Share your tricks or tips for Password Wizard with others!
This thread is for tricks and tips only - please no problem questions.
Have a problem or question then post in the
CoffeeCup Software Discussion thread, not here, so your question does not get overlooked.
Subscribe to this thread if you like to get emails on tips and Tricks people post
Ha en riktig god dag!
Inger, Norway
http://www.eikweb.com
http://www.horgenhonning.net/
http://www.norwayroots.com
http://www.johnsflats.com
Inger Eik
Senior Advisor
6,981 posts
Inger Eik
Senior Advisor
6,981 posts
A safe way of protecting your pages
Scott wrote these instructions for protecting a page from being accessed directly if the direct url is known:
Some people found the instructions a bit confusing, so I created a sample page here: http://www.coffeecuphelp.com/inger/password/index.html.
I made three files:
The first one, index.html, which you won't be able to see, is exactly like what Scott wrote, with the frameset instructions. Nothing in the body section.
2nd file was password.html, where I used the code that was generated by the CC Password wizard. It also generates a swf file that you have to upload to the same folder as the other files.
3rd file was hidden.html. This is the one to be protected, and I pasted in the script:
<script language=javascript>
<!--
if (parent.frames.length==0)
window.location.replace("URL_to_Password_Page")
// -->
</script>
Instead of "URL_to_Password_Page" I wrote "index.html".
You can right click on the sample pages I made to see the code of password.html and hidden.html.
Here is the direct URL to the page that is supposed to be protected:
http://www.coffeecuphelp.com/inger/password/hidden.html
(...and try clicking on the direct link to see if you get in just like that, without having to log in.
)
Ha en riktig god dag!
Inger, Norway
http://www.eikweb.com
http://www.horgenhonning.net/
http://www.norwayroots.com
http://www.johnsflats.com
Scott wrote these instructions for protecting a page from being accessed directly if the direct url is known:
Scott Swedorski wrote:
Hi
The strongest security is using a .htaccess file but not everyone has access to that. There is a work around however
To make sure that no one goes directly to the protected page, instead of through the Password Applet, you can use the following steps.
It requires use of Frames and JavaScript. If you are unfamilair with Frames, I suggest you read over this article, it explain them in an easy to understand fashion. Frames are a Picinic
1. This step should be done on the page where you want the password applet to be. For instance, I would create a page called "index.html" and put the following code in it:
(The Frameset code must be before the <BODY> tag)
<frameset rows="*,100%" border=0>
<frame name=hidden src=hidden.html marginwidth=0 marginheight=0 scrolling=no frameborder=0>
<frame name=visible src=password.html marginwidth=0 marginheight=0 scrolling=auto frameborder=0>
</frameset>
The "password.html" should have the Password Wizard code in it. It's what is displaying the Password Wizard login box.
2. This following code should be put in the <head> tag on the page you are protecting.
<script language=javascript>
<!--
if (parent.frames.length==0)
window.location.replace("URL_to_Password_Page")
// -->
</script>
"URL_to_Password_Page" should point back to "index.html" in this case. It's basically saying "You didn't get here through the right channel, go back to the login page"
IMPORTANT: Within Password Wizard you will need to make sure the target for the link is set to _self.
Hi
The strongest security is using a .htaccess file but not everyone has access to that. There is a work around however
To make sure that no one goes directly to the protected page, instead of through the Password Applet, you can use the following steps.
It requires use of Frames and JavaScript. If you are unfamilair with Frames, I suggest you read over this article, it explain them in an easy to understand fashion. Frames are a Picinic
1. This step should be done on the page where you want the password applet to be. For instance, I would create a page called "index.html" and put the following code in it:
(The Frameset code must be before the <BODY> tag)
<frameset rows="*,100%" border=0>
<frame name=hidden src=hidden.html marginwidth=0 marginheight=0 scrolling=no frameborder=0>
<frame name=visible src=password.html marginwidth=0 marginheight=0 scrolling=auto frameborder=0>
</frameset>
The "password.html" should have the Password Wizard code in it. It's what is displaying the Password Wizard login box.
