Member Avatar for DealthRune

I made this JavaScript that password protects a page. But the password you type in is completely visible! I want it so that the password are those black dots for each letter.... If anybody gots anything, please post it here, thx. Oh yea, here is the script

<HTML>
<BODY>
<SCRIPT>
function passWord() {
var testV = 1;
var pass1 = prompt('Please Enter Your Password',' ');
while (testV < 3) {
if (!pass1) 
history.go(-1);
if (pass1.toLowerCase() == "cheese") {
alert('You Got it Right!');
window.open('protectpage.html');
break;
} 
testV+=1;
var pass1 = 
prompt('Access Denied - Password Incorrect, Please Try Again.','Password');
}
if (pass1.toLowerCase()!="password" & testV ==3) 
history.go(-1);
return " ";
} 
</SCRIPT>
<CENTER>
<FORM>
<input type="button" value="Enter Here" onClick="passWord()">
</FORM>
</CENTER>
</BODY>
</HTML>
  • 4 Contributors
  • 6 Replies
  • 128 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by ShawnCplus
Member Avatar for BestJewSinceJC

You are in the Java forum. I imagine you'd get a better answer in the correct forum.

Member Avatar for ShawnCplus

I made this JavaScript that password protects a page. But the password you type in is completely visible! I want it so that the password are those black dots for each letter.... If anybody gots anything, please post it here, thx. Oh yea, here is the script

<HTML>
<BODY>
<SCRIPT>
function passWord() {
var testV = 1;
var pass1 = prompt('Please Enter Your Password',' ');
while (testV < 3) {
if (!pass1) 
history.go(-1);
if (pass1.toLowerCase() == "cheese") {
alert('You Got it Right!');
window.open('protectpage.html');
break;
} 
testV+=1;
var pass1 = 
prompt('Access Denied - Password Incorrect, Please Try Again.','Password');
}
if (pass1.toLowerCase()!="password" & testV ==3) 
history.go(-1);
return " ";
} 
</SCRIPT>
<CENTER>
<FORM>
<input type="button" value="Enter Here" onClick="passWord()">
</FORM>
</CENTER>
</BODY>
</HTML>

You do realize that you have the raw password "cheese" in javascript. Anyone that wants to can just view the source of the page, see the password then type it in. There's really no way to authenticate users on the client-side only and not be completely insecure.

Member Avatar for javaAddict

You can at least use this:

<input type="password" name="pass" id="pass" />

When the user clicks the button use javascript to get the value of the field and do whatever you want.
But you shouldn't use javascript for password authentication

Member Avatar for DealthRune

You do realize that you have the raw password "cheese" in javascript. Anyone that wants to can just view the source of the page, see the password then type it in. There's really no way to authenticate users on the client-side only and not be completely insecure.

Thanks, I didn't realize that until now....

Member Avatar for DealthRune

You do realize that you have the raw password "cheese" in javascript. Anyone that wants to can just view the source of the page, see the password then type it in. There's really no way to authenticate users on the client-side only and not be completely insecure.

What should I use besides JavaScript to password protect a page?

Member Avatar for ShawnCplus

What should I use besides JavaScript to password protect a page?

A serverside language. PHP, JSP, ASP, etc. etc.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.