Scripting Question

[Anthony]

<!-- Begin
function Login(){
var done=0;
var username=docume nt.login.userna me.value;
username=userna me.toLowerCase( );
var password=docume nt.login.passwo rd.value;
password=passwo rd.toLowerCase( );
if (username=="mem ber1" && password=="pass word1") {
window.location ="page1.html "; done=1; }
if (username=="mem ber2" && password=="pass word2") {
window.location ="page2.html "; done=1; }
if (username=="mem ber3" && password=="pass word3") {
window.location ="page3.html "; done=1; }
if (done==0) { alert("Invalid login!"); }
}
// End -->

In the above script, is there a way that I can direct a person to a
specific worksheet of an excel workbook saved as an XML spreadsheet
instead of another web page? If so, can someone please reply with the
correct syntax. Thanks.

[Evertjan.]

Anthony wrote on 30 dec 2006 in comp.lang.javas cript:

<!-- Begin
function Login(){
var done=0;
var username=docume nt.login.userna me.value;
username=userna me.toLowerCase( );
var password=docume nt.login.passwo rd.value;
password=passwo rd.toLowerCase( );
if (username=="mem ber1" && password=="pass word1") {
window.location ="page1.html "; done=1; }
if (username=="mem ber2" && password=="pass word2") {
window.location ="page2.html "; done=1; }
if (username=="mem ber3" && password=="pass word3") {
window.location ="page3.html "; done=1; }
if (done==0) { alert("Invalid login!"); }
}
// End -->

Sending the usernames and passwords to anyone on the web
is not realy a secure constraint.
I think it is more dangerous thad having no login at all,
because it gives false security to the user [and webmaster!]

Prossessing an xml file for display is another ball game,
where others might help you better.

In the above script, is there a way that I can direct a person to a
specific worksheet of an excel workbook saved as an XML spreadsheet
instead of another web page?

If the requested file is saved on a server, you could just put in the URL
and have the user download the file.

If it is saved on the client's pc, there is no access without
compromizing the security settings of the individual browser.

If so, can someone please reply with the
correct syntax. Thanks.

But again, please do not use the above fake security
of using clientside password checking!!!

That being said,
the above code is a bit strange,
as if the programmer did not know the "else" clause.

Where more users should be added a loop and array is more versatile,
only safe to use in a protected intra(!)net surrounding:

=============== test.html =============== ===
<script type='text/javascript'>
function Login(f){

var username = f.elements['username'].value.toLowerC ase();
var password = f.elements['password'].value.toLowerC ase();
var arr = [
['member1','pass word1','http://x.yz/page1.html'],
['member2','pass word2','http://x.yz/page2.html'],
['member3','pass word3','http://x.yz/page3.html']
];

for (n=0;n<arr.leng th;n++)
if (username == arr[n][0] && password == arr[n][1]) {
window.location .href = arr[n][2];
return false;
};

alert('Invalid login!');
return false;

};
</script>

<form name='login' onsubmit='retur n Login(this)'>
<input name='username' username<br>
<input name='password' password<br>
<input type='submit' value='go'>
</form>
=============== =============== ============
--
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)

[Anthony]

Thanks, for the help. The script I listed earlier is to be used for a
team website on a company intranet. You stated that it is not very
good code or even very secure for that matter. Is the code that you
wrote in your e-mail better? I expect that it probably is. Finally,
can I use this code on my site to do what I want? Thanks, again.
Evertjan. wrote:

Anthony wrote on 30 dec 2006 in comp.lang.javas cript:

<!-- Begin
function Login(){
var done=0;
var username=docume nt.login.userna me.value;
username=userna me.toLowerCase( );
var password=docume nt.login.passwo rd.value;
password=passwo rd.toLowerCase( );
if (username=="mem ber1" && password=="pass word1") {
window.location ="page1.html "; done=1; }
if (username=="mem ber2" && password=="pass word2") {
window.location ="page2.html "; done=1; }
if (username=="mem ber3" && password=="pass word3") {
window.location ="page3.html "; done=1; }
if (done==0) { alert("Invalid login!"); }
}
// End -->

Sending the usernames and passwords to anyone on the web
is not realy a secure constraint.
I think it is more dangerous thad having no login at all,
because it gives false security to the user [and webmaster!]

