Re: [PHP] Password protected directory

2010-11-02 Thread Daniel P. Brown
On Tue, Nov 2, 2010 at 13:05, Ben Miller wrote: > I need to access and read the files in a password protected directory with a > PHP script using the readdir function.  I'm already making users login to a > secure area, so I don't want to make them enter a password again to access > the files - is

Re: [PHP] Password protected directory

2010-11-02 Thread Bastien Koert
On Tue, Nov 2, 2010 at 1:05 PM, Ben Miller wrote: > I need to access and read the files in a password protected directory with a > PHP script using the readdir function.  I'm already making users login to a > secure area, so I don't want to make them enter a password again to access > the files -

Re: [PHP] password field validation

2009-03-12 Thread Daniel Brown
On Thu, Mar 12, 2009 at 16:04, Rodrigo Escares wrote: > prueba con trim() : > $pass=trim($_POST[PASSSWORD]); > if (empty($pass)) > { >   $GERROR="TRUE"; > } Incorrecto, Rodrigo. Tambien, utilice por favor solamente el ingles en esta lista --- usted puede encontrar la lista de usuario espanola

Re: [PHP] password field validation

2009-03-12 Thread Rodrigo Escares
prueba con trim() : $pass=trim($_POST[PASSSWORD]); if (empty($pass)) { $GERROR="TRUE"; } Atte. Rodrigo (09) 7 7996571 On Thu, Mar 12, 2009 at 4:05 PM, Jason Todd Slack-Moehrle < mailingli...@mailnewsrss.com> wrote: > Hi All, > > I have an input field with type="password". > > I am trying to

Re: [PHP] password field validation

2009-03-12 Thread Afan Pasalic
haliphax wrote: On Thu, Mar 12, 2009 at 2:39 PM, Jason Todd Slack-Moehrle wrote: if (empty($_POST[PASSSWORD])) { $GERROR="TRUE";} If that's a direct copy/paste from your actual code, there is an extra S in PASSWORD. Also, you should enclose the array key in quotes: if (empty($_

Re: [PHP] password field validation

2009-03-12 Thread Andrew Ballard
On Thu, Mar 12, 2009 at 3:39 PM, Jason Todd Slack-Moehrle wrote: >>> >>> if (empty($_POST[PASSSWORD])) >>> { $GERROR="TRUE";} >>> >> >> If that's a direct copy/paste from your actual code, there is an extra >> S in PASSWORD. Also, you should enclose the array key in quotes: >> >> if (empty($_POST[

Re: [PHP] password field validation

2009-03-12 Thread Afan Pasalic
Jochem Maas wrote: Afan Pasalic schreef: Andrew Ballard wrote: On Thu, Mar 12, 2009 at 3:05 PM, Jason Todd Slack-Moehrle wrote: Hi All, I have an input field with type="password". I am trying to do some error checking to see if the user puts a value in after they submit t

Re: [PHP] password field validation

2009-03-12 Thread haliphax
On Thu, Mar 12, 2009 at 2:39 PM, Jason Todd Slack-Moehrle wrote: >>> >>> if (empty($_POST[PASSSWORD])) >>> { $GERROR="TRUE";} >>> >> >> If that's a direct copy/paste from your actual code, there is an extra >> S in PASSWORD. Also, you should enclose the array key in quotes: >> >> if (empty($_POST[

Re: [PHP] password field validation

2009-03-12 Thread Jochem Maas
Afan Pasalic schreef: > > > Andrew Ballard wrote: >> On Thu, Mar 12, 2009 at 3:05 PM, Jason Todd Slack-Moehrle >> wrote: >> >>> Hi All, >>> >>> I have an input field with type="password". >>> >>> I am trying to do some error checking to see if the user puts a value in >>> after they submit the

Re: [PHP] password field validation

2009-03-12 Thread Jason Todd Slack-Moehrle
if (empty($_POST[PASSSWORD])) { $GERROR="TRUE";} If that's a direct copy/paste from your actual code, there is an extra S in PASSWORD. Also, you should enclose the array key in quotes: if (empty($_POST['PASSWORD'])) { $GERROR='TRUE'; } It is official I am a DOPE! Thank you, yes, I did not s

Re: [PHP] password field validation

2009-03-12 Thread Afan Pasalic
Andrew Ballard wrote: On Thu, Mar 12, 2009 at 3:05 PM, Jason Todd Slack-Moehrle wrote: Hi All, I have an input field with type="password". I am trying to do some error checking to see if the user puts a value in after they submit the form (i.e not left it blank) Here is what I have: on

