passwords

How would I require a password for all files except one using .htaccess?

I have a new website I'm working on that the client wants to keep a secret, but at the same time, I want to put an under construction page with some info on it. I would like to have everything except index.html require a user/password--index.html would be available to everyone. I have the following, but I'm not sure what I need to add: ...

Why isn't wget accepting my username/password?

I've tried both wget --user=myuser --password=mypassword myfile and wget --ftp-user=myuser --ftp-password=mypassword myfile but I keep getting the error HTTP request sent, awaiting response... 401 Authorization Required Authorization failed. I know the file is there, and I know the username/password are correct - I can ftp in wi...

Forgot Password: what is the best method of implementing a forgot password function?

I'm wondering what the best method is for creating a forgot password function on a website. I have seen quite a few out there, here are a few or combination of: passphrase question / answer (1 or more) send email with new password on screen give new password confirmation through email: must click link to get new password page requiring...

Storing passwords in iPhone applications

I have a simple application, based of the "Utility Application" template. It retrieves a password-protected XML file (via NSXMLParser). I want to allow the user to set a username and password in the "FlipsideView", how would I go about this? I have the basics in place, the two UITextField boxes, the value of which gets set to a fixed v...

Installed Oracle Express - Can't login

I just installed Oracle Express edition. During the installation it asked me to set a password but not a username. After the installation completed, it directed me to a browser window and asked me to login with a username and password. The password I know but the username I don't know. Is this an IQ test? Did I fail it? ...

two questions (RFC822, login info) about sending email via python

1 - In my email-sending script, I store spaced-out emails in a string, then I use ", ".join(to.split()). However, it looks like the script only sends to the 1st email - is it something to do with RFC822 format? If so, how can I fix this? 2 - I feel a bit edgy having my password visable in my script. Is there a way to retrieve this in...

Is there a well-regarded library I can use to hash passwords and authenticate users for a WPF app?

There's a number of posts here on hashing of passwords and numerous recommendations on how to go about doing it, but before I go off and write something based on the suggestions here, is there a standard library I can use to save me some time (and potentially blushes, knowing how complex this stuff can be). My criteria is it has to work...

How Is My Password Transferred from My Browser to the Web Server Securely?

How is the password I enter in, say a Gmail login form, transferred to the web server securely? What does the browser or any client application do? What does the web server do? ...

Is it ever ok to store password in plain text in a php variable or php constant?

As per question, is it safe to store passwords on php pages such as $password = 'pa$$w0rd'; If the users can't see it, it's safe, right? EDIT: Some people actually suggested using hash, however, there would be a problem with database server connection password, wouldn't it? ...

How can I suppress Excel's password prompt in Perl?

Please tell me a solution to suppress passsword prompting of an excel file. use Win32::OLE; my $xlApp = Win32::OLE->new('Excel.Application'); $xlApp->{Visible} = 0; $xlApp->{DisplayAlerts} = 0; # Open excel file. my $xlBook = $xlApp->Workbooks->Open("C:\\Documents and Settings\\username\\Desktop\\te...

svn access to a https repository: username / password always being prompted for

I just moved my svn repository to a new server. Previously I was accessing my repository via svn://oldserver/yyy/zzz Now I want to access it via https://newserver:8443/svn/yyy/zzz I used switch --relocate to repoint my source tree and this seemed to work well. When I try to update the source I use: svn.exe update zzz --username myuser...

How can I modify password expiration in Windows using Python?

How can I modify the password expiration to "never" on Windows XP for a local user with Python? I have the PyWIN and WMI modules on board but have no solution. I managed to query the current settings via WMI(based on Win32_UserAccount class), but how can modify it? ...

SCP from one server to another without password prompt

What is the best way of doing SCP from one box to the other without prompting for password? There are two servers Server A 10.152.2.10 /home/oracle/export/files.txt Server B 10.152.2.11 /home/oracle/import/ If I want to transfer the files using scp from Server A to server B without being prompted to enter a password [running thi...

How can I encrypt or hide passwords in a Perl script?

I am working on Perl script that uses Expect to login via telnet to remote machines (don't ask, gotta use telnet). I also do perforce p4 login operations as necessary and use expect to pipe in the correct passwords. For now I just read passwords from clear text environment variable, i.e. export PASSWORD=password, which I know is no good ...

What should I do when my boss tells me to make passwords the same as usernames by default in our software?

My boss is against requiring our users to have secure passwords, even going so far to request they be setup by default to have passwords the same as their username. What should I do in this situation? What would you do? Update - Some users have brought up the question of whether the application needs high security. This isn't credit car...

Is it OK to give users no way to change their password?

I think it's a Bad Thing to do, but I was hoping for an authoritative perspective, or at least a broad sampling. I personally feel that a user owns his or her password and that a website or software system merely stores it as a service to them. The user trusts my site with their password, and though I own the site, I do not own the pas...

Password fields not clearing on submit in asp.net mvc

I have a user preference page in which the user can type in their current password, new password and confirm new password. When the user submits the form it sends them to an action. The problem is that when the form submits, the password fields stay filled. I want them to clear. I attempted javascript but when I use document.preferen...

Preferred Method of Storing Passwords In Database

What is your preferred method/datatype for storing passwords in a database (preferably SQL Server 2005). The way I have been doing it in several of our applications is to first use the .NET encryption libraries and then store them in the database as binary(16). Is this the preferred method or should I be using a different datatype or all...

Password Protect IIS directory

Hi, I'm looking for a way to password protect a directory in IIS. I'm aware that the standard answer to this is to create a windows user account for this directory, then give that user read permissions on the directory... but my concern is that by creating a windows user, won't that give them permissions to do stuff like login to the com...

Phonetically Memorable Password Generation Algorithms

Background While at the Gym the other day, I was working with my combination lock, and realized something that would be useful to me as a programmer. To wit, my combination is three seperate sets of numbers that either sound alike, or have some other relation that makes them easy to remember. For instance, 5-15-25, 7-17-2, 6-24-5. The...