This gives a simple secure login script for basic pages, such as clan member pages,
It is a simple php secure login script using java and php. The login code is pure java, however the password could be seen by going to view source.
By encasing these parts in php tags, they cannot be viewed in the source, therefore making it secure. The username and password are entered at the top. Edit From lines 44 onwards to change the members page. The original Java Script just linked to a new page, if the login was correct. This made a second security issue because people could access the member page by going to www.youurl.com/members.php.
In release 0.1b the members page is included in login.php which though still posing a potential security risk, it's much harder for people who don't know the password to get access to.
Note: Due to the size or complexity of this submission, the author has submitted it as a .zip file to shorten your download time. Afterdownloading it, you will need a program like Winzip to decompress it.Virus note:All files are scanned once-a-day by Planet Source Code for viruses, but new viruses come
out every day, so no prevention program can catch 100% of them. For your own safety, please:
Re-scan downloaded files using your personal virus checker before using it.
NEVER, EVER run compiled files (.exe's, .ocx's, .dll's etc.)--only run source code.
If you don't have a virus scanner, you can get one at many places on the net
including:McAfee.com
Terms of Agreement:
By using this code, you agree to the following terms...
You may use
this code in your own programs (and may compile it into a program and distribute it in compiled format for languages that allow it) freely and with no charge.
You MAY NOT redistribute this code (for example to a web site) without written permission from the original author. Failure to do so is a violation of copyright laws.
You may link to this code from another website, but ONLY if it is not wrapped in a frame.
You will abide by any additional copyright restrictions which the author may have placed in the code or code's description.
you just echo the user+pass in the javascript so you can still see the user+pass in view source, i dont see whats better about it than a normal javascript login (If this comment was disrespectful, please report it.)
the only thing that makes it better is maybe that the members page is included in login.php which stops people going to www.whatever.com/member.html..... but anyway thanks for pointing that out (If this comment was disrespectful, please report it.)
Why don't you look into sessions and MySQL, hell even using php and an htaccess .htpasswd file is easy enough to do, as well as sessions. (If this comment was disrespectful, please report it.)
aye yeah i know howto do all that :) see www.clanef.co.uk/ladder for some of my finest work. It was just an idea i thought might work, then realised didn't, but i was hoping by putting the password in the php tags, it would stop it being shown in the source. But it didnt. Never mind, htaccess is a million times better anyway. (If this comment was disrespectful, please report it.)
Haha yeah thats true. Anyway this was done way back in my silly misinformed youth. Check out my lite login system (here or on www.gmtt.co.uk) it's much better. (If this comment was disrespectful, please report it.)
(If this comment was disrespectful, please report it.)
Add Your Feedback
Your feedback will be posted below and an email sent to
the author. Please remember that the author was kind enough to
share this with you, so any criticisms must be stated politely, or they
will be deleted. (For feedback not related to this particular code, please
click here instead.)
Download code
4/21/2003 2:34:38 AM: 