Re: [PHP] password field validation

2009-03-12 Thread Daniel Brown
On Thu, Mar 12, 2009 at 15:05, Jason Todd Slack-Moehrle wrote: > > if (empty($_POST[PASSSWORD])) > { $GERROR="TRUE";} [snip!] > What am I doing wrong? Spelling. "Password" only has two S's. -- daniel.br...@parasane.net || danbr...@php.net http://www.parasane.net/ || http://www.pilot

Re: [PHP] password field validation

2009-03-12 Thread Andrew Ballard
On Thu, Mar 12, 2009 at 3:05 PM, Jason Todd Slack-Moehrle wrote: > Hi All, > > I have an input field with type="password". > > I am trying to do some error checking to see if the user puts a value in > after they submit the form (i.e not left it blank) > > Here is what I have: > > on form: > Passw

Re: [PHP] Password Protecting a page and email notification

2008-06-17 Thread Philip Thompson
On Jun 17, 2008, at 5:33 PM, R.C. wrote: I'm going to ask you PHP gurus if someone can give me a hand in trying to get this resolved. I'm fairly new to PHP and learning as I go. I've got two page "login.php" and video.php. Video.php is supposed to be protected i.e. if someone clicks on th

Re: [PHP] password hashing and crypt()

2008-01-22 Thread Robert Cummings
On Wed, 2008-01-23 at 00:40 -0500, Nathan Nobbe wrote: > alright, so you guys have responded and im really appreciative. > you have me thinking now.. > so what are the real issues here? > >1. portability >2. security (obviously) > > im wondering now if crypt() is really even so practical

Re: [PHP] password hashing and crypt()

2008-01-22 Thread Nathan Nobbe
alright, so you guys have responded and im really appreciative. you have me thinking now.. so what are the real issues here? 1. portability 2. security (obviously) im wondering now if crypt() is really even so practical. especially considering the deal where only 2 characters are prepended

Re: [PHP] password hashing and crypt()

2008-01-22 Thread Chris
Richard Lynch wrote: On Tue, January 22, 2008 7:43 pm, Chris wrote: Richard Lynch wrote: On Sat, January 19, 2008 8:24 pm, Eric Butera wrote: I always make sure that I use a site specific salt which is just appended on the user supplied value. I started doing that when I read that people had

Re: [PHP] password hashing and crypt()

2008-01-22 Thread Richard Lynch
On Tue, January 22, 2008 7:43 pm, Chris wrote: > Richard Lynch wrote: >> On Sat, January 19, 2008 8:24 pm, Eric Butera wrote: >>> I always make sure that I use a site specific salt which is just >>> appended on the user supplied value. I started doing that when I >>> read >>> that people had cre

Re: [PHP] password hashing and crypt()

2008-01-22 Thread Chris
Richard Lynch wrote: On Sat, January 19, 2008 8:24 pm, Eric Butera wrote: I always make sure that I use a site specific salt which is just appended on the user supplied value. I started doing that when I read that people had created huge databases of hashed values that they can just search on.

Re: [PHP] password hashing and crypt()

2008-01-22 Thread Richard Lynch
On Sat, January 19, 2008 8:24 pm, Eric Butera wrote: > I always make sure that I use a site specific salt which is just > appended on the user supplied value. I started doing that when I read > that people had created huge databases of hashed values that they can > just search on. At least this w

Re: [PHP] password hashing and crypt()

2008-01-22 Thread Richard Lynch
On Sat, January 19, 2008 2:11 pm, Nathan Nobbe wrote: > http://www.php.net/manual/en/function.crypt.php > has a second parameter, $salt, which, if not supplied will be > automatically > generated and presumably become a prefix or suffix of the returned > string. Or, in some algorithms, gets buried

Re: [PHP] password hashing and crypt()

2008-01-21 Thread Chris
Nathan Nobbe wrote: hi all, recently ive been debating a bit about the use of the crypt() function and the best practice thereof, im hoping you can help to clarify this for me. so, the crypt function http://www.php.net/manual/en/function.crypt.php has a second parameter, $salt, which, if not su

Re: [PHP] password hashing and crypt()

2008-01-21 Thread Robert Cummings
On Mon, 2008-01-21 at 14:37 -0500, Mike Potter wrote: > > You should have said "yes" and quit while you thought you were ahead. I'm not trying to get "ahead"... I didn't know I was competing. Are we competing? I thought I was just answering posts. > > that was me saying that there is certainly a

Re: [PHP] password hashing and crypt()

