updated staff Password Protect Pages

[carlg]

here is a nothere little mod

first make a file called common.php

and add

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

then make a file caled slogin.php

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

In all your staff files (staff.php staff_special.php etc.) find:

<?php (Thats the very first line of the file)

Add this above it:

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

then add

ALTER TABLE `users` ADD `staffincorrect` INT( 11 ) NOT NULL DEFAULT '0';

from there you can add in to your header if thay try so meny times it will ban them

[Haunted Dawg]

Re: updated staff Password Protect Pages

You never made this.

[webster2001]

Re: updated staff Password Protect Pages

How do i do it in v1.1?

[morgan1122]

Or just add it sglobals.php

[Dominion]

Or just add it sglobals.php

Please look at the date of the last post. No need to bump something from 2008...

[Spudinski]

Please look at the date of the last post. No need to bump something from 2008...

Same too you. :P

I wouldn't suggest this method of security anyway, it's too vulnerable.

Never keep your credentials within the authentication system.

[morgan1122]

Same too you. :P

I wouldn't suggest this method of security anyway, it's too vulnerable.

Never keep your credentials within the authentication system.

whats the best method of securing it then just the normal security.

[rulerofzu]

just use htaccess

[Spudinski]

whats the best method of securing it then just the normal security.

Revisit the original script.

The password isn't even hashed.

[rulerofzu]

Which is why your better using htaccess. Most control panels support the creation of secure directories using htaccess and a md5 hash password.

Using filesmatch with a list of file names you wish to protect is another way to go. Again htaccess with a hashed password.

[Spudinski]

Which is why your better using htaccess. Most control panels support the creation of secure directories using htaccess and a md5 hash password.

Using filesmatch with a list of file names you wish to protect is another way to go. Again htaccess with a hashed password.

One can implement a file to prompt BASIC_AUTH within PHP as well.

[rulerofzu]

One can but why make something that is already available

[Spudinski]

One can but why make something that is already available

Database authentication.