Database Password Script

ASP Scripts

access.mdb

This is the database where the username and passwords are kept. It should be stored in a directory, where it can't be accessed directly by a user, but only accessed by scripts which are stored on the server.

If you want to set up the database yourself:
I have called the database access.mdb If you change this name, then ensure that you also change the references to it in addinguserproc.asp and loginproc.asp

I have called the table users. If you change this name, then ensure that you also change the references to it in addinguserproc.asp and loginproc.asp

The table has 3 fields:
userID which is an autonumber
Username which is a text field
Password which is also a text field
EmailAddress which is also a text field

I have kept it simple for these purposes, but in a real life situation you may want to make it slightly more complicated.

addinguser.asp

This is simply a form for a new user to add their information. More fields can be added if required by just adding more lines. For example:

<%Response.Write("Address <input type = ""Text"" name =""Address"">")%>

addinguserproc.asp

This script checks that the user has entered a password and username and email address. It then adds these values to the database as a new user and logs in that user in a similar way to loginproc.asp . It then redirects that user to success.asp to tell them that they are logged in

authenticate.asp

This should be included at the top of each file that you want to password protect. The asp file should have

<%Response.Write("<%@ Language=VBScript %>" & vbcrlf)Response.Write("
" & vbcrlf)Response.Write("<%Option explicit %>")%>

at the top and this should be included immediately after these two lines by putting:

<% Response.Write("<!-- #INCLUDE FILE = "authenticate.asp" -->") %>

delete.asp

This script is activated from viewusers.asp in order to delete users from the database.emailcheck.asp

This is a simple script to check that the person adding their email address is entering a valid email address. It checks that there is only one @ sign and also there there is a dot there

failure.asp

This tells the user, that they are not logged in if it is true or their username if they are logged in.

login.asp

This is a simple form for a user to log in. It requires a Username and password, however other fields can be added as with addinguser.asp .

loginproc.asp

This checks that a Username and Password were entered. It then checks them against the database to make sure that the Username exists and that the password entered is valid.If they are, then it writes a session variable of their username and redirects them to the success page

logout.asp

This page simply sets the session variable equal to "" . It then redirects the user to failure.asp to tell them that they are not logged in.

success.asp

This could say anything, but to show that the script is working, I have written the session variable produced by loginproc.asp to show the user name.

viewusers.asp

This shows all valid users in a table. For security, don't put this in a place which can be easily found by visitors. Alternatively, password protect this page by changing authenticate.asp to only allow access if there is a particular username that has been logged in. You are also able to delete users from this page, but once deleted, they are deleted permanently.

Any more questions please email scripts@grabthebasics.com

Joomla EasyBook Component "gbid" SQL Injection - Secunia

Joomla EasyBook Component "gbid" SQL Injection Secunia, UK - Jun 6, 2008 Successful exploitation allows eg retrieving administrator usernames and password hashes, but requires knowledge of the database table prefix and the ...

Terms of Service - Tallmadge Express

Terms of Service Tallmadge Express, OH - Jun 12, 2008 Dix Communications may change, suspend or discontinue all or any aspect of the Service at any time, including the availability of any feature, database, ...

Joomla JoomlaDate Component "user" SQL Injection - Secunia

Joomla JoomlaDate Component "user" SQL Injection Secunia, UK - Jun 10, 2008 Successful exploitation allows eg retrieving administrator usernames and password hashes, but requires knowledge of the database table prefix. ...

How to share files between the two Mac office suites - Macworld

How to share files between the two Mac office suites Macworld, CA - Jun 12, 2008 The catch is that you have to create the script mostly by hand. There is no way to automatically translate macros into AppleScripts. ...

Web sites allow users to outsource virtual errands - The Associated Press

The Associated Press

Web sites allow users to outsource virtual errands The Associated Press - Jun 25, 2008 They assume it's a script for a comedy, but it's a very real option." Ferris said he realizes people may be wary of giving strangers their online banking ...

Computer Network, Processing of Digitized, Compressed, Security ... - ThomasNet Industrial News Room

Computer Network, Processing of Digitized, Compressed, Security ... ThomasNet Industrial News Room, NY - Jun 10, 2008 Database is safe against outside attack, No delete, change, or hide command supported. 2. Hacker safe: Even if a an attacker gets the password from the ...

Posted By SYD BOLTON - Brantford Expositor

Posted By SYD BOLTON Brantford Expositor, Canada - 7 hours ago The first thing I had to do was repair the damage that had been done to my database. I found more than 4000 infections that I was able to clear fairly ...

Handling passwords safely in PHP

If you're ever going to create a script that involves users or passwords, which is very likely, you'll probably run across security issues with handling the passwords. You can't just store the passwords in clear text in your database, and great care must be used when managing the passwords (for example during login).

Free php scripts

A bunch of free php scripts/tools to help webmasters automate routine operations on cPanel webhosting, like creating cpanel subdomains, databases, email accounts. These scripts can be easily called from existing applications, since most things are tunable via parameters.Also Web Page Password Protect, Thumbnail Generator, and other free scripts.

Free web hosting 250mb space 6gb bandwith .htaccess allowed

250MB diskspace Vista PanelWeb mail 6 GB Monthly transfer PHP Flags manager POP email accounts 3 MySQL databases Automatic installer (29 scripts) Password protected folders .htaccess5 Add-on domains FTP account Php MyAdmin 5 Sub domains File manager (browser upload) Clustered servers

Running a script without user's password to Oracle database

Q. Hello Brian,Is there any way to run a script .sh (Unix) or .bat (Windows) automatically or manually without including the password of the user that connects to the database or entering manually that password? That is, perhaps reading directly from any file of the database or something like this?