2008-01-21 Thread Mike Potter
My apologies Robert, Gmail sucks. I'm bouncing this back to the list, where it belonged in the first place. Feel free to make corrections if I've mischaracterized what you wrote. Good luck with that, btw, but don't expect me to engage. Robert Cummings wrote: >>> And THAT does remind me of my MUD

Re: [PHP] password hashing and crypt()

2008-01-20 Thread Robert Cummings
On Sat, 2008-01-19 at 23:17 -0500, Nathan Nobbe wrote: > thanks for the great responses guys. > i guess what im really getting at though is, if crypt() will embed > a salt in the value it returns automatically, is there any benefit to > creating a salt to pass to the second argument and storing tha

Re: [PHP] password hashing and crypt()

2008-01-19 Thread Nathan Nobbe
thanks for the great responses guys. i guess what im really getting at though is, if crypt() will embed a salt in the value it returns automatically, is there any benefit to creating a salt to pass to the second argument and storing that as well? conceivably, passwords already have a salt using the

RE: [PHP] password hashing and crypt()

2008-01-19 Thread Andrés Robinet
> -Original Message- > From: Eric Butera [mailto:[EMAIL PROTECTED] > Sent: Sunday, January 20, 2008 12:24 AM > To: Jochem Maas > Cc: Nathan Nobbe; PHP General List > Subject: Re: [PHP] password hashing and crypt() > > On Jan 19, 2008 8:02 PM, Jochem Maas &

Re: [PHP] password hashing and crypt()

2008-01-19 Thread Eric Butera
On Jan 19, 2008 8:02 PM, Jochem Maas <[EMAIL PROTECTED]> wrote: > Nathan Nobbe schreef: > > hi all, > > > > recently ive been debating a bit about the use of the crypt() function and > > the best practice thereof, im hoping you can help to clarify this for me. > > > > so, the crypt function > > htt

Re: [PHP] password hashing and crypt()

2008-01-19 Thread Jochem Maas
Nathan Nobbe schreef: hi all, recently ive been debating a bit about the use of the crypt() function and the best practice thereof, im hoping you can help to clarify this for me. so, the crypt function http://www.php.net/manual/en/function.crypt.php has a second parameter, $salt, which, if not

Re: [PHP] Password Protecting

2007-03-20 Thread Shafiq Rehman
visit http://www.softswot.com/Form1Password.php On 3/21/07, Kevin <[EMAIL PROTECTED]> wrote: Hello Everyone! I am new to PHP but I am hoping you guys can help me. I would like to have my users go to a page that looks like http://f4.zittle.com/admin, or even just a drop down window or somet

Re: [PHP] Password Protecting

2007-03-20 Thread Richard Lynch
On Wed, March 21, 2007 12:11 am, Kevin wrote: >I am new to PHP but I am hoping you guys can help me. I would like > to have my users go to a page that looks like > http://f4.zittle.com/admin, or even just a drop down window or > something whre they can enter a username and password. Depending

Re: [PHP] Password Protect Directory

2007-03-07 Thread Jochem Maas
Jason Karns wrote: > I'm trying to find a way to password protect a directory. I currently have > an authentication and authorization system in place for pages in my > directory. I'd prefer to use my existing system somehow (as it includes > OpenID authentication) as opposed to using htaccess and

Re: [PHP] Password Protect Directory

2007-03-04 Thread Tijnema !
Well, you could try to edit each PHP file and add a piece of login code at top, but if the directory will also contain images (which need a password to access), it would not be possible that way. Tijnema On 3/4/07, Jason Karns <[EMAIL PROTECTED]> wrote: I'm trying to find a way to password pr

RE: [PHP]Password and FTP Folder

2007-02-15 Thread Brad Fuller
> -Original Message- > From: Helder Lopes [mailto:[EMAIL PROTECTED] > Sent: Thursday, February 15, 2007 5:32 AM > To: php-general@lists.php.net > Subject: [PHP]Password and FTP Folder > > Hi people > > hi have a problem > > i need a script for make a ftp folder that have a password for e

Re: [PHP] password protecting files, only allowing authorized users

2007-01-11 Thread Chris
Dave wrote: Hello, I'm using php and apache2 on a freebsd box. I know about .htaccess that the web server can provide, but i'm looking for something php can do, i want it to pop up a page when a user requests certain files, asking for a username and password. http://www.php.net/features.h

