How to do this on a website?

[simpo two]

I'm webmaster for a few simple sites. To give you an idea of my level, I use - and feel comfortable with - MS FrontPage. GoLive defeats me and html is chinese. Sorry experts, but there you go.

One of my customers is planning to sell their company and they want to make certain confidential information available on the web - but with password protection so only the invited few can get to the info.

Is this within the realms of FP? WIll I need to upgrade my hosting package to include FP extensions, or is it a complete non-starter? (I can however blindly copy and paste bits of code)

I tried doing a form once and failed completely, needing 'back office functions' but having no back office nor any idea where to find one.

Look forward to suitable numpty solutions

[_dobbo_]

Might be able to do it with Javascript.

Tons of stuff here on google covering this, and since the first link says

"Cut and Paste JavaScript-Password protected page" you might be ok. Never done it myself so can't comment on whether it's effective or secure...

Hope this helps though!

[alunr]

_dobbo_ said:

Might be able to do it with Javascript. Tons of stuff here on google covering this, and since the first link says "Cut and Paste JavaScript-Password protected page" you might be ok. Never done it myself so can't comment on whether it's effective or secure... Hope this helps though!

Javascript really is'nt secure! If the customer is selling I'm sure they could go to £100 notes to get a password protected domain somewhere.

Plenty of people on here who could do that (myself included)

[arcturus]

One way would be to put the secure info in a pdf document that can only be opened by those with the password.

Or alternatively you can use the .htaccess and .htpasswd functions on the webserver to limit access to certain directories by folder.

I use this on a few of my clients sites.

For example if you go to www.waterwide.co.uk you can move around the site ok. But when you go to the client area page and try and click on Demonstration 1 or Demonstration 2 you will find you wont get in (I hope!!) because you dont know the login details. There is no fancy html, just the directory permissions are set differently.

You may find http://wsabstract.com/howto/htaccess.shtml useful.

You will also need www.euronet.nl/~arnow/htpasswd/ for generating the encrypted passwords.



>> Edited by arcturus on Wednesday 15th December 20:07

[arcturus]

I would also echo the comment not to use java for it. Why? because it runs on the punters machine and is therefore inherently not secure. You want a system that is handled entirely by your server such as .htaccess.

[simpo two]

arcturus said:

One way would be to put the secure info in a pdf document that can only be opened by those with the password.

That's a great idea! I looked at htthingy and it seems very good, but a bit over my head.
I suppose that to write .pdfs with a password, I'll need Acrobat Elements after all?

[LaurenceFrost]

The most simple way of doing it is to put the protected pages and files in a sub-folder. That's the only work you need to do.

Now just tell your hosting company that you wish for the folder to be secured by a username and password.

They'll know what to do

[arcturus]

simpo two said:

I suppose that to write .pdfs with a password, I'll need Acrobat Elements after all?

Possibly.

If you only have a few to do, then I think you can do up to 5 docs for free on the Adobe site, but I'm not sure if the password protect option is available.

If you have Sun Open Office, that will write to .pdf or you could use some free software such as www.pdf995.com . Never used it myself so can't vouch for it.

If you only have a couple, mail me offline. I have full up Acrobat 6 Pro here.

[Jay-Aim]

arcturus said:

If you have Sun Open Office, that will write to .pdf or you could use some free software such as <a href="http://www.pdf995.com">www.pdf995.com</a> . Never used it myself so can't vouch for it.

I have and it's ace

>> Edited by Jay-Aim on Thursday 16th December 09:34

[Plotloss]

Whats wrong with a plain old .htaccess and a .htpasswd file?

[alunr]

Plotloss said:

Whats wrong with a plain old .htaccess and a .htpasswd file?

You assume a non MS server...

[Plotloss]

Arent most hosts *nix?

Our hero has suggested an MS IDE, but not server...

[arcturus]

Plotloss said:

Whats wrong with a plain old .htaccess and a .htpasswd file?

I refer you to this:

simpotwo said:

That's a great idea! I looked at htthingy and it seems very good, but a bit over my head.

[arcturus]

alunr said:

You assume a non MS server...

You are right; I did assume that. Should have stated that the .htaccess only applies to Unix/Linux web servers which most seem to be.

[Plotloss]

Its a fair cop, I skimmed...

Simpo

If you are skilled enough to use FrontPage you are skilled enough to add a couple of lines of text to a text file.

If it doesnt work, change it...

[JonRB]

You can get software that holds your hand and does all the .htaccess stuff for you, some include mailing users their password if they forget it!

I've done a quick search and turned up two - one free, one not free, plus a tutotial.

Here's the links:
A tutorial
A software tool
Another software tool
Google search results

>> Edited by JonRB on Thursday 16th December 10:32

[simpo two]

Plotloss said:

If you are skilled enough to use FrontPage you are skilled enough to add a couple of lines of text to a text file.

Good work chaps! I tried the javscript suggestion and it nearly worked, just wouldn't link to the protected page. Another tweak may fix it. Looks professional though.

However, you say that this method is insecure. Are you saying that anyone can simply go to the source code and remove the password bit to defeat it?

Plotloss, what couple of lines do you mean? Is this the javascript option or something else?

Laurence, do you mean that 123-Reg will make a page secure? I have no idea what system they use but I just pay about £40 a year for 200Mb of space. I don't think it comes with frills.

[Plotloss]

Couple of lines of plain text, it really is mickey mouse stuff, much easier than javascript...

[size13]

I havn't touched it for years, but doesn't frontpage have some security still built in? but I think it needs an MS server to work.

[JonRB]

I refer the honourable gentlemen to my links to the tutorial for .htaccess, and if that proves too advanced, to the links to the software tools that I also provided.

Edit: Just in case you missed it, the javascript idea sucks as it only gives the illusion of security. The only way to properly secure a folder is at the server, and for that you use .htaccess

>> Edited by JonRB on Thursday 16th December 11:52