2. This following code should be put in the <head> tag on the page you are protecting.
<script language=javascript>
<!--
if (parent.frames.length==0)
window.location.replace("URL_to_Password_Page")
// -->
</script>
"URL_to_Password_Page" should point back to "index.html" in this case. It's basically saying "You didn't get here through the right channel, go back to the login page"
IMPORTANT: Within Password Wizard you will need to make sure the target for the link is set to _self.
Some people found the instructions a bit confusing, so I created a sample page here: http://www.coffeecuphelp.com/inger/password/index.html.
I made three files:
The first one, index.html, which you won't be able to see, is exactly like what Scott wrote, with the frameset instructions. Nothing in the body section.
2nd file was password.html, where I used the code that was generated by the CC Password wizard. It also generates a swf file that you have to upload to the same folder as the other files.
3rd file was hidden.html. This is the one to be protected, and I pasted in the script:
<script language=javascript>
<!--
if (parent.frames.length==0)
window.location.replace("URL_to_Password_Page")
// -->
</script>
Instead of "URL_to_Password_Page" I wrote "index.html".
You can right click on the sample pages I made to see the code of password.html and hidden.html.
Here is the direct URL to the page that is supposed to be protected:
http://www.coffeecuphelp.com/inger/password/hidden.html
(...and try clicking on the direct link to see if you get in just like that, without having to log in.
)
Ha en riktig god dag!Inger, Norway
http://www.eikweb.com
http://www.horgenhonning.net/
http://www.norwayroots.com
http://www.johnsflats.com
James T. Kirk
Ambassador
967 posts
Unfortunately, Visual Site Designer is not capable of using Scott's frameset code:
(before body)
<frameset rows="*,100%" border=0>
<frame name=hidden src=hidden.html marginwidth=0 marginheight=0 scrolling=no frameborder=0>
<frame name=visible src=password.html marginwidth=0 marginheight=0 scrolling=auto frameborder=0>
</frameset>
The work around for me was instead of using the above code, I created a subdomain and instead of pointing to the directory, I FOWARDED the subdomain (do this through your web host)to the the password page. ie.(http://yourdomain.com/passwordpage.html). Then follow the all the other steps that Scott outlined and your page will work with VSD and gives even better protection as when fowarding a domain or subdomain, they can't see the protected page web address(url). I love Coffeecup and VSD!: http://mylife.coffeecup.com (add /stream to the url see boring pictures)
Web design assistance website built in
Visual Site Designer: http://www.abcomputered.com
Follow me on twitter: http://twitter.com/abcomputered
Save your PC if you spill a beverage on it: http://bit.ly/vBUe9X
Join me on Facebook http://bit.ly/acnpoD
Visit my Coupon Website! http://councilbluffscoupons.com
Member - Omaha Chamber of Commerce 2012
Proud Sponsor of NAMI Nebraska Walks 2012
Check out my profile for useful blog post on CC Products!
Call me at 402-813-4034 for web design assistance or shopping cart solutions.
(before body)
<frameset rows="*,100%" border=0>
<frame name=hidden src=hidden.html marginwidth=0 marginheight=0 scrolling=no frameborder=0>
<frame name=visible src=password.html marginwidth=0 marginheight=0 scrolling=auto frameborder=0>
</frameset>
The work around for me was instead of using the above code, I created a subdomain and instead of pointing to the directory, I FOWARDED the subdomain (do this through your web host)to the the password page. ie.(http://yourdomain.com/passwordpage.html). Then follow the all the other steps that Scott outlined and your page will work with VSD and gives even better protection as when fowarding a domain or subdomain, they can't see the protected page web address(url). I love Coffeecup and VSD!: http://mylife.coffeecup.com (add /stream to the url see boring pictures)
Web design assistance website built in
Visual Site Designer: http://www.abcomputered.com
Follow me on twitter: http://twitter.com/abcomputered
Save your PC if you spill a beverage on it: http://bit.ly/vBUe9X
Join me on Facebook http://bit.ly/acnpoD
Visit my Coupon Website! http://councilbluffscoupons.com
Member - Omaha Chamber of Commerce 2012
Proud Sponsor of NAMI Nebraska Walks 2012
Check out my profile for useful blog post on CC Products!
Call me at 402-813-4034 for web design assistance or shopping cart solutions.