Re: [PHP] password protecting files, only allowing authorized users

2007-01-11 Thread Casey Chu
This is impossible with only PHP. You might need a combination of PHP and AJAX [Javascript]. On 1/11/07, Dave <[EMAIL PROTECTED]> wrote: Hello, I'm using php and apache2 on a freebsd box. I know about .htaccess that the web server can provide, but i'm looking for something php can do, i want

Re: [PHP] Password encryption and password retrieval

2005-05-11 Thread Deep
Hi, Thank you every one for responding to my mail and giving valuable comments and suggestions for it. Thanx, ..Deeps.. --- Deep <[EMAIL PROTECTED]> wrote: > > Hi evryone, > > I want to implement a site where i would like to > encrypt the password of the users and store it into > mysql

Re: [PHP] Password encryption and password retrieval

2005-05-10 Thread Petar Nedyalkov
On Tuesday 10 May 2005 16:05, Deep wrote: > Hi evryone, > > I want to implement a site where i would like to > encrypt the password of the users and store it into > mysql > database. My question is that , In case if the user > has forgotten the password how can he retrieve the > password(which is

Re: [PHP] Password encryption and password retrieval

2005-05-10 Thread Philip Hallstrom
I want to implement a site where i would like to encrypt the password of the users and store it into mysql database. My question is that , In case if the user has forgotten the password how can he retrieve the password(which is already encrypted and stored...the user should be able to get the decr

Re: [PHP] Password encryption and password retrieval

2005-05-10 Thread Andy Pieters
Hi You are doing the right thing storing passwords encrypted! You may use any of the one way digest like secure hash 1 (sha1) or md5 or a combination to generate a hash. In case your user forgets his password, there is no way to reconstruct it. You need to provide an interface where the user

Re: [PHP] Password expiration script

2005-04-01 Thread Angelo Zanetti
im sure it cant be that hard to write: when user logs in check the last date their password was set. if > 30 days then prompt to connect and dont allow user to do anything else until password has been changed and new expiry date is set (which will now be less than 30 days) use an include for it

Re: [PHP] Password expiration script

2005-03-31 Thread xfedex
On Thu, 31 Mar 2005 14:18:31 -0500, Bosky, Dave <[EMAIL PROTECTED]> wrote: > I'm looking for a script that would require a user to change their password > every 30 days. Does anyone use a script that has functionality similar to > what I'm looking for? > > Thanks, > > Dave > I got do it so using

Re: [PHP] Password expiration script

2005-03-31 Thread Ryan A
Theres instant2c pro at securecents.com, but that might be like using a tank to kill a fly :-D On 3/31/2005 11:18:31 AM, Bosky, Dave ([EMAIL PROTECTED]) wrote: > --_=_NextPart_001_01C53626.6CCF76C0 > > Content-Type: text/plain > > > > I'm looking for a script that would require a user to ch

Re: [PHP] password Boxes

2005-03-15 Thread Kevin
"Richard Lynch" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > > Does anyone know how to change the style of password boxes so when the > > characters are entered an asterisk appears rather that a smal circle? > > > > Or is this just determed by the OS and uncangable with CSS or Jav

Re: [PHP] password Boxes

2005-03-14 Thread Jochem Maas
Dotan Cohen wrote: On Mon, 14 Mar 2005 16:25:32 +0100, Jochem Maas <[EMAIL PROTECTED]> wrote: yeah ... but next time read the question before you answer ;-) the guy was wondering how to change which character was used as the mask in password fields - normally its an asterisk, if you use WinXP with

Re: [PHP] password Boxes

2005-03-14 Thread Dotan Cohen
On Mon, 14 Mar 2005 16:25:32 +0100, Jochem Maas <[EMAIL PROTECTED]> wrote: > > yeah ... but next time read the question before you answer ;-) > the guy was wondering how to change which character was used as > the mask in password fields - normally its an asterisk, if > you use WinXP with the std.

Re: [PHP] password Boxes

2005-03-14 Thread Richard Lynch
> Does anyone know how to change the style of password boxes so when the > characters are entered an asterisk appears rather that a smal circle? > > Or is this just determed by the OS and uncangable with CSS or Javascript > of > PHP? They are certainly NOT changeable with PHP. I doubt that JavaSc

Re: [PHP] password Boxes

2005-03-14 Thread trlists
On 14 Mar 2005 Dotan Cohen wrote: > change > > > To: > This does not address the question. The OP saw small dots in the password display, he wanted asterisks. That is not because he was using type='text' but because he was already using type='password' and the browser had a particular wa

