jQuery password protection? - I am trying to develop a site for a friend that contains some password-driven content that will be added to

trixiemay · 20th November 2009, 11:09 AM

I am trying to develop a site for a friend that contains some password-driven content that will be added to over time.

What is the easiest way to handle this? I am not building a cms and the site will not be database-driven.

Is there a jQuery plugin or something similar to get the functionality?

Mike Hopley · 22nd November 2009, 11:31 AM

Javascript is good for many things, but not security. As javascript is downloaded and executed on the client's computer, they can look inside your JS and simply read your password. If you've obfuscated it, they can still attempt to reverse-engineer the password.

For simple password protection of pages, use .htaccess basic authentication instead.

trixiemay · 22nd November 2009, 07:57 PM

The problem with using .htaccess is that we need to add several passwords for different people to access different pages over time. Is this a realistic option?

BTW The pages secured are of fairly low priority hence the 'quick and dirty' approach.

Mike Hopley · 23rd November 2009, 10:31 AM

Quote:

Originally Posted by trixiemay

The problem with using .htaccess is that we need to add several passwords for different people to access different pages over time. Is this a realistic option?

BTW The pages secured are of fairly low priority hence the 'quick and dirty' approach.

Well, if you have a large number of accounts that are manually maintained, then it will be tedious work -- but that's true whether you're using javascript or .htaccess.

I don't see any advantage of javascript here, except maybe that you're more familiar with it.

shalom_m · 24th November 2009, 02:01 PM

Why not use simple password protected directories?

trixiemay · 25th November 2009, 01:56 AM

So a page needs to go in a separate directory each time?

shalom_m · 25th November 2009, 05:00 PM

Yes, or a group of pages.

It seems a far better solution if you just want simple password protection.

Try it - it's simple enough.

trixiemay · 25th November 2009, 07:22 PM

Excuse my ignorance as I am more a designer than a programmer...
But what is the specific coding to allow this.
And can I create an .ht access file if the webhost hasn't supplied one?

saltedm8 · 25th November 2009, 08:30 PM

this should help you http://www.quickonlinetips.com/archi...with-htaccess/

trixiemay · 30th November 2009, 04:06 AM

Thanks for all your help.

I also found a password generator on Dynamic Drive.

20th November 2009, 11:09 AM	#1
trixiemay Member Join Date: Jan 2009 Posts: 67 Thanks: 1 Thanked 0 Times in 0 Posts	jQuery password protection? I am trying to develop a site for a friend that contains some password-driven content that will be added to over time. What is the easiest way to handle this? I am not building a cms and the site will not be database-driven. Is there a jQuery plugin or something similar to get the functionality?

25th November 2009, 08:30 PM	#9
saltedm8 Join Date: Dec 2008 Location: Kent Uk Posts: 1,461 Blog Entries: 5 Thanks: 13 Thanked 43 Times in 43 Posts Expertise: (X)HTML / CSS Experience: Professional	this should help you http://www.quickonlinetips.com/archi...with-htaccess/ __________________ THePiNcH

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

22nd November 2009, 11:31 AM	#2
Mike Hopley Member Join Date: Jul 2009 Posts: 91 Thanks: 0 Thanked 7 Times in 7 Posts Expertise: (X)HTML / CSS Experience: Quite Good	Javascript is good for many things, but not security. As javascript is downloaded and executed on the client's computer, they can look inside your JS and simply read your password. If you've obfuscated it, they can still attempt to reverse-engineer the password. For simple password protection of pages, use .htaccess basic authentication instead.

22nd November 2009, 07:57 PM	#3
trixiemay Member Join Date: Jan 2009 Posts: 67 Thanks: 1 Thanked 0 Times in 0 Posts	The problem with using .htaccess is that we need to add several passwords for different people to access different pages over time. Is this a realistic option? BTW The pages secured are of fairly low priority hence the 'quick and dirty' approach.

24th November 2009, 02:01 PM	#5
shalom_m Join Date: Jan 2009 Location: Or-Yehuda, Israel Posts: 397 Thanks: 0 Thanked 16 Times in 16 Posts Expertise: (X)HTML / CSS Experience: Quite Good	Why not use simple password protected directories?

25th November 2009, 01:56 AM	#6
trixiemay Member Join Date: Jan 2009 Posts: 67 Thanks: 1 Thanked 0 Times in 0 Posts	So a page needs to go in a separate directory each time?

25th November 2009, 05:00 PM	#7
shalom_m Join Date: Jan 2009 Location: Or-Yehuda, Israel Posts: 397 Thanks: 0 Thanked 16 Times in 16 Posts Expertise: (X)HTML / CSS Experience: Quite Good	Yes, or a group of pages. It seems a far better solution if you just want simple password protection. Try it - it's simple enough.

25th November 2009, 07:22 PM	#8
trixiemay Member Join Date: Jan 2009 Posts: 67 Thanks: 1 Thanked 0 Times in 0 Posts	Excuse my ignorance as I am more a designer than a programmer... But what is the specific coding to allow this. And can I create an .ht access file if the webhost hasn't supplied one?

30th November 2009, 04:06 AM	#10
trixiemay Member Join Date: Jan 2009 Posts: 67 Thanks: 1 Thanked 0 Times in 0 Posts	Thanks for all your help. I also found a password generator on Dynamic Drive.