Inger Eik
Senior Advisor
6,981 posts
Change the password for an existing user
Ha en riktig god dag!
Inger, Norway
http://www.eikweb.com
http://www.horgenhonning.net/
http://www.norwayroots.com
http://www.johnsflats.com
Joe Connell wrote:
I just got an email from Admin./Tech Support
Dave R. CoffeeCup Software Inc.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Developers are currently aware of this issue
and have it on their workload for the next version.
However, in the meantime there is a way to edit the entries.
1. Double-click the entry you want to edit.
2. Add another character (like 'a') to the end of the username.
3. Make any other changes you want. (Password/Link/etc)
4. Click OK to save the entry.
5. Double-click the entry. (re-open this entry)
6. Remove the extra character from the username.
7. Click OK. (to save with the changes you needed for this entry)
This successfully edits the information; just a quick workaround.
8. After this, you'll want to click Save -> Save as Macromedia Flash (swf) using same file name as before
9. Then reupload the swf file to your site. (replacing the Original one there)
Thanks,
~_~_~_~_~_~_~_~_~_~_~_~_~_~_~_~_~_~_~
David R.
CoffeeCup Software Inc.
An Internet 500 Company
http://www.coffeecup.com
=======================================
Other notes of interest about PW software I found...
If you have a problem with opening an existing PW you have saved
like the one that you need to make a Password change to above
and it only shows a Username input box.
Check the Horizontal box and then the Vertical input box
and both input boxes will return.
I also make sure any other features are the same as before
(Font; Color; Button...) to be safe
FYI... if you are adding a New User make sure that
you have not touched an existing user name in the Users box.
If you have, a cursor ( I ) will be present near the name you clicked last
and the New User you input will REPLACE the one there.
To prevent this from happening click inside any other input box above
(URL:[box] - Submit Button...[box] - etc) to MOVE your cursor there
and the New User will be added to the end of your list.
FYI
Joe Connell
www.ConnellCreationsUnlimited.com
ccuvideo@comcast.net
I just got an email from Admin./Tech Support
Dave R. CoffeeCup Software Inc.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Developers are currently aware of this issue
and have it on their workload for the next version.
However, in the meantime there is a way to edit the entries.
1. Double-click the entry you want to edit.
2. Add another character (like 'a') to the end of the username.
3. Make any other changes you want. (Password/Link/etc)
4. Click OK to save the entry.
5. Double-click the entry. (re-open this entry)
6. Remove the extra character from the username.
7. Click OK. (to save with the changes you needed for this entry)
This successfully edits the information; just a quick workaround.
8. After this, you'll want to click Save -> Save as Macromedia Flash (swf) using same file name as before
9. Then reupload the swf file to your site. (replacing the Original one there)
Thanks,
~_~_~_~_~_~_~_~_~_~_~_~_~_~_~_~_~_~_~
David R.
CoffeeCup Software Inc.
An Internet 500 Company
http://www.coffeecup.com
=======================================
Other notes of interest about PW software I found...
If you have a problem with opening an existing PW you have saved
like the one that you need to make a Password change to above
and it only shows a Username input box.
Check the Horizontal box and then the Vertical input box
and both input boxes will return.
I also make sure any other features are the same as before
(Font; Color; Button...) to be safe
FYI... if you are adding a New User make sure that
you have not touched an existing user name in the Users box.
If you have, a cursor ( I ) will be present near the name you clicked last
and the New User you input will REPLACE the one there.
To prevent this from happening click inside any other input box above
(URL:[box] - Submit Button...[box] - etc) to MOVE your cursor there
and the New User will be added to the end of your list.
FYI
Joe Connell
www.ConnellCreationsUnlimited.com
ccuvideo@comcast.net
Inger, Norway
http://www.eikweb.com
http://www.horgenhonning.net/
http://www.norwayroots.com
http://www.johnsflats.com
Darce Hoover
Senior Advisor
4,316 posts
dizzle wrote:
After TONS of help from Adam (thank you thank you thank you), I finally got password wizard to work with my page. In appreciation of Adam's help & to hopefully prevent him from having to work so hard on this topic again
P I made a step by step guide what I SHOULD have done from the very start:
Oh, and I know some people are getting it to work with 3 pages, but all I know is 4 so that's how I'm going to explain it. If you only want 3 pages....someone else is going to have to explain that to you)
Okay, here we go......