Re: [PHP] password Boxes

2005-03-14 Thread Jochem Maas
Dotan Cohen wrote: On Mon, 14 Mar 2005 08:37:04 -0500, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: On 14 Mar 2005 Ross Hulford wrote: Does anyone know how to change the style of password boxes so when the characters are entered an asterisk appears rather that a smal circle? It is determined by th

Re: [PHP] password Boxes

2005-03-14 Thread Dotan Cohen
On Mon, 14 Mar 2005 08:37:04 -0500, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > On 14 Mar 2005 Ross Hulford wrote: > > > Does anyone know how to change the style of password boxes so when > > the characters are entered an asterisk appears rather that a smal > > circle? > > It is determined by

Re: [PHP] password Boxes

2005-03-14 Thread trlists
On 14 Mar 2005 Ross Hulford wrote: > Does anyone know how to change the style of password boxes so when > the characters are entered an asterisk appears rather that a smal > circle? It is determined by the browser and OS. I presume you are talking about Windows XP, which is where I see that be

Re: [PHP] password case sensitive

2005-02-24 Thread William Stokes
OK. I changed to hashed passwords in now they are case sensitive. Thanks. -Will "Richard Lynch" <[EMAIL PROTECTED]> kirjoitti viestissä:[EMAIL PROTECTED] > William Stokes wrote: >> I got my little user authentication to work but now I would like to know >> how >> to make and check the (upper/lo

Re: [PHP] password case sensitive

2005-02-23 Thread Richard Lynch
William Stokes wrote: > I got my little user authentication to work but now I would like to know > how > to make and check the (upper/lower) case in password. To put it simple. I > want users password to be case sensitive. The default compile settings for MySQL are case-insensitive. Usually, one

Re: [PHP] password case sensitive

2005-02-23 Thread Jochem Maas
William Stokes wrote: Hello, I got my little user authentication to work but now I would like to know how to make and check the (upper/lower) case in password. To put it simple. I want users password to be case sensitive. The authentication checks for returned number of rows from DB. If there is

Re: [PHP] Password Protection] -- My solution

2005-02-18 Thread Christophe Chisogne
Mailit, LLC a écrit : $userName = $_POST[userName]; $passw= $_POST[passw]; (...) $cmd = "SELECT * FROM theTable " . "WHERE userName='$userName' "; $res = mysql_query( $cmd ) or die( "Password search failed." ); Without validating userName in $_POST, that code is vulnerable

Re: [PHP] Password Protection] -- My solution

2005-02-17 Thread Mailit, LLC
--- Begin Message --- Here is the setup that I have used. Please, adapt to your needs. Table 'theTable' is supposed to contain columns fname, mname, lname and ePass (encrypted password). The crypt() function produces a password that cannot be decrypted and really works well. Of course, you need t

Re: [PHP] Password Protection

2005-02-16 Thread Joe Wollard
Kevin, I'm having some issues with my email client right now so I'm sorry if you've already found the answer. There is a way for PHP to do this without the need to modify your web server's configuration or bothering with .htaccess/ .htpasswd files by simply modifying the http headers that your

Re: [PHP] Password Protection

2005-02-16 Thread Burhan Khalid
Kevin Javia wrote: I am experimenting on my site and I want to make it password protected like www.realsolution.com. http://www.zend.com/zend/tut/authentication.php -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Password Protection

2005-02-16 Thread Bret Hughes
On Wed, 2005-02-16 at 21:31, Kevin Javia wrote: > I am experimenting on my site and I want to make it password protected like > www.realsolution.com. > > If any one enters correct user name and password, only then they will be > able to enter into my site. > > How can I do that in PHP? > > Any i

Re: [PHP] password-protecting with PHP, help plz

2004-09-21 Thread Chris Dowell
And after that - go and try to find out a little on your own - contrary to a common misconception, it's not the sole purpose of members of this list to write all your code for you. The old favourites RTFM and STFW would serve you well here - there are thousands of PHP tutorials that will tell y

RE: [PHP] password-protecting with PHP, help plz

2004-09-21 Thread Dan Joseph
Hi, > Thanks for the input, but unfortunately I have no idea how to do that, > though > I do have a MySQL server for my site. I'm still trying to learn basic PHP, > I > haven't moved on to PHP and MySQL connections and stuff yet. If you're talking about authentication, there are two metho

Re: [PHP] password-protecting with PHP, help plz

2004-09-21 Thread AceZero2790
Thanks for the input, but unfortunately I have no idea how to do that, though I do have a MySQL server for my site. I'm still trying to learn basic PHP, I haven't moved on to PHP and MySQL connections and stuff yet. -Andrew

