options for password protecting a site

  • 2beeseygirls
  • Born
  • Born
  • No Avatar
  • Joined: Apr 07, 2008
  • Posts: 3
  • Status: Offline

Post April 7th, 2008, 11:30 am

I am building a site for a family reunion and want to password protect it because they are worried about personal sensitive information being available.

What are my options? I dont know if this is the correct area to post in so please correct me if I am wrong!

Thanks in advance for any help. I am excited to have found this forum!
  • Anonymous
  • Bot
  • No Avatar
  • Joined: 25 Feb 2008
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post April 7th, 2008, 11:30 am

  • neksus
  • Mastermind
  • Mastermind
  • User avatar
  • Joined: Sep 10, 2004
  • Posts: 2194
  • Loc: Canada
  • Status: Offline

Post April 7th, 2008, 11:38 am

You can have it so users must login to see the information; you can have a general first page with asks a user to enter a password which will then direct them to the rest of the site (which can be circumvented if somebody can guess/figure out where the page is redirecting too); you can find out if they'll only be accessing it from home, find out their IPs (and hope they're static) and only allow those IPs that match entry;

I'm running out of ideas :P
  • 2beeseygirls
  • Born
  • Born
  • No Avatar
  • Joined: Apr 07, 2008
  • Posts: 3
  • Status: Offline

Post April 7th, 2008, 12:07 pm

neksus wrote:
You can have it so users must login to see the information; you can have a general first page with asks a user to enter a password which will then direct them to the rest of the site (which can be circumvented if somebody can guess/figure out where the page is redirecting too); you can find out if they'll only be accessing it from home, find out their IPs (and hope they're static) and only allow those IPs that match entry;

I'm running out of ideas :P


So do I have to use a password generator to get the coding to add to that first page and redirect? Any advice on actually getting that setup? I have been doing the site with basic html and learning as I go.
  • righteous_trespasser
  • Scuffle
  • Genius
  • User avatar
  • Joined: Mar 12, 2007
  • Posts: 6228
  • Loc: South-Africa
  • Status: Offline

Post April 7th, 2008, 11:11 pm

well there are a few ways to tackle this ... the two that stand out the most to me are the following ...

In your control panel you can password protect files that are on the host and you can set a username/password, and that will be the same for each visitor that enters the site.

Alternatively you can use server side scripting to do the whole password thing ... something like PHP, ASP.Net, or something similar ... it also depends on what type of host you have ... does your host support PHP? or does it support ASP.Net? or does it support none of the above?
Let's leave all our *plum* where it is and go live in the jungle ...
  • jameson5555
  • Bronze Robot
  • Bronze Member
  • User avatar
  • Joined: Oct 02, 2007
  • Posts: 575
  • Loc: Phoenix, AZ
  • Status: Offline

Post April 8th, 2008, 11:29 am

Or you could just use a CMS like Drupal, Joomla, or Wordpress.
phoenix web design
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Joined: May 28, 2003
  • Posts: 23407
  • Loc: Woodbridge VA
  • Status: Offline

Post April 8th, 2008, 11:56 am

My first question would be is where are you hosting this? Is this on an existing site that you already have established, or one that you've purchased and are planning to use exclusively for the reunion site (and if so what flavor of server is it, Linux, Windows?), or is this going to be on a "free" hosting server somewhere, such as myspace, or freewebs?
"There's no place like 127.0.0.1 except for ::1."
Alexandria Networks. Leader in IT consulting for associations/non-profits, and small to medium sized businesses around the northern Virginia and Washington D.C. metro area.
  • Bogey
  • Bogey
  • Genius
  • User avatar
  • Joined: Jul 14, 2005
  • Posts: 8212
  • Loc: USA
  • Status: Offline

Post April 8th, 2008, 7:54 pm

About members... you can have it this way (The way most password protected sites are used) It involves PHP so make sure your host provides PHP hosting. If you really want, I can create the PHP side of the scripting for you if you don't know it and too lazy :) to learn it (I got bunch of time on my hands).

Create a registration form and in it you can have each of your family members register with their own username and their desired password. So only they know the password and no one else.

Then you will/can have a log in form that, when filled in, takes the information filled in from the database (generally checks if it exists and if it does, the user is logged in). You have SESSIONS that store certain information about that user, such as his/her username and time of log-in.

Than on pages that you need to be only for members you check if the SESSION is set and if it is, than the user is obviously logged in and that user can view that page, and if the user is NOT logged in then no session would be registered (there) than that user cannot see that page and redirected to the log-in page.

Pretty easy to implement once you get to know PHP well enough.
"Bring forth therefore fruits meet for repentance:" Matthew 3:8
  • righteous_trespasser
  • Scuffle
  • Genius
  • User avatar
  • Joined: Mar 12, 2007
  • Posts: 6228
  • Loc: South-Africa
  • Status: Offline

Post April 8th, 2008, 11:16 pm

Bogey that's spot on, but maybe for this site a registration form won't be necessary because it's only going to be family and otherwise someone outside of the family could also register and then view the information that is protected ... maybe setting up each user beforehand and just giving him/her the option to change a password would be better ...

