passwords

Select into table in another database that is password protected?

In Microsoft Access 2003 and Visual Basic 6 I'm trying to copy a table to another access database that is password protected like this... Select * INTO table2 IN 'database2.mdb' [;Password=TestPass] From table1 It fails with "Not a valid password" Does the Select INTO format not accept the password with the mdb, and the password has ...

How do I secure a hardcoded login/password in PHP?

I'm writing a simple PHP script to access the Foursquare API. The PHP will always access the same Foursquare account. For the time being, I have this login information hardcoded in my script. What is the best way to secure this information? If I follow the advice from this thread, I should just place the login information in a config fi...

Security question: authentication vs authorization ?

Let's assume I must have user's sensitive data that was optionally encoded on the client side. Encryption (optional) should be done with user's passphrase. User login (optional) should be done with user's password. Notes: plain-text password is not stored on the server or transfered over the network. My options and their drawbacks:...

How to generate secure passwords for new users?

I have a list of students that are being added via a form inside the admin area. I'm trying to come up with a password generating solution for each addition that will be both secure and viewable from the admin panel (like below). I need it to be viewable so that the admin will be able to print out the passwords and hand them out to th...

Ruby on Rails Authlogic gem - Password confirmation

Following the http://github.com/binarylogic/authlogic_example how would I change it so that password confirmation is required for everything (such as for the edit user, and password reset pages) except for the registration page? I'd like the registration page to only require an email, a password and a captcha. I only want password confi...

How to hide the password in fabric when the command is printed out?

Say I have a fabfile.py that looks like this: def setup(): pwd = getpass('mysql password: ') run('mysql -umoo -p%s something' % pwd) The output of this is: [host] run: mysql -umoo -pTheActualPassword Is there a way to make the output look like this? [host] run: mysql -umoo -p******* Note: ...

Redirect streams for prompting passwords

Hi, I have a script that prompt for a password to achieve a specific task. I wanna skip entering password each time. for this, i thought about sth like that: ./myscript < my_file_containing_pass but unfortunatly, this doesn't work. any idea? ...

How are secure database connections usually implemented in JAR files?

I'm not a Java developer, but my client has hired one to update some JAR files on their site. Prior to doing so, we audited the existing code and found a number of security vulnerabilities. One of the solutions we employed to make the files more secure is to create a new database user with read-only access to the database, and only for t...

How to set up a password for openrdf workbench?

I have successfully installed Openrdf Repository (sesame 2.3.2) and Openrdf workbench however I do not know how to set up a user and a password to protect Openrdf workbench. I suppose that there is --somewhere -- a configuration file. Can somebody give me a hint how to create a user and set up a password for openrdf workbench? ...

Javascript to validate password

Hi, I am new to regular expressions.Can anyone help me in writing a regular expression on the following description. The password contains characters from at least three of the following five categories: English uppercase characters (A - Z) English lowercase characters (a - z) Base 10 digits (0 - 9) Non-alphanumeric (For example: !, $,...

Notify user his password has been changed via text message on the same page (with PHP or AJAX?)

Hi guys, Here is the scenario. A user wants to change his password. So he login and fill up his new desired password and clicked submit. Back end PHP checks his codes and updated it in MySQL database. User is brought back to the same page (with the form) and is notified by this small paragraph sitting on the top of the page that his pas...

Is this a good practice to disable a password creation by the user?

I am working on an intranet site and need to choose one way of two: 1. Disable an option when a user can change a password to any word he likes, for example, pass123. This way there will be a button to generate a new password using some complex algorithm and then user accepts its using. 2. Make standard password changing function. This w...

Simple password protection in PHP

I was reading a quite interesting chapter in a "Learning PHP"-book of mine and came across a code example which I wanted to modify and use on my personal website (to protect a simple document, nothing "big", which is why I also don't encrypt the passwords). I've used the php-sample and I just can't make it work at all. Here it is (dont ...

pdf files - add input fields with acrobat/livecycle but file is password protected

We have some government forms that we want to be able to fill from mysql database and print automatically with php script. I downloaded demo of Adobe Acrobat and LiveCycle Designer and started playing with it. Only problem is that pdf files theat we use are locked with password. More specifically - document assembly page extraction, cr...

Android: How to switch between hide and view password

Is there a clever way to let the user switch between hide and view password in an android EditText? A number of PC based apps let the user do this. ...

Should password reset pages automatically authenticate users?

Many lost password workflows usually result in a page which is reached by a temporary link emailed to the user. This link then takes them to a page that asks for a new password. Upon entering the new password should a user be forced to logon manually, or should the password reset page authenticate the user automatically which would redu...

Storing passwords with python

I have a program I'm writing in python, and I have the need to store some passwords. These passwords will be the passwords to ftp servers, so it's important that they're not just plainly visible to everybody. This also means that I can't store a non-reversible hash of the password like you would on a webserver, because I'm not checking i...

Keychain Password Pitfalls

Are there any known pitfalls to avoid when storing user passwords in the Keychain? I am planning to give users the ability to require a password in order to access my iPad app. I have basic read and write of a string to the Keychain working. I just want to make sure that I don't allow them to get into a scenario that they lock themselves...

storing passwords in class variables in python

I'm working on a python script that stores ssh passwords only during the current session. What I'm doing is declaring a class variable credentials = {}. When the script needs access to a specific server, it checks in credentials to see if credentials['server'] exists. If it does, it uses the password there, if it doesn't, it prompts the ...

jQuery change input type

This code doesn't work what's wrong? $(".re").focus(function() { if($(this).attr("type") == "text") { $(this).attr("type", "password"); } }); It's supposed to change the input text type from text, to password, but doesn't work when I type in it after I get into focus on it; it's still text. ...