[duranross]

Hi guys, i really need help for this script: what I want is a log-in script that redirects the user to a different href depending on what username/password they entered, so e.g. - username1 will go to page1 and username2 to page 2, etc...

If preferable all the username/passwords would be stored on a text file or something so all pages that use the details don't need to be updated every time a new user is needed to be added.

So far I have this....

HTML Code:

<script type="text/javascript">

function verify(menu,pass){
	
	var setpass = "a";

	var lowpass = pass.toLowerCase();

	if(menu == "alex" && lowpass == "one"){
		window.location.href = "Alex_main.html"; 
	}
	
	if(menu == "bob" && lowpass == "two"){
	window.location.href = "Bob_main.html"; 
	}
	
	if(menu == "cat" && lowpass == "three"){
	window.location.href = "Cat_main.html"; 
	}

	else{
	window.location.href = "error.html"; 
	}
}
</script>



<form name="LogIn1" method="post">

		<table>
			<tr>
				<td>
				
				
				
				<input name="URLselect" size="12" />
				
				
				
				</td>

			</tr>
			<tr>
				<td><input type="password" name="pwdPassword" size="12" /></td>
			</tr>
			<tr>
				<td><input type="button" onClick="verify(document.LogIn1.URLselect.value,document.LogIn1.pwdPassword.value)" value="Log in" /></td>
			</tr>
		</table>
	</form>

However, for the first username - it doesn't seem to work on occasion and redirects to the error page instead of the href! Can anyone see why this would be?

Hope someone can help me!

Thanks in advance!

[Yeroon]

You should probably use else if. If you type a capital letter in the username, a wrong username pass combi, only then it will go to the else. See what happens if you use this:

Code:

<script type="text/javascript">

function verify(menu,pass){
	
	var setpass = "a";
	var lowpass = pass.toLowerCase();

	if(menu == "alex" && lowpass == "one"){
		window.location.href = "Alex_main.html"; 
	}
	else if(menu == "bob" && lowpass == "two"){
	window.location.href = "Bob_main.html"; 
	}
	else if(menu == "cat" && lowpass == "three"){
	window.location.href = "Cat_main.html"; 
	}
	else{
	window.location.href = "error.html"; 
	}
}
</script>



<form name="LogIn1" method="post">

		<table>
			<tr>
				<td>
				
				
				
				<input name="URLselect" size="12" />
				
				
				
				</td>

			</tr>
			<tr>
				<td><input type="password" name="pwdPassword" size="12" /></td>
			</tr>
			<tr>
				<td><input type="button" onClick="verify(document.LogIn1.URLselect.value,document.LogIn1.pwdPassword.value)" value="Log in" /></td>
			</tr>
		</table>
	</form>

[duranross]

Thanks - that works now! Very much appreciated. Any way to the do the saving of the passwords into the text file thingi... thanks!

[Yeroon]

Is this done after login or should the credentials be checked by above code against this textfile too? The way things are setup with above code everyone can always read the usernames and passwords from the page source.

[duranross]

Yes, i understand that at the moment people can view the usernames which is why I want to change this... I don't really know much about javascript, sorry!!!

I basically have the log-in script on the header of all my .html pages - the user logs in, and then they are forwarded to a different website according to which username/password they enter.

So: can i get the script to read from a .txt file or something?

Thanks!

[Nico]

It's possible to do this using XMLHttpRequest()s, but it will only make a little bit more secure. It'll still be very easy to see all user names and passwords.

Your best and most secure bet is using a server side script, written in for example PHP and MySQL.

[duranross]

Security is not an issue really - it is just for customers to log in after attending an event and to be forwarded to the correct image gallery. How would i go about XMLHttpRequest'ing?

Sorry for all the annoying questions...

[duranross]

bump........