Re: [PHP] password-protecting with PHP, help plz

2004-09-20 Thread John Nichel
Burhan Khalid wrote: [snip] And here is the action page, testing2.php. if ($_POST['user'] == 'Andrew') && ($_POST['pass'] == 'pass') { echo "Welcome, Andrew."; } And (shocker!) I got a blank page. So I turned out display errors and got this: Parse error: syntax error, unexpected T_BOOLEAN_AND in

Re: [PHP] password-protecting with PHP, help plz

2004-09-20 Thread Burhan Khalid
[snip] And here is the action page, testing2.php. if ($_POST['user'] == 'Andrew') && ($_POST['pass'] == 'pass') { echo "Welcome, Andrew."; } And (shocker!) I got a blank page. So I turned out display errors and got this: Parse error: syntax error, unexpected T_BOOLEAN_AND in c:\TSW\pages\testing

Re: [PHP] password-protecting with PHP, help plz

2004-09-19 Thread John Taylor-Johnston
Parse error: syntax error, unexpected T_BOOLEAN_AND in c:\TSW\pages\testing2.php on line 3 My code should do what you want? It uses authenticate? Any how :) I think you are missing acouple of brackets? if ( ($_POST['user'] == 'Andrew') && ($_POST['pass'] == 'pass') ) { echo "Welcome, Andrew."; }

Re: [PHP] password-protecting with PHP, help plz

2004-09-19 Thread AceZero2790
Now moving on to using password protecting with more than one factor. I'm trying to figure out how to password protect with more than two factors: username and password. Here's the form: http://www.thesonicworld.net/pages/testing2.php";> Username: http://www.thesonicworld.net/pages/testing2.php

Re: [PHP] password-protecting with PHP, help plz

2004-09-19 Thread John Taylor-Johnston
Try this. Add it to the very beginning. [EMAIL PROTECTED] wrote: > You were right, my display_error function was turned off. I turned it on and > get this: > > Parse error: syntax error, unexpected T_IS_EQUAL in c:\TSW\pages\testing2.php > on line 3 > > So it isn't working. How do I get to let

Re: [PHP] password-protecting with PHP, help plz

2004-09-19 Thread Janet Valade
[EMAIL PROTECTED] wrote: You were right, my display_error function was turned off. I turned it on and get this: Parse error: syntax error, unexpected T_IS_EQUAL in c:\TSW\pages\testing2.php on line 3 So it isn't working. How do I get to let me make comparisons between the post data and somethi

Re: [PHP] password-protecting with PHP, help plz

2004-09-19 Thread AceZero2790
You were right, my display_error function was turned off. I turned it on and get this: Parse error: syntax error, unexpected T_IS_EQUAL in c:\TSW\pages\testing2.php on line 3 So it isn't working. How do I get to let me make comparisons between the post data and something else? I figure if I ca

Re: [PHP] password-protecting with PHP, help plz

2004-09-19 Thread Janet Valade
[EMAIL PROTECTED] wrote: I appreciate the help, but unfortunately it still doesn't work. I changed testing2.php, the action page to do this: if ($_POST['user']) == me { echo "Andrew"; } else { echo "not me"; } ?> I still get a blank page. What's more I turned on Display Errors and resta

Re: [PHP] password-protecting with PHP, help plz

2004-09-19 Thread AceZero2790
I appreciate the help, but unfortunately it still doesn't work. I changed testing2.php, the action page to do this: I still get a blank page. What's more I turned on Display Errors and restarted the server, but still got no error message. I don't know what the problem is, maybe there is somet

Re: [PHP] password-protecting with PHP, help plz

2004-09-19 Thread Jason Wong
On Sunday 19 September 2004 21:47, [EMAIL PROTECTED] wrote: > I'm trying to password protect a page with PHP, using forms and $_POST data > and all that stuff. I strongly suggest you search out a few tutorials on this subject. google > php authentication tutorial would be a good start. -- J

Re: [PHP] password-protecting with PHP, help plz

2004-09-19 Thread Curt Zirzow
* Thus wrote [EMAIL PROTECTED]: > > This page shows up ok, with the form generating just fine. The problem is > when I get to the action page, testing2.php. Here is that: > > > if ($_POST['user']) == me { > > echo "it's me!"; > > } else { > > echo "not me"; > > ?> You have a parse error,

Re: [PHP] Password encyption

2004-07-03 Thread Siddharth Hegde
You could use Turck to convert the file to byte code. Not exactly state of the art security as Turck does not have any encryption itself, but definately a better option than plain text. - Sid On Fri, 2 Jul 2004 22:32:24 -0400 (EDT), Michal Migurski <[EMAIL PROTECTED]> wrote: > > I realize the ke

