HTML Authentication page

This WebDNA talk-list message is from

1999

It keeps the original formatting. numero = 25644
interpreted = N
texte = Hello dear WebCatters, I'm a lurker on this list since WC 1.0 or 2.0 beta (17/04/97 to by precise for Ken ;-). I think I've found something cool interesting enough to waste your time today ;-)After hours of searching 'n tweaking, I finally found a trick to bypass that ugly HTTP authentication window and have a nice looking Login page in HTML (this one is not nice looking yet ;-). It takes 4 pages (1->4) but works decently. Here is my code. I have some question for you at the end of my mail. I assume that .tpl pages goes through WC without the tag. (I deleted all and tags)1) Login.tpl2) step1.tpl (this force the WC var in http headers)[redirect http://[username]:[password]@http://www.adomain.com/step2.tpl]3) step2.tpl (this remove them from the URL)[include file=^protect.inc&groups=mygroup]4) step3.tpl (this redirect to a protected page)[redirect http://www.adomain.com/anypage.tpl]5) anypage.tpl (can be any page protected by Authenticate).[include file=^protect.inc&groups=mygroup] Hello [username], [password].In Global Folder:6) members.dbuserpassgroupsfirstnamelastnameemailskumyloginmypasswordmygroupMyfirstnamemylastnamean@emailaSkuID7) protect.inc[showif NotFound=[lookup db=^members.db&lookinField=user&value=[uppercase][username][/uppercase]&returnField=user¬Found=NotFound]][authenticate Username][/showif][showif [url][uppercase][password][/uppercase][/url]![url][lookup db=^members.db&lookinField=user&value=[uppercase][username][/uppercase]&returnField=pass¬Found=NotFound][/url]][authenticate Password][/showif][search db=^members.db&groupsword=ww&wogroupsdatarq=[uppercase][groups][/uppercase]&equserdatarq=[uppercase][username][/uppercase]&eqpassdatarq=[url][uppercase][password][/uppercase][/url]][showif [numFound]=0][authenticate Group][/showif][/search]Try it (remove the , swap and for real ones and whange the adomain to yours) then login as 'mylogin', 'mypassword'. I does work with Netscape 4.7 on a Mac. The Server is W*4.0 / Mac OS 8.6 + WC PI 3.04.Here are my questions for the ones willing to help in that venture:- How secure is my trick as the password is sent through the URL (even if that's hidden because that page is a meta-http redirect)- how can I add encrypted passwords instead of clear ones ? (seems to be tricky)- how could I have a decent error page in HTML ? (I can go up to customising error pages in W*) - how can I erase my http username & password to relogin ? (i found the only way was login with a wrong ID)- does it works on your server ? (NT, Solaris, Linux, OSX ?)- does it work with your browser (IE 3, 4, 4.5 & 5, NN 3 & 4 & 4.5) on your OS (NT, Linux, MacOS, etc.)Have fun, and give me your feedback. Nice holidays everybody.Brice--Brice Le Blevennec, Digerati, ListDad, http://www.brice.netEx Machina Interactive Architects, http://www.exmachina.net155a rue de Fierlant, 1190 Brussels, Belgium, +322-344 1904-------------------------------------------------------------Brought to you by CommuniGate Pro - The Buzz Word Compliant Messaging Server.To end your Mail problems go to .This message is sent to you because you are subscribed to the mailing list .To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Associated Messages, from the most recent to the oldest:

HTML Authentication page (Brice Le Blevennec 1999)

Hello dear WebCatters, I'm a lurker on this list since WC 1.0 or 2.0 beta (17/04/97 to by precise for Ken ;-). I think I've found something cool interesting enough to waste your time today ;-)After hours of searching 'n tweaking, I finally found a trick to bypass that ugly HTTP authentication window and have a nice looking Login page in HTML (this one is not nice looking yet ;-). It takes 4 pages (1->4) but works decently. Here is my code. I have some question for you at the end of my mail. I assume that .tpl pages goes through WC without the tag. (I deleted all and tags)1) Login.tpl2) step1.tpl (this force the WC var in http headers)[redirect http://[username]:[password]@http://www.adomain.com/step2.tpl]3) step2.tpl (this remove them from the URL)[include file=^protect.inc&groups=mygroup]4) step3.tpl (this redirect to a protected page)[redirect http://www.adomain.com/anypage.tpl]5) anypage.tpl (can be any page protected by Authenticate).[include file=^protect.inc&groups=mygroup] Hello [username], [password].In Global Folder:6) members.dbuserpassgroupsfirstnamelastnameemailskumyloginmypasswordmygroupMyfirstnamemylastnamean@emailaSkuID7) protect.inc[showif NotFound=[lookup db=^members.db&lookinField=user&value=[uppercase][username][/uppercase]&returnField=user¬Found=NotFound]][authenticate Username][/showif][showif [url][uppercase][password][/uppercase][/url]![url][lookup db=^members.db&lookinField=user&value=[uppercase][username][/uppercase]&returnField=pass¬Found=NotFound][/url]][authenticate Password][/showif][search db=^members.db&groupsword=ww&wogroupsdatarq=[uppercase][groups][/uppercase]&equserdatarq=[uppercase][username][/uppercase]&eqpassdatarq=[url][uppercase][password][/uppercase][/url]][showif [numFound]=0][authenticate Group][/showif][/search]Try it (remove the , swap and for real ones and whange the adomain to yours) then login as 'mylogin', 'mypassword'. I does work with Netscape 4.7 on a Mac. The Server is W*4.0 / Mac OS 8.6 + WC PI 3.04.Here are my questions for the ones willing to help in that venture:- How secure is my trick as the password is sent through the URL (even if that's hidden because that page is a meta-http redirect)- how can I add encrypted passwords instead of clear ones ? (seems to be tricky)- how could I have a decent error page in HTML ? (I can go up to customising error pages in W*) - how can I erase my http username & password to relogin ? (i found the only way was login with a wrong ID)- does it works on your server ? (NT, Solaris, Linux, OSX ?)- does it work with your browser (IE 3, 4, 4.5 & 5, NN 3 & 4 & 4.5) on your OS (NT, Linux, MacOS, etc.)Have fun, and give me your feedback. Nice holidays everybody.Brice--Brice Le Blevennec, Digerati, ListDad, http://www.brice.netEx Machina Interactive Architects, http://www.exmachina.net155a rue de Fierlant, 1190 Brussels, Belgium, +322-344 1904-------------------------------------------------------------Brought to you by CommuniGate Pro - The Buzz Word Compliant Messaging Server.To end your Mail problems go to .This message is sent to you because you are subscribed to the mailing list .To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Brice Le Blevennec

DOWNLOAD WEBDNA NOW!

HTML Authentication page

1999

Top Articles:

Related Readings: