[Date Prev][Date Next][Thread Prev][Thread Next][Minivend by date
][Minivend by thread
]
Re: .access_gate - AdminUser?
****** message to minivend-users from "Hans-Joachim Leidinger" <hans-joachim.leidinger@home.gelsen-net.de> ******
Hello Andreas,
i try to set the .htaccess, but i have no luck now. I have not enought
time to figured out. I will tell you, if i have found the right setting.
If you need user authentication by asking user and password now, i have
a suggestion you would create a page (i.e. security.html) with formtag
and in this page, visitor hase type a name and a password i.e. (without
testing)
the file security.html:
<FORM
ACTION="http://www.yourdomain.com/cgi-bin/simple/checkvisitorpage.html?[
data session id]" METHOD="POST">
Name : <INPUT TYPE="text" NAME="NAME" VALUE="[value NAME]"
size=10>
Password : <INPUT TYPE="password" NAME="PASSWORD" VALUE="[value
PASSWORD]" size=10>
<INPUT TYPE=submit VALUE="Login">
</FORM>
In the next page "checkvisitorpage.html" there are a if-tag like
[if value NAME =~ /Alibaba/]
<!--right name=yes--->
[if value PASSWORD =~ /Sesam open yourself/]
<!--right password=yes got to next-->
[tag op=header interpolate=1]
Status: 302 moved
Content-type: text/html
Location: [area
href="http://www.yourdomain.com/cgi-bin/yourshop/yoursecretdir/yoursecre
tfile.html?[data session id]"]
[/tag]
<!-- if you can not redirect let me know.
There are another methode with javescript!-->
[else]
<!-- right password = no, tell visitor about wrong password-->
<HTML>
<HEAD>
<TITLE>PASSWORDFAILURE</TITLE>
</HEAD>
SORRY! WRONG PASSWORD!<BR>
Try once more.....<A
href="http://www.yourdomain.com/cgi-bin/simple/security.html?[data
session id]">here!</A>!<BR>
</BODY>
</HTML>
[/else]
[/if]
[else]
<!-- right name = no, not allow--->
<HTML>
<HEAD>[tag flag build][/tag]
<TITLE>ALERT!</TITLE>
</HEAD>
FORBIDDEN! YOU HAVE NOT SPENT ENOUGHT BONE TO ME!
</BODY>
</HTML>
[/else]
[/if]
MV will show the page only, if the name is right and it will go on if
the password is right. No one is able to see your name or password. To
get more security, you can use the SSL.
I hope, you get a kick!
Joachim
| At 14:28 28.05.99 -0700, you wrote:
| >****** message to minivend-users from Ryan Hertz
<rhertz@gyb.baits.com>
|
| > I would bet that this would not work either for the same reason.
Don't
| >mean to be a pessimist, but I think there is a MV solution. *shrug*
|
|
| Can I define something like an second AdminUser, who has the right so
see
| this or that page but isn't able to manipulate any minivend data?
|
|
| Andreas
| -
| To unsubscribe from the list, DO NOT REPLY to this message. Instead,
send
| email with 'UNSUBSCRIBE minivend-users' in the body to
Majordomo@minivend.com.
| Archive of past messages:
http://www.minivend.com/minivend/minivend-list
|
-
To unsubscribe from the list, DO NOT REPLY to this message. Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list