password-protection

Inno Setup: How to create password wizard page only if component "X" selected

Hi! Can anyone help me to protect a selection group or component. For examples If ('Readme.txt').selected or ('compact').selected = True then begin "Password wizard page"; else result := true; end; Something like that to this working script :P function CheckPassword(Password: String): Boolean; begin result := false; if (Password=...

HTACCESS password protection for parked domain, but not for main domain

Hi, I have two domain: asdf.com and asdf.ru (.ru is a parked domain). They are pointing to the same folder on the server. (Everything is the same, the only difference is the language). I cannot use subdirectories. Is it possible to protect the .ru domain with password, but leave unprotected the .com domain? Thank you. ...

Trying to port C# function to PHP5

I'm trying to convert this function into PHP but somehow it does not give same results. public static string EncodePassword(string pass, string salt) { byte[] bytes = Encoding.Unicode.GetBytes(pass); byte[] src = Convert.FromBase64String(salt); byte[] dst = new byte[src.Length + bytes.Length]; byte[] inArray = null; ...

Best way to create password-protected photo galleries on S3?

Hi, I'd like to host my photo galleries on Amazon S3. Some would be public, some password-protected. What is the best way to achieve this? As far as I know S3 doesn't supports .htaccess files. Thanks, Istvan ...

jsp: How can I protect a jsp page with a password ?

Hello. I would like to protect a jsp page with a password that needs to be typed. In apache i can add a password file to .htaccess but I don't know how to do that in apache tomcat. thanks ...

How to restrict viral file sharing

So I have a website I would like to make that would essentially be selling files. For the sake of discussion let's say that these files are like the raw text of a book. If somebody buys a file from my site, there really isn't anything preventing them from sharing that unlimited amounts of times with their neighbor or whatever. I know th...

Password salting in SQL Server

I have a project to start salting passwords. In order to avoid breaking our existing applications, this will require performing the hash inside a stored procedure. Since I'm a total newbie on this topic, can you tell me where to get started. ...

Increasing security of web-based login [updated]

Right now my login system is the following: Password must be at least 8 characters long, and contain at least one upper and lowercase letter, a number and a symbol. Password can't contain the username as its substring. Username, salted+hashed (using SHA2) password stored on db. The nonce (salt) is unique for each user and stored as pl...

PHP Secure Login - password encryption

Here is the login system to which the secure login is to be implemented/ main_login.php <form name="form1" method="post" action="checklogin.php"> Username:<input name="myusername" type="text" id="myusername" /> <br /> Password:<input name="mypassword" type="text" id="mypassword" /> <input type="submit" name="Submit" val...

Is using a CreateUUID() function as salt a good idea?

I'm using coldfusion and I would like to generate a random salt field for my passwords. I was wondering if a CreateUUID() function is useful here. I found many examples which use a seperate function to create the salt string; but why do this when you could use rand() or CreateUUID() functions instead? I'm not sure. Is it an overkill or ...

PHP dehashing the password

Ok. thats clear that one must store hashed password in the database but in case a user does not remembers the password and want to retrieve it back, then obviously the user wont like to have the hashed password. If the password is hashed with md5 or additional like salt and sha1 then how to retrieve back the password. ...

PHP different one way hashes for password security

I was wondering to hash the password in PHP using different methods available and the combination of them for more and more security. I was wondering if this would work..? $pass = "***"; $salt = "!@)#%%@(#&@_!R151"; $pass = sha1($pass.$salt); $pass = md5($pass); ...

How do I secure a hardcoded login/password in PHP?

I'm writing a simple PHP script to access the Foursquare API. The PHP will always access the same Foursquare account. For the time being, I have this login information hardcoded in my script. What is the best way to secure this information? If I follow the advice from this thread, I should just place the login information in a config fi...

Access xml feed with HTAUTH in PHP

Hello All, How can I access a xml feed with HAUTH in PHP? Dummy link format is http://username:[email protected]/www.domain.com/trends/001.xml I'm using the code below to access it. $doc = new DOMDocument(); $doc->load($source); Thanks in advance, steamboy ...

Password Protect Virtual Directory With .htaccess

I have a site with a virtual directory structure like mysite.com/folder/title which is actually a .htaccess rewrite to mysite.com/f/index.php?p=title. I want to password protect the folder folder with .htaccess, and know how to do that with actual folders. But I don't want to password protect the main site mysite.com, and right now if I ...

open a password protected word file in java?

how to open a password protected Microsoft word(.doc, .docx) file in java assuming that the password is known? ...

Should password reset pages automatically authenticate users?

Many lost password workflows usually result in a page which is reached by a temporary link emailed to the user. This link then takes them to a page that asks for a new password. Upon entering the new password should a user be forced to logon manually, or should the password reset page authenticate the user automatically which would redu...

Keychain Password Pitfalls

Are there any known pitfalls to avoid when storing user passwords in the Keychain? I am planning to give users the ability to require a password in order to access my iPad app. I have basic read and write of a string to the Keychain working. I just want to make sure that I don't allow them to get into a scenario that they lock themselves...

How do I correctly load and HTML embed password protected files?

I have an Apache password-protected directory filled with text files and movie files. Currently, I load the contents of the text files using cURL, passing the username and password information with CURLOPT_USERPWD. For the movies, I set the OBJECT and EMBED src's to http://username:[email protected]/file.mov. In both cases, the userna...

Is there a way to protect the folder with password ?

Hi, Is there a way to programmatically protect the folder with password in Android ? ...