Step 1
I opened VSD and made 4 pages:
1st Page: index.html – this is the very first page that users come across when they put your URL into their browser. You most likely have this already since it IS required for your site to work. A link should be on this page that points to password.html
2nd page: login.html - this is the page that I want people to login from
3rd Page: password.html - this is just a blank page with codes in the header. This is the page that will be showing in the URL so you may want to make this name more “pleasing to the user.��
4th Page: protectedpage.html - this is the page I want people to get access to AFTER they login
If you're confused about this step with all the explanations, don't worry. Just go ahead and make 4 pages and title them -further explanation with what to do with each page comes later. You don't have to make the titles exactly the same, just make sure you can correlate them as I have mentioned above: index.html, login.html, password.html, protectedpage.html
Step 2
I opened the password wizard program
I designed my little box. I created usernames & passwords.
I put the URL of protectedpage.html in the “default protected page" box (e.g. http://www.mydomainname.com/protectedpage.html)
I made sure I set the drop down box that was next to the URL as _self (as opposed to _blank or _parent).
I uploaded it to my server and generated the code to paste into VSD
Step 3
I opened up VSD again.
In the login.html page (this is the page I want to put my login box at and want people to log in from). I inserted the code that was generated by password wizard.
I did this by going to the html tool box icon and then pasting the code that was generated by password wizard into the “BODY HTML" tab. This will create the login box on my page and I place this wherever I would like the login box to be.
I then minimized this page - I didn't need to do anything else to it to make this work.
Step 4
In the index.html page create a link “LOGIN" and make it point to password.html. You can do this by first using the text tool and simply type the text “login and be sure to check 'Allow advanced text" on the Information Tab in the Object Window. Then, highlight the word “login" and hit the icon at the top that looks like a two chain links.
There should be a little box somewhere on your screen that is titled “link window." You should see a list such as: page, email, www, etc. Under “page" use the drop down menu and highlight “password." (NOTE: Added by Darce Jean-CoffeeCup Advisor: You can select 'WWW' and enter your complete address to your 'password' page.)
I then minimized this page – I didn’t need to do anything else to it to make it work
Step 5
In protectedpage.html (this is the page I want people to gain access to AFTER they login) I inserted the following code by going edit --> insert HTML header & then pasting it into the “HEADER HTML" tab (as opposed to the “ON LOAD" tab):
<script language=javascript>
<!--
if (parent.frames.length==0)
window.location.replace ("http://www.mydomainname.com/password.html")
// -->
</script>
By doing the above step I am making sure that if someone were to type “http://www.mydomainname.com/protectedpage.html" into their browser they wouldn't be able to get to the page that way. It would redirect them back to the login.html page to basically force them to login to gain any access.
I then minimized this page - I didn't need to do anything else to it to make this work.
Oh, and paste the above code in every page you want to protect. I then made links to the other pages I want to protect in my protectedpage.html
Step 6
I then go to my password.html page and insert the following code by going Edit --> Edit Header or using the HTML Tool to enter Header: I paste the code in the "HEADER HTML" tab (as opposed to the "ON LOAD" tab):
<frameset rows="*,100%" border=0>
<frame name=hidden src=password.html marginwidth=0
marginheight=0 scrolling=no frameborder=0>
<frame name=visible src=login.html marginwidth=0
marginheight=0 scrolling=auto frameborder=0>
</frameset>
The above code is all I have in this page, nothing else.
I then minimized this page – I didn’t need to do anything else to it to make it work.
Step 7
I hit SAVE and uploaded my changes to my server.
Hopefully this works for everyone!
p.s Feel free to delete my other post with all the confusing questions & codes so others don't get confused.
After TONS of help from Adam (thank you thank you thank you), I finally got password wizard to work with my page. In appreciation of Adam's help & to hopefully prevent him from having to work so hard on this topic again
P I made a step by step guide what I SHOULD have done from the very start:Oh, and I know some people are getting it to work with 3 pages, but all I know is 4 so that's how I'm going to explain it. If you only want 3 pages....someone else is going to have to explain that to you
)Okay, here we go......
