Validation through javascript....

[Yodai]

Hi all guys....

I am trying to do a little trick on javascrip but i am finding
dificulties....

I want a webpage to display a validation box while it charges.... I want
that, as the page is requested, the first thing that appears is a box that
asks for a name and a password. If the password supplied is wrong, then the
javascrip sends you to a 'forbidden acces' page, else it displays the
contents of the page. The thing is that it all has to be in the same page. I
have programmed a lot under C and C++ so I only have some problems with
knowing which functions to use. Any guidelines, or help? Does anybody know
how to do this, which should be fairly simple....?

Cheers!

Yodai

[DB McGee]

Yodai wrote:

I want a webpage to display a validation box while it charges.... I
want that, as the page is requested, the first thing that appears is
a box that asks for a name and a password. If the password supplied
is wrong, then the javascrip sends you to a 'forbidden acces' page,
else it displays the contents of the page.

This sounds to me like something you should be doing server-side (e.g. with
PHP).

In most cases, I'm all for client-side form validation wherever possible,
complemented with server-side validation of course, but in this particular case,
you are relying on your client-side validation (eg. via JavaScript) as an
authentication mechanism. If someone has JavaScript turned off, they would
completely by-pass your security mechanisms.

[kaeli]

In article <o4*******************@news04.bloor.is.net.cable.r ogers.com>,
no*****@noreply.com enlightened us with...

In most cases, I'm all for client-side form validation wherever possible,
complemented with server-side validation of course, but in this particular case,
you are relying on your client-side validation (eg. via JavaScript) as an
authentication mechanism. If someone has JavaScript turned off, they would
completely by-pass your security mechanisms.

Not to mention they can view the source and get the password.

--
--
~kaeli~
Dijon vu - the same mustard as before.
http://www.ipwebdesign.net/wildAtHeart
http://www.ipwebdesign.net/kaelisSpace

[Yodai]

Thank's guys... But I already know all that... What I am trying to do is to
get a validation for a personal webpage, which is not intended to be a
secure authentication sistem, but more of a fancy-like feature for
identification of users which I already know (customers and family) since
there's no sensible information anyway.

Any idea?

Cheers...

Yodai

[kaeli]

In article <S7***********************@telenews.teleline.es> ,
yo***@spamnot.mail.vu enlightened us with...

Thank's guys... But I already know all that... What I am trying to do is to
get a validation for a personal webpage, which is not intended to be a
secure authentication sistem, but more of a fancy-like feature for
identification of users which I already know (customers and family) since
there's no sensible information anyway.

Any idea?

Well, you could have a page that prompts for a password. If correct,
loads one page. If not, loads the other.
3 pages all together.

More complicated would be a dynamic write of contents - then you start
having to worry about browser types. Do they all use IE5+?

Remember that both are insecure as hell. :)

--
--
~kaeli~
Press any key to continue or any other key to quit
http://www.ipwebdesign.net/wildAtHeart
http://www.ipwebdesign.net/kaelisSpace

[Yodai]

"kaeli" <ti******@NOSPAM.comcast.net> escribió en el mensaje
news:MP************************@nntp.lucent.com...

In article <S7***********************@telenews.teleline.es> ,
yo***@spamnot.mail.vu enlightened us with...

Thank's guys... But I already know all that... What I am trying to do is to get a validation for a personal webpage, which is not intended to be a
secure authentication sistem, but more of a fancy-like feature for
identification of users which I already know (customers and family) since there's no sensible information anyway.

Any idea?

Well, you could have a page that prompts for a password. If correct,
loads one page. If not, loads the other.
3 pages all together.

More complicated would be a dynamic write of contents - then you start
having to worry about browser types. Do they all use IE5+?

Remember that both are insecure as hell. :)

Yup... I know... As a matter of a fact, they all use IE5+, or I can make
them use so... The thing is, it must be only one page.... I've thought maybe
could be a grey box covering the actual page with the authentication, if
correct, then it shows what has already been downloaded. Later I will see if
I make some sort of personalization depending on the username... The thing
is that it will all go on a webserver of an embbedded system I have
designed. The thing with this server is that it can only attend one call at
a time, and it can only contain one file, since my emmbedded doesn't have a
file system....

So?....

Cheers....

Yodai

[kaeli]

In article <Sw***********************@telenews.teleline.es> ,
yo***@spamnot.mail.vu enlightened us with...

Yup... I know... As a matter of a fact, they all use IE5+, or I can make
them use so...

Well, then, have the prompt check for a proper login. If it is correct,
write to a div the proper content. If it is not, write an error.

Extremely simple example with no error checking:

<html>
<head>
<title> test </title>
<script type="text/javascript">
function checkLogin()
{
var a=prompt("enter the password");
if (a=="noway") writeSuccess();
else writeFail();
}
function writeSuccess()
{
document.getElementById("writeArea").innerHTML="Su ccess!";
}
function writeFail()
{
document.getElementById("writeArea").innerHTML="Fa il!";
}
</script>
</head>

<body onLoad="checkLogin()">
<div id="writeArea"></div>
</body>
</html>

--
--
~kaeli~
Who is General Failure and why is he reading my hard disk?
http://www.ipwebdesign.net/wildAtHeart
http://www.ipwebdesign.net/kaelisSpace

[Yodai]

Cheers! I'll give it a try....

Yodai

<html>
<head>
<title> test </title>
<script type="text/javascript">
function checkLogin()
{
var a=prompt("enter the password");
if (a=="noway") writeSuccess();
else writeFail();
}
function writeSuccess()
{
document.getElementById("writeArea").innerHTML="Su ccess!";
}
function writeFail()
{
document.getElementById("writeArea").innerHTML="Fa il!";
}
</script>
</head>

<body onLoad="checkLogin()">
<div id="writeArea"></div>
</body>
</html>

--
--
~kaeli~
Who is General Failure and why is he reading my hard disk?
http://www.ipwebdesign.net/wildAtHeart
http://www.ipwebdesign.net/kaelisSpace