I need a simple password mechanism

Want any user to type in any of several "passwords" before entering a site

[MarkLDE]

I need a very simple password program that does something like this:

This web site is for private viewing by invitation only. Please enter the first name of the person who invited you to view this web site: ____________

From here, if the person enters one of two or three different first names, access is granted, otherwise denied.

The purpose is not for security, but to create the appearance of privacy for legal purposes.

I would prefer to avoid CGI. Any help would be greatly appreciated. Thanks.

MarkLDE

[korkus2000]

Are you using or do you have a server side language available? You could use a simple javascript since you don't need real security.

[MarkLDE]

I have no experience with server side programming...even though I believe CGI is available. I would prefer a simple javascript program.

MarkLDE

[MarkLDE]

...a CLIENT SIDE javascript program.

MarkLDE

[BlobFisk]

Korkus is right, this can be done with JavaScript... it can also be done very easily with a few lines of server-side script (ASP, CGI, PHP, JSP), which is more difficult to see the raw code of than JavaScript.

The principle is simple:

if name = allowed names
then let them into the 'private' area
else tell them they can't get in

Server side code gets run at the server and only the necessary code is sent out to the client. However, there are a couple of JavaScripts here [javascript.internet.com] that may be of use.

[Dreamquick]

Not that I wish to pick holes...

create the appearance of privacy for legal purposes

If there are legal reasons for requiring privacy then surely this requires something more than just the "appearance" of being private?

- Tony

[BlobFisk]

Dreamquick has a point - if there are legal implications then you should put some effort into this to cover your rear end.

Server-side will be a must in this case, as there are just far too many holes in a client-side password system.

[andreasfriedrich]

appearance of privacy for legal purposes

While I do not know any facts about your situation keep in mind that not any appearance of privacy will do. If all you do is require a client side javascript that contains the passwords in plain text then I would not consider that sufficiently private.

Andreas

[anon1]

Hello,

If your looking for a no-cgi, easy to implement, and only appearance of security then maybe you want to look at the Gatekeeper javascript.

This script will take an entered word (name or password) and then load a page that has that same name. They must know the name of the page in order to load the page.

In your case:

- You ask for the name that has invited them here to your site, say either Name1, Name2, or Name3.

- You have in your web space three pages named Name1.html, Name2.html, and Name3.html.

- Whatever name is entered at the Gatekeeper will return the corresponding page to the browser.

- This might also benefit you by being able to tell, through your logs, which inviter is getting the most action.

- These three pages could all be identical copies of each other or personalized with text or something referencing the person who invited them.

You should be able to find the script if you google Gatekeeper (I don't know where I got it from) or I could e-mail it to you if required.

-Anon1

[MarkLDE]

Thank you all for writing.

I have implemented EXACTLY what I wanted with a Javascript program adapted from "ThreeTries" which appeared on the page referenced by Blobfisk. :)

While I also thank those who offered legal advice, this is NOT the forum where I discuss matters in that huge topic.

MarkLDE

[MarkLDE]

One more thing....

This site is AMAZING! Three times now I have posted technical questions and gotten EXCELLENT answers within a few hours that completely resolved the problems I was facing. THANK YOU. :)

MarkLDE