer..........
My sites: www.cedarstreetchurch.org, www.lojope.com and www.dteu.info
My sites: www.cedarstreetchurch.org, www.lojope.com and www.dteu.info
Dana Katzman
Registered User
3 posts
I tried doing this and it wouldn't work. Ipasted the first code, before the body on my password page. The second code I pasted in between the head section on the page that I wanted password protected.
Where you say, "password.html". I substituted the generated htmlo page, that the wizard made and placed that in place of it.
I would really like to see two pages set-up like is talked about here, so that I could figure out, what I'm doing wrong. If anybody used this set-up on there website, using the password wizard, it would be greatly appreciated. Thanks:cool:
Where you say, "password.html". I substituted the generated htmlo page, that the wizard made and placed that in place of it.
I would really like to see two pages set-up like is talked about here, so that I could figure out, what I'm doing wrong. If anybody used this set-up on there website, using the password wizard, it would be greatly appreciated. Thanks:cool:
Bruzer
Senior Advisor
3,910 posts
Hi Dana,
I don't know it this will help you or not but it's something.
http://kellyinfo.com/MyFiles/tutorials/PasswordProtect.html
for further assistance please post here.
"It's A Smart Person That Asks"
I don't know it this will help you or not but it's something.
http://kellyinfo.com/MyFiles/tutorials/PasswordProtect.html
for further assistance please post here.
"It's A Smart Person That Asks"
Dana Katzman
Registered User
3 posts
Thanks Bruzer for the tutorial. I'm going to go through it. I'll let you know what happened.
Dana Katzman
Registered User
3 posts
I got it to work. Thanks for your help Bruzer!
Jimmy Newton
Registered User
2 posts
My Password Wizard worked perfectly for months until I changed a couple of the passwords today. Now when you enter the UN & PW the same page just reloads. You never see the back button appear, the page just reloads. I've checked the landing page shown in the address bar and it is correct. What did I do????
Jo Ann
Senior Advisor
6,675 posts
Online Now
Try clearing your browser cache Jimmy and see if that helps
Jo Ann
http://lbwebsites.com just recently completed and open
http://northbaldwinliteracycouncil.org .... Our local Literacy Council
Due to spammers the below sites are not viewable outside the US, sorry guys
http://proudayou.com - My sons website for his music business
http://rockinwithmainstreet.com - My brother's band website
Jo Annhttp://lbwebsites.com just recently completed and open
http://northbaldwinliteracycouncil.org .... Our local Literacy Council
Due to spammers the below sites are not viewable outside the US, sorry guys
http://proudayou.com - My sons website for his music business
http://rockinwithmainstreet.com - My brother's band website
Tom
Temporary User
5,410 posts
Does PW use redirects? This is the only time I have been unable to nav back using the button.
CoffeeCup... Yeah, they are the best!
Have something to add? We’d love to hear it!
You must have an account to participate. Please Sign In Here, then join the conversation.