Step 1
I opened VSD and made 4 pages:
1st Page: index.html – this is the very first page that users come across when they put your URL into their browser. You most likely have this already since it IS required for your site to work. A link should be on this page that points to password.html
2nd page: login.html - this is the page that I want people to login from
3rd Page: password.html - this is just a blank page with codes in the header. This is the page that will be showing in the URL so you may want to make this name more “pleasing to the user.��
4th Page: protectedpage.html - this is the page I want people to get access to AFTER they login
If you're confused about this step with all the explanations, don't worry. Just go ahead and make 4 pages and title them -further explanation with what to do with each page comes later. You don't have to make the titles exactly the same, just make sure you can correlate them as I have mentioned above: index.html, login.html, password.html, protectedpage.html
Step 2
I opened the password wizard program
I designed my little box. I created usernames & passwords.
I put the URL of protectedpage.html in the “default protected page" box (e.g. http://www.mydomainname.com/protectedpage.html)
I made sure I set the drop down box that was next to the URL as _self (as opposed to _blank or _parent).
I uploaded it to my server and generated the code to paste into VSD
Step 3
I opened up VSD again.
In the login.html page (this is the page I want to put my login box at and want people to log in from). I inserted the code that was generated by password wizard.
I did this by going to the html tool box icon and then pasting the code that was generated by password wizard into the “BODY HTML" tab. This will create the login box on my page and I place this wherever I would like the login box to be.
I then minimized this page - I didn't need to do anything else to it to make this work.
Step 4
In the index.html page create a link “LOGIN" and make it point to password.html. You can do this by first using the text tool and simply type the text “login and be sure to check 'Allow advanced text" on the Information Tab in the Object Window. Then, highlight the word “login" and hit the icon at the top that looks like a two chain links.
There should be a little box somewhere on your screen that is titled “link window." You should see a list such as: page, email, www, etc. Under “page" use the drop down menu and highlight “password." (NOTE: Added by Darce Jean-CoffeeCup Advisor: You can select 'WWW' and enter your complete address to your 'password' page.)
I then minimized this page – I didn’t need to do anything else to it to make it work
Step 5
In protectedpage.html (this is the page I want people to gain access to AFTER they login) I inserted the following code by going edit --> insert HTML header & then pasting it into the “HEADER HTML" tab (as opposed to the “ON LOAD" tab):
<script language=javascript>
<!--
if (parent.frames.length==0)
window.location.replace ("http://www.mydomainname.com/password.html")
// -->
</script>
By doing the above step I am making sure that if someone were to type “http://www.mydomainname.com/protectedpage.html" into their browser they wouldn't be able to get to the page that way. It would redirect them back to the login.html page to basically force them to login to gain any access.
I then minimized this page - I didn't need to do anything else to it to make this work.
Oh, and paste the above code in every page you want to protect. I then made links to the other pages I want to protect in my protectedpage.html
Step 6
I then go to my password.html page and insert the following code by going Edit --> Edit Header or using the HTML Tool to enter Header: I paste the code in the "HEADER HTML" tab (as opposed to the "ON LOAD" tab):
<frameset rows="*,100%" border=0>
<frame name=hidden src=password.html marginwidth=0
marginheight=0 scrolling=no frameborder=0>
<frame name=visible src=login.html marginwidth=0
marginheight=0 scrolling=auto frameborder=0>
</frameset>
The above code is all I have in this page, nothing else.
I then minimized this page – I didn’t need to do anything else to it to make it work.
Step 7
I hit SAVE and uploaded my changes to my server.
Hopefully this works for everyone!
p.s Feel free to delete my other post with all the confusing questions & codes so others don't get confused.
Ryan Sneed
Registered User
5 posts
protect hidden pages
I've been able to protect "hidden" pages successfully using all the instructions provide by this forum. Please see www.hot-toppings.com and scroll to the bottom to utilize the login button. ID and PSWD are "test". However, after utilizing the login and getting to the hidden page, every URL from there on out, in the address bar shows my LoginIndex.html address instead of the true HTML page name. It doesn't seem to affect the navigation of my site, but I'd like customers to be able to cut/paste URLs, or send in support emails with the real URL name. My site organization looks like...
