Security Software Zone Security Software Zone
Home Contact Us
Search in
Forum SecurityToolbox Submit Software
Security Software Zone Login
Security Software Categories
News - Articles - Reviews
Free Newsletter
Join our mailing list and receive
security software news and
advice from our experts.
Submit
  Security Software Zone » Software Reviews » General Security » Java Script Password Protection

Java Script Password Protection

Category: General Security
Published: 12/05/2006, 15:34  
Editor: Security Software Zone
 
Print article
Send to a friend
Search in reviews
There are a number of disadvantages to using Javascript to password protect your page that you need to be aware of.
Most password protection using Javascript acts only as a gateway between the page asking for the password and the page it is protecting. Anyone who knows the address of the 'protected' page can go straight there bypassing the password protection entirely.
It is easy to access the source of a Javascript. Javascripts contained within the page source can be easily accessed via the right click menu's View Source option (which can be accessed by pressing the Menu button (located to the left of the Ctrl key at the bottom right of the main section of your keyboard). As most password Javascripts hard code the password into the Javascript, finding out the password can be as trivial as viewing the source.
Even if an external Javascript is used, the Javascript source can be easily accessed by viewing the source of the page to find out the name of the external Javascript file. When the address of that file is typed into the browser address bar, the file can be downloaded to the local computer where it can be viewed.

Given these disadvantages, I do not recommend that you use a Javascript to provide password protection for pages on your site. If you have telnet access to the server where your site is hosted then you can set up proper password protection that does not suffer from the above problems. Without telnet access, your options are more limited but if you obtain access to a password gate cgi script (such as can be obtained free from Bravenet) and use that in conjunction with frames so as to hide the page address you are probably protecting your page as far as possible given that you don't have the access to your server to be able to do any better.

You probably either have access to your server so that you can set up proper password protection or you have access to a password gate cgi that provides a better level of password protection than any javascript could so why would you want to consider a Javascript solution?

Only if you don't have access to either of these other options should you consider using Javascript.

If you do need to go with a Javascript solution then not just any password protection Javascript will do. As previously mentioned, most password Javascripts that you will find on the internet rely on having the password hard coded into the source code where anyone with a little knowledge can read it. So what we need is a Javascript where the password is not coded in the source at all or where the password is encrypted into the actual page that we want to protect. Let's consider these one at a time.
Bookmark to:
Add 'Java Script Password Protection' to Del.icio.us Add 'Java Script Password Protection' to digg Add 'Java Script Password Protection' to FURL Add 'Java Script Password Protection' to reddit Add 'Java Script Password Protection' to Technorati Add 'Java Script Password Protection' to Yahoo My Web Add 'Java Script Password Protection' to Stumble Upon Add 'Java Script Password Protection' to Google Bookmarks Add 'Java Script Password Protection' to RawSugar Add 'Java Script Password Protection' to Squidoo Add 'Java Script Password Protection' to Spurl Add 'Java Script Password Protection' to Netvouz Add 'Java Script Password Protection' to Rojo Add 'Java Script Password Protection' to Bloglines Add 'Java Script Password Protection' to Tailrank
Add comment
Security Software Zone is not responsible for the content of these User comments. The views and opinions expressed are those of the individual poster and not the Security Software Zone.
User comments (0):

There is no comment for this review.

 
Reviews related to Java Script Password Protection
 

StaffCop Improves Employee Productivity and Tighten Corporate Security
 The release of StaffCop 2.4, a major update to its remote PC surveillance software for the corporate market, has been announced by AtomPark Software. The new version adds enhanced support for intercepting and logging conversations occurring in MSN Messenger and Yahoo Messenger, and allows for continuous monitoring of remote computers of the entire company.
Read More >
07/02/2008, 14:26
 

Defence R&D Canada Selected Third Brigade o Provide Dynamic risk Response Research in Cyber Defence
 The agency of the Department of National Defence has a mission to ensure that the CF remains scientifically and operationally relevant.
Read More >
07/25/2007, 22:38
 

New Software from EldoS Corporation
 The release of a new software product for the corporate market, providing comprehensive security enhancements for Microsoft SQL Server Integration Services (SSIS) has been announced by EldoS Corporation.
Read More >
09/09/2008, 14:12
 

IBM's z-OS V1R8 Finished The World's Largest and Most Complex Operating System Evaluation
 The current re-evaluation of IBM z/OS V1R8 at EAL4+ addressed particularly enhanced security functions and offer assurance of the product in a format that is typically installed and operated.
Read More >
05/24/2007, 17:18
 

Definitive Set of Best Practices for Capacity and Performance Management - HyPerformix - Predictive IT Management
 The methodology is based on years of blooming projects at some of the world’s most demanding, IT intensive clients.
Read More >
07/11/2007, 09:57

Sponsored