Page 1 of 1

HTML Security

Posted: Thu Jul 19, 2007 11:27 am
by The Bandit
If adding a new html web page in WG3.2, is there a way to require the user to log-in before the page can be viewed (similar to forums, files, etc)?

Re: HTML Security

Posted: Thu Jul 19, 2007 11:45 am
by dspain
The Bandit wrote:If adding a new html web page in WG3.2, is there a way to require the user to log-in before the page can be viewed (similar to forums, files, etc)?
i did it with my wg developer page just made it an active-h page requiring login, it loaded login.asp and passed from there. to prevent users from going directly to the link you can write a small web addon not allowing web http requests to anything but the root.

Re: HTML Security

Posted: Fri Jul 20, 2007 9:53 pm
by Toyduck
The Bandit wrote:If adding a new html web page in WG3.2, is there a way to require the user to log-in before the page can be viewed (similar to forums, files, etc)?
Just create a directory under your "webpages" directory in Worldgroup for all your new webpages, then create a login script as your index.htm file in this new directory.

I created "test" as the directory and test.htm for the example below.

You would use test/test.htm as the location to goto if the logoin is successful (change it to whatever directory name/filename you created).

This is entered as the VALUE statement as part of INPUT TYPE for the form.

You can also spruce up the page to match your website if you want.

Using this you need to be a WG member, or signup first.

TD

=========================
<HTML>
<HEAD>
<TITLE>Log-In Required</TITLE>
</HEAD>
<BODY>
<H1><I>Log-In Required</I></H1>

<P>Please enter your User-ID and password.<BR>
<FONT SIZE=-1>(If you don't have an account on this system, please
<A HREF="/signup/">sign up</A>.)</FONT>

<FORM NAME="login" ACTION="/session/login/" METHOD=POST>
<INPUT TYPE=HIDDEN NAME="onsuccess" VALUE="/test/test.htm">

<TABLE BORDER=0>
<TR>
<TD>User-ID:</TD>
<TD>&nbsp;&nbsp;</TD>
<TD><INPUT TYPE=TEXT MAXLENGTH=29 NAME="uid"></TD>
</TR>
<TR>
<TD>Password:</TD>
<TD>&nbsp;&nbsp;</TD>
<TD><INPUT TYPE=PASSWORD MAXLENGTH=9 NAME="pwd"></TD>
</TR>
<TR>
<TD COLSPAN=2>&nbsp;</TD>
<TD><INPUT TYPE=SUBMIT VALUE="Log In"></TD>
</TR>
</TABLE>

</FORM>

<SCRIPT LANGUAGE="JavaScript"><!--
document.login.uid.focus();
// --></SCRIPT>
</BODY>
</HTML>
====================================

Re: HTML Security

Posted: Fri Jul 20, 2007 10:39 pm
by dspain
Toyduck wrote:
The Bandit wrote:If adding a new html web page in WG3.2, is there a way to require the user to log-in before the page can be viewed (similar to forums, files, etc)?
Just create a directory under your "webpages" directory in Worldgroup for all your new webpages, then create a login script as your index.htm file in this new directory.

I created "test" as the directory and test.htm for the example below.

You would use test/test.htm as the location to goto if the logoin is successful (change it to whatever directory name/filename you created).

This is entered as the VALUE statement as part of INPUT TYPE for the form.

You can also spruce up the page to match your website if you want.

Using this you need to be a WG member, or signup first.

TD

=========================
<HTML>
<HEAD>
<TITLE>Log-In Required</TITLE>
</HEAD>
<BODY>
<H1><I>Log-In Required</I></H1>

<P>Please enter your User-ID and password.<BR>
<FONT SIZE=-1>(If you don't have an account on this system, please
<A HREF="/signup/">sign up</A>.)</FONT>

<FORM NAME="login" ACTION="/session/login/" METHOD=POST>
<INPUT TYPE=HIDDEN NAME="onsuccess" VALUE="/test/test.htm">

<TABLE BORDER=0>
<TR>
<TD>User-ID:</TD>
<TD>&nbsp;&nbsp;</TD>
<TD><INPUT TYPE=TEXT MAXLENGTH=29 NAME="uid"></TD>
</TR>
<TR>
<TD>Password:</TD>
<TD>&nbsp;&nbsp;</TD>
<TD><INPUT TYPE=PASSWORD MAXLENGTH=9 NAME="pwd"></TD>
</TR>
<TR>
<TD COLSPAN=2>&nbsp;</TD>
<TD><INPUT TYPE=SUBMIT VALUE="Log In"></TD>
</TR>
</TABLE>

</FORM>

<SCRIPT LANGUAGE="JavaScript"><!--
document.login.uid.focus();
// --></SCRIPT>
</BODY>
</HTML>
====================================
this would also force login on an external call http"//yourdomain/test"?
im no web tech by far im learning as i go :)
need a database module written im the man need an index.htm to say hello your SOL, lol

Re: HTML Security

Posted: Fri Jul 20, 2007 10:57 pm
by Toyduck
dspain wrote:
this would also force login on an external call http"//yourdomain/test"?
im no web tech by far im learning as i go :)
need a database module written im the man need an index.htm to say hello your SOL, lol
Yes, if a user entered http://yourdomain/test/ it still would force a login request. The WG webserver looks for 'index.htm' as the starting point for a web-set in a directory; putting the login script in the 'index.htm' causes the login request. It's not fooproof, but it is simple to do.

TD

Re: HTML Security

Posted: Fri Jul 20, 2007 11:55 pm
by Toyduck
The Bandit wrote:If adding a new html web page in WG3.2, is there a way to require the user to log-in before the page can be viewed (similar to forums, files, etc)?
Another option;

turn on secureweb in your setup files for WG; general setup, then set a key in security and accounting for it's administration.

Make the directory and/or .htm file you want in the /wgserver/webpages directory,

then enter the url; http://yourdomain/secureweb/ to reach your WG server.

You will get the option of 'securing' that directory by key and by an additional password if you want.

This is probably the most secure way with WG.

TD

Re: HTML Security

Posted: Sat Jul 21, 2007 10:16 am
by dspain
Toyduck wrote:
The Bandit wrote:If adding a new html web page in WG3.2, is there a way to require the user to log-in before the page can be viewed (similar to forums, files, etc)?
Another option;

turn on secureweb in your setup files for WG; general setup, then set a key in security and accounting for it's administration.

Make the directory and/or .htm file you want in the /wgserver/webpages directory,

then enter the url; http://yourdomain/secureweb/ to reach your WG server.

You will get the option of 'securing' that directory by key and by an additional password if you want.

This is probably the most secure way with WG.

TD
well i have galacticomm SSL as well i bought from netvillage about 2 years ago.
im not ready to dive into web production yet just looking at my options.

Re: HTML Security

Posted: Sun Jul 22, 2007 7:34 pm
by Toyduck
dspain wrote:
Toyduck wrote:
The Bandit wrote:If adding a new html web page in WG3.2, is there a way to require the user to log-in before the page can be viewed (similar to forums, files, etc)?
Another option;

turn on secureweb in your setup files for WG; general setup, then set a key in security and accounting for it's administration.

Make the directory and/or .htm file you want in the /wgserver/webpages directory,

then enter the url; http://yourdomain/secureweb/ to reach your WG server.

You will get the option of 'securing' that directory by key and by an additional password if you want.

This is probably the most secure way with WG.

TD
well i have galacticomm SSL as well i bought from netvillage about 2 years ago.
im not ready to dive into web production yet just looking at my options.
Well this procedure/option is available in WG 3.2 also.