JavaScript Popup Password Help

[Sup3rCow]

Thanks Kobus thats almost what I what it, but I will still use it, better than nothing I suppose.

 

[sn3rd]

wow...

That's all.

 

[midrange]

.htaccess if you using apache, web.config if you in iis

That.

It's probably an Apache server, so throw a .htaccess file in there and be done with this craziness.

 

[Nod]

http://httpd.apache.org/docs/1.3/howto/auth.html

 

[James]

Haha, you could probably save your time and not worry about authentication. If you ONLY have html and JS at your disposal, no server side scripting language, no DB access, no .htaccess you may as well just have the site open

 

[KobusDJ]

Haha, you could probably save your time and not worry about authentication. If you ONLY have html and JS at your disposal, no server side scripting language, no DB access, no .htaccess you may as well just have the site open

If you have a page "mydomain.com/nobody_knows_about_this_page_apart_from_a_few_selected_people.htm" , how will anyone be able to access the page if they do not even know about its existence?

 

[Nod]

If you have a page "mydomain.com/nobody_knows_about_this_page_apart_from_a_few_selected_people.htm" , how will anyone be able to access the page if they do not even know about its existence?

The problem comes in when people do a "File -> Send link ...", and in the process bypasses "authentication".

 

[FarligOpptreden]

LOL @ this thread.

It's the same idea as restricting access to your Windows account by allowing the user to click a certain pixel on the screen... If you accidentally stumbled upon the pixel, you'll always be able to get in.

 

[Chelle]

If you have a page "mydomain.com/nobody_knows_about_this_page_apart_from_a_few_selected_people.htm" , how will anyone be able to access the page if they do not even know about its existence?

Very simply with a "web crawler" - go to a sitemap generator site just to see how easily it picks up each and every page of your site in just a few seconds.

 

[ld13]

Very simply with a "web crawler" - go to a sitemap generator site just to see how easily it picks up each and every page of your site in just a few seconds.

Won't work if you set up everything correctly like e.g. killing directory listing. There needs to be a link somewhere that leads to that 'secret' page for the crawler or sitemap generator to pick it up.