Re: [PHP] Password encyption

2004-07-02 Thread Michal Migurski
> I realize the key needs to be stored somewhere which is part of the > problem of how to make it a bit more secure. I just don't feel safe if > a password in a flat file in clear text. Ideally the database should > support something like an ssh style public/private Key auth where the > private K

RE: [PHP] Password encyption

2004-07-02 Thread Bob Eldred
Well that's a whole different thing, then. -Original Message- From: Anzak Wolf [mailto:[EMAIL PROTECTED] Sent: Friday, July 02, 2004 1:40 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [PHP] Password encyption I do run my own server but I know for a fact that even

RE: [PHP] Password encyption

2004-07-02 Thread Anzak Wolf
>So host your own server. That way nobody but you has access to it. >Then you could store the password wherever you want, unecrypted, and it >wouldn't matter. If you're running an application that's that security >conscious, you shouldn't be using a shared server anyway. I do run my own server bu

RE: [PHP] Password encyption

2004-07-02 Thread Matthew Sims
server anyway. > > -Original Message- > From: Anzak Wolf [mailto:[EMAIL PROTECTED] > Sent: Friday, July 02, 2004 1:24 PM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: RE: [PHP] Password encyption > > > Yes I have looked though since

RE: [PHP] Password encyption

2004-07-02 Thread Bob Eldred
Original Message- From: Anzak Wolf [mailto:[EMAIL PROTECTED] Sent: Friday, July 02, 2004 1:24 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [PHP] Password encyption Yes I have looked though since I'm not 100% sure what I'm looking for it is hard

RE: [PHP] Password encyption

2004-07-02 Thread Anzak Wolf
>[snip] >I realize the key needs to be stored somewhere which is part of the >problem of how to make it a bit more secure. I just don't feel safe if >a password in a flat file in clear text. Ideally the database should >support something >like an ssh style public/private Key auth where the privat

RE: [PHP] Password encyption

2004-07-02 Thread Jay Blanchard
[snip] I realize the key needs to be stored somewhere which is part of the problem of how to make it a bit more secure. I just don't feel safe if a password in a flat file in clear text. Ideally the database should support something like an ssh style public/private Key auth where the private Key

Re: [PHP] Password encyption

2004-07-02 Thread Anzak Wolf
I realize the key needs to be stored somewhere which is part of the problem of how to make it a bit more secure. I just don't feel safe if a password in a flat file in clear text. Ideally the database should support something like an ssh style public/private Key auth where the private Key is s

Re: [PHP] Password encyption

2004-07-02 Thread John W. Holmes
Anzak Wolf wrote: Call me paranoid but I think I would rather play the little bit in overhead to decypt the password to give myself a slightly safer feel about my database password. Paranoid. And where do you plan on keeping the key to decrypt the password? In another file? How are you going to

RE: [PHP] Password encyption

2004-07-02 Thread Jay Blanchard
[snip] But has anyone done something like encypting that password rather than leaving it in plan text. [/snip] Yes. Happy Independence Day! -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Password protected downloads

2004-06-13 Thread raditha dissanayake
Maldiv wrote: Hello, hi I want to make a password protected download possibility on my site. I know how can I handle normal user login, but how can I protect a download from guests? This question has been often asked in the past, the archives are rich with solutions. One solution is NOT to c

RE: [PHP] password protect a pdf

2004-02-24 Thread jon roig
-- jon --- jon roig web developer email: [EMAIL PROTECTED] phone: 888.230.7557 -Original Message- From: Roger B.A. Klorese [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 24, 2004 5:01 PM To: 'Matt Hedges'; [EMAIL PROTECTED] Subject: RE: [PHP] passwor

Re: [PHP] password protect a pdf

2004-02-24 Thread Matt Hedges
Thanks, that worked great. I found this for anyone else like me new to htaccess: http://www.htmlbasix.com/passwordprotect.shtml works great. matt "Roger B.A. Klorese" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > > I'm trying to password protect an online PDF file. I know > > h

RE: [PHP] password protect a pdf

2004-02-24 Thread Roger B.A. Klorese
> I'm trying to password protect an online PDF file. I know > how to use PHP to > pw protect a webpage, but what would be the best way to > protect access to a > nonwebpage file? Stick it in its own directory and use htaccess... Or password-protect it when you generate it. -- PHP General Mail

