Open a URL with username and password on click of button: url, password, username

by: whammyPosted on 2003-06-04 at 16:22:04ID: 8653044

You'd be better off posting the username and password to the "login" page or whatever with a form, instead of just using the location. How are you validating the username/password?

by: pizzametsalamiPosted on 2003-07-02 at 01:37:10ID: 8838121

Maybe this is what you want:

<html>
<head>
<title>MyTitle</title>
</head>
<body>
<form action="Your_URL_to_open" method="post" name="frmLogin" target="_new">
<table><tr><td>Username:</td><td><input type="text" name="username" value=""></td></tr>
<tr><td>Password:</td><td><input type="password" name="password" value=""></td></tr>
<td><td colspan="2" align="right"><input type="submit" value="Login!"></td></tr>
</table>
</form>
</body>
</html>

In this example the form gets submitted in a new window, to a page called your_URL_to_open, and the method used is the POST method so that neither the username nor the password can be read from the history of your browser.

Greetz
PizzaMetSalami

by: tommoranPosted on 2003-07-08 at 20:58:50ID: 8882367

Depending on the type of webserver you are using, you could just add some name,value pairs to the end of the url in your window.location for example.

window.locaion('http://yourpage.asp?username=username&password=password')

Then use the Request.QueryString("username") and Request.QueryString("password") to collect the values.

That is of couse hypathetically speaking if you have Microsoft's IIS as your web server. If you do not have any of that at your fingertips, then I would go with pizzametsalami's suggestion.

by: pizzametsalamiPosted on 2003-07-08 at 23:44:44ID: 8882942

window.locaion('http://yourpage.asp?username=username&password=password')
Wouldn't work :-)

<script language="javascript">
window.location.href="yourpage.asp?username=username&password=password")
</script>

In ASP you can use request.querystring("username") or request("username") to collect the values.
In PHP you can use $HTTP_GET_VARS["username"] to get the username.

Furthermore it is a good example - good work tommoran

by: TheKenmanPosted on 2003-07-10 at 05:31:07ID: 8892351

http://username:password@website.com ?

(or it might be the other way around)

by: pizzametsalamiPosted on 2003-07-10 at 07:01:53ID: 8893071

http://username:password@website.com ?
Wouldn't this only work with ftp???

by: tommoranPosted on 2003-07-10 at 07:12:55ID: 8893175

Pizz is right, that is the proper sequence for using NTFS permissions. Works on FTP sites and Web Shares. You said in your original post that you have a website which requires a username and password to get in. What is this username and password controlled by? Is it NTFS username and password? Is it a username and password stored in a database? Or maybe it's just hard-coded into the html code? Answer that question and it will help us answer you better.

by: TheKenmanPosted on 2003-07-10 at 13:14:03ID: 8896331

for FTP using the same structure it'd be:

ftp://username:password@website.com

by: ckavithaPosted on 2003-07-10 at 20:11:50ID: 8898554

It is the username and password stored in a database.

Thanks for your response.
Kavitha

by: pizzametsalamiPosted on 2003-07-11 at 00:15:34ID: 8899690

------