Also, it's not just PHP that can do this, there are other alternatives aswell, PHP is just the free alternative ... and usually PHP hosting is cheaper that ASP hosting ... but I know that there are other ways of doing this than just PHP and ASP.Net, I just don't know much about them ...
Let's leave all our *plum* where it is and go live in the jungle ...
  • neksus
  • Mastermind
  • Mastermind
  • User avatar
  • Joined: Sep 10, 2004
  • Posts: 2194
  • Loc: Canada
  • Status: Offline

Post April 9th, 2008, 8:24 am

Depending on how many users are going to be using it, it may be easier to just set up multi-user accounts, such as sorting by last name (where a whole family has one name/pass) or just creating one user/name password for everybody to use. Then you don't even need a database :)
  • righteous_trespasser
  • Scuffle
  • Genius
  • User avatar
  • Joined: Mar 12, 2007
  • Posts: 6228
  • Loc: South-Africa
  • Status: Offline

Post April 9th, 2008, 10:28 am

neksus wrote:
Depending on how many users are going to be using it, it may be easier to just set up multi-user accounts, such as sorting by last name (where a whole family has one name/pass) or just creating one user/name password for everybody to use. Then you don't even need a database :)

Hellz yeah! ... that's the best option imo ... so then the coding also decreases by quite a hefty amount
Code: [ Select ]
if TextBoxPassword.text = "password" then
enter page
else
redirect
  1. if TextBoxPassword.text = "password" then
  2. enter page
  3. else
  4. redirect

wow ... easy ... and it'd work like a bomb for a site like that ...
Let's leave all our *plum* where it is and go live in the jungle ...
  • ATNO/TW
  • Super Moderator
  • Super Moderator
  • User avatar
  • Joined: May 28, 2003
  • Posts: 23407
  • Loc: Woodbridge VA
  • Status: Offline

Post April 9th, 2008, 11:16 am

Guys are you actually reading what the poster is telling you?

2beeseygirls wrote:
I have been doing the site with basic html and learning as I go.


I seriously doubt she is going to want to learn a programming language to do this.

2beeseygirls, trespasser already gave you the easiest method earlier.

Use your host's control panel (CPanel) to password protect the directory where your reunion site will be located, then pass that info to the family members who will access the site when you give them the URL (They will all use the same access to get in). If your host doesn't use CPanel, there should be an alternate means provided to password protect a directory. Check with your host for how they handle it.
"There's no place like 127.0.0.1 except for ::1."
Alexandria Networks. Leader in IT consulting for associations/non-profits, and small to medium sized businesses around the northern Virginia and Washington D.C. metro area.
  • prasunsen
  • Newbie
  • Newbie
  • No Avatar
  • Joined: Apr 09, 2008
  • Posts: 5
  • Status: Offline

Post April 9th, 2008, 12:48 pm

From what I understand it seems you just need to protect the community information from outsiders. In such case a simple .htaccess protection (google for it) should do the work
  • Bogey
  • Bogey
  • Genius
  • User avatar
  • Joined: Jul 14, 2005
  • Posts: 8212
  • Loc: USA
  • Status: Offline

Post April 9th, 2008, 12:51 pm

I don't think they want to mess around with more technical stuff...
"Bring forth therefore fruits meet for repentance:" Matthew 3:8
  • neksus
  • Mastermind
  • Mastermind
  • User avatar
  • Joined: Sep 10, 2004
  • Posts: 2194
  • Loc: Canada
  • Status: Offline

Post April 9th, 2008, 12:57 pm

And me in the very first reply of the thread...
  • Devil_666
  • Graduate
  • Graduate
  • User avatar
  • Joined: Oct 01, 2007
  • Posts: 198
  • Loc: Albany
  • Status: Offline

Post April 11th, 2008, 12:08 am

jameson5555 wrote:
Or you could just use a CMS like Drupal, Joomla, or Wordpress.


Yes this is 100% possible with Joomla.
May I Help You Zone
Tailored Solutions
  • Anonymous
  • Bot
  • No Avatar
  • Joined: 25 Feb 2008
  • Posts: ?
  • Loc: Ozzuland
  • Status: Online

Post April 11th, 2008, 12:08 am

Post Information

  • Total Posts in this topic: 19 posts
  • Users browsing this forum: No registered users and 95 guests
  • You cannot post new topics in this forum
  • You cannot reply to topics in this forum
  • You cannot edit your posts in this forum
  • You cannot delete your posts in this forum
  • You cannot post attachments in this forum
 
cron
 

© 2011 Unmelted, LLC. Ozzu® is a registered trademark of Unmelted, LLC.