RE: [PHP] Password in LDAP with php

2004-01-05 Thread Chakravarthy Cuddapah
AM To: Chakravarthy Cuddapah Cc: Bc. Radek Krej?a; [EMAIL PROTECTED] Subject: Re: [PHP] Password in LDAP with php On Mon, Jan 05, 2004 at 10:45:58AM -0500, Chakravarthy Cuddapah wrote: > You can do this in PHP. Check this: http://us4.php.net/manual/en/ref.ldap.php > I wrote a form in PHP to add us

Re: [PHP] Password in LDAP with php

2004-01-05 Thread Stig Venaas
On Mon, Jan 05, 2004 at 10:45:58AM -0500, Chakravarthy Cuddapah wrote: > You can do this in PHP. Check this: http://us4.php.net/manual/en/ref.ldap.php > I wrote a form in PHP to add users to LDAP, change passwords etc. Check this > https://www.cuddapahonline.net/ldap/ > I can send the forms if yo

RE: [PHP] Password in LDAP with php

2004-01-05 Thread Chakravarthy Cuddapah
You can do this in PHP. Check this: http://us4.php.net/manual/en/ref.ldap.php I wrote a form in PHP to add users to LDAP, change passwords etc. Check this https://www.cuddapahonline.net/ldap/ I can send the forms if you want. From: Bc. Radek Krejča Sent: Mon 1/5/2004 10:30 AM To: [EMAIL PROTE

Re: [PHP] password systems

2003-09-03 Thread Jason Sheets
Take a look at pwgen, it is a command line utility that makes it easy to generate random passwords with a user specified length, it can generate random words that are easier to remember or truly random secure passwords with non alpha numeric characters in it. It is available in the FreeBSD por

Re: [PHP] password systems

2003-09-02 Thread Lowell Allen
> Anyone have any sources of noun/verb/adjective lists for password > generation? Google search for Aspell and Pspell. Here's a link to Aspell info, which has a link to dictionaries: -- Lowell Allen -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: h

RE: [PHP] password systems

2003-09-02 Thread Chris W. Parker
Dennis Gearon on Sunday, August 31, 2003 12:36 AM said: > Anyone have any sources of noun/verb/adjective lists for password > generation? Sorry I don't have a resource for you, but passwords shouldn't use dictionary words in the first place. Have you considered crea

Re: [PHP] Password + login from the AND Basic-Authenticate form

2003-07-10 Thread Philip Olson
On Thu, 10 Jul 2003, Seigo wrote: > Please tell me can users login with the html-page form and > Basic-authentication? Chapter 16. HTTP authentication with PHP http://www.php.net/features.http-auth Regards, Philip -- PHP General Mailing List (htt

Re: [PHP] Password generator

2003-06-17 Thread Davy Obdam
Thanks Lars and ofcourse all the other people who answerd. It works great!! Best regards, Davy Obdam Lars Torben Wilson wrote: On Tue, 2003-06-17 at 02:45, Davy Obdam wrote: Hi people, I have to make a password generator, but i have a little problem. - It needs to generate password 8 char

Re: [PHP] Password generator

2003-06-17 Thread Lars Torben Wilson
On Tue, 2003-06-17 at 02:45, Davy Obdam wrote: > Hi people, > > I have to make a password generator, but i have a little problem. > > - It needs to generate password 8 characters long, and including 1 or 2 > special characters(like #$%&*@). > - Those special characters can never appear as the fi

Re: [PHP] Password Authentication

2003-03-23 Thread trlists
On 23 Mar 2003 Justin French wrote: > That's in the user notes... ignor it... md5() does not have to be salted... > infact, you WANT the md5() to be static... because you will compare the > md5()'d password in the database with the md5()'d password that they submit > on a form. Exactly. On this

Re: [PHP] Password Authentication

2003-03-22 Thread Jason Sheets
You can use a static salt from within your application though. Jason Justin French wrote: on 23/03/03 2:02 AM, [EMAIL PROTECTED] ([EMAIL PROTECTED]) wrote: On 23 Mar 2003 Justin French wrote: I just md5() the passwords, and reset them if needed... rather than retrieving. The advantage for me

Re: [PHP] Password Authentication

2003-03-22 Thread Justin French
on 23/03/03 2:02 AM, [EMAIL PROTECTED] ([EMAIL PROTECTED]) wrote: > On 23 Mar 2003 Justin French wrote: > >> I just md5() the passwords, and reset them if needed... rather than >> retrieving. The advantage for me on this is that it's portable... md5() is >> part of the base PHP install, whereas

  1   2   >