Prossessing an xml file for display is another ball game,
where others might help you better.

In the above script, is there a way that I can direct a person to a
specific worksheet of an excel workbook saved as an XML spreadsheet
instead of another web page?

If the requested file is saved on a server, you could just put in the URL
and have the user download the file.

If it is saved on the client's pc, there is no access without
compromizing the security settings of the individual browser.

If so, can someone please reply with the
correct syntax. Thanks.

But again, please do not use the above fake security
of using clientside password checking!!!

That being said,
the above code is a bit strange,
as if the programmer did not know the "else" clause.

Where more users should be added a loop and array is more versatile,
only safe to use in a protected intra(!)net surrounding:

=============== test.html =============== ===
<script type='text/javascript'>
function Login(f){

var username = f.elements['username'].value.toLowerC ase();
var password = f.elements['password'].value.toLowerC ase();
var arr = [
['member1','pass word1','http://x.yz/page1.html'],
['member2','pass word2','http://x.yz/page2.html'],
['member3','pass word3','http://x.yz/page3.html']
];

for (n=0;n<arr.leng th;n++)
if (username == arr[n][0] && password == arr[n][1]) {
window.location .href = arr[n][2];
return false;
};

alert('Invalid login!');
return false;

};
</script>

<form name='login' onsubmit='retur n Login(this)'>
<input name='username' username<br>
<input name='password' password<br>
<input type='submit' value='go'>
</form>
=============== =============== ============
--
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)

[Evertjan.]

Anthony wrote on 30 dec 2006 in comp.lang.javas cript:

Evertjan. wrote:

>>
Sending the usernames and passwords to anyone on the web
is not realy a secure constraint.
I think it is more dangerous thad having no login at all,
because it gives false security to the user [and webmaster!]

>>
That being said,
the above code is a bit strange,
as if the programmer did not know the "else" clause.

Where more users should be added a loop and array is more versatile,
only safe to use in a protected intra(!)net surrounding:

============== = test.html =============== ===
<script type='text/javascript'>
function Login(f){

var username = f.elements['username'].value.toLowerC ase();
var password = f.elements['password'].value.toLowerC ase();
var arr = [
['member1','pass word1','http://x.yz/page1.html'],
['member2','pass word2','http://x.yz/page2.html'],
['member3','pass word3','http://x.yz/page3.html']
];

for (n=0;n<arr.leng th;n++)
if (username == arr[n][0] && password == arr[n][1]) {
window.location .href = arr[n][2];
return false;
};

alert('Invalid login!');
return false;

};
</script>

<form name='login' onsubmit='retur n Login(this)'>
<input name='username' username<br>
<input name='password' password<br>
<input type='submit' value='go'>
</form>
============== =============== =============

[Please do not toppost on usenet]

Thanks, for the help. The script I listed earlier is to be used for a
team website on a company intranet. You stated that it is not very
good code or even very secure for that matter. Is the code that you
wrote in your e-mail better?

I never wrote you an email, this is an usenet posting.

No the code is not better security wize, and if you are not proficuient
enough to see the security flaw for yourself, PLEASE do not go this way.

Password security should be checked ON THE SERVER with serverside code.

I expect that it probably is.

No, see above. Even on an intranet, id you think security is important,
do not use clientside coded checking, becauseanyone can look at the
source and print out all the username/password combinations EVEN BEFORE
being checked.

If you show us an URL with your code, most of us here can get in within
30 seconds.

My code is "better",
in the sense that you can add per single row users ad libitum
without changing the rest of the code:

> var arr = [
['member1','pass word1','http://x.yz/page1.html'],

['blag','broum', 'http://www.cnn.com\'],
['bl222ag','br88 8oum','http://www.aol.com\'],
['bla444g','b666 roum','http://www.google.com\ '],

> ['member2','pass word2','http://x.yz/page2.html'],
['member3','pass word3','http://x.yz/page3.html']
];

Finally,
can I use this code on my site to do what I want?

Certainly, if you are not troubled with the above.

--
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)