Page... LoginIndex.html.
Is completely blank except for the frameset instructions in the HEAD.
<frameset rows="*,100%" border=0>
<frame name=hidden src=resellers.html marginwidth=0 marginheight=0 scrolling=no frameborder=0>
<frame name=visible src=login.html marginwidth=0 marginheight=0 scrolling=auto frameborder=0>
</frameset>
Page... Login.html
Location of the .swf code inserted as BODY HTML code.
Page... Reseller.html
This is my hidden page with the following code inserted in the HEAD.
<script language=javascript>
<!--
if (parent.frames.length==0)
window.location.replace("LoginIndex.html")
// -->
</script>
Everything works fine, except for the URL names after the login is utilized. How can get the real URL name to display on the rest of my unprotected site after using the login function?
I host using Godaddy, on a Windows server. I have VSD 5.9.4 and Password Wizard 1.0.0. All registered.
thank you.
I've been able to protect "hidden" pages successfully using all the instructions provide by this forum. Please see www.hot-toppings.com and scroll to the bottom to utilize the login button. ID and PSWD are "test". However, after utilizing the login and getting to the hidden page, every URL from there on out, in the address bar shows my LoginIndex.html address instead of the true HTML page name. It doesn't seem to affect the navigation of my site, but I'd like customers to be able to cut/paste URLs, or send in support emails with the real URL name. My site organization looks like...
Page... LoginIndex.html.
Is completely blank except for the frameset instructions in the HEAD.
<frameset rows="*,100%" border=0>
<frame name=hidden src=resellers.html marginwidth=0 marginheight=0 scrolling=no frameborder=0>
<frame name=visible src=login.html marginwidth=0 marginheight=0 scrolling=auto frameborder=0>
</frameset>
Page... Login.html
Location of the .swf code inserted as BODY HTML code.
Page... Reseller.html
This is my hidden page with the following code inserted in the HEAD.
<script language=javascript>
<!--
if (parent.frames.length==0)
window.location.replace("LoginIndex.html")
// -->
</script>
Everything works fine, except for the URL names after the login is utilized. How can get the real URL name to display on the rest of my unprotected site after using the login function?
I host using Godaddy, on a Windows server. I have VSD 5.9.4 and Password Wizard 1.0.0. All registered.
thank you.
Net66
Registered User
42 posts
ryan.sneed@hot-toppings.com wrote:
Everything works fine, except for the URL names after the login is utilized. How can get the real URL name to display on the rest of my unprotected site after using the login function?
Everything works fine, except for the URL names after the login is utilized. How can get the real URL name to display on the rest of my unprotected site after using the login function?
In any non-protected page if you insert the following header code:
<SCRIPT TYPE="text/javascript">
<!--
if (top.frames.length!=0)
top.location=self.document.location;
// -->
</SCRIPT>
This checks to see if the page is being loaded into a frame and if so then it forces the page to break from the frame and load in the full screen window.
Best wishes,
Andy Automate your web marketing - http://www.66th.net
K Lynn Ball
Registered User
1 post
Is there a way to stop the url of the password protected page from being displayed after logging in??
K'Lynn Ball
K'Lynn Ball
SirAGE
Advisor
1,290 posts
Online Now
Take a look at this link...
http://www.megrisoft.com/kb/idx/0/007/a … king-.html "An Apple doth not fall far from its tree, yet an orange does."
http://lbwebsites.com - Web-Design & Hosting.
http://helpsite.sirage.com - HTML5, CSS3 and CC Help Video Blog.
http://www.sirage.com - Personal Site.
http://www.aveofluv.com - Wedding Site.
http://www.megrisoft.com/kb/idx/0/007/a … king-.html "An Apple doth not fall far from its tree, yet an orange does."
http://lbwebsites.com - Web-Design & Hosting.
http://helpsite.sirage.com - HTML5, CSS3 and CC Help Video Blog.
http://www.sirage.com - Personal Site.
http://www.aveofluv.com - Wedding Site.
Have something to add? We’d love to hear it!
You must have an account to participate. Please Sign In Here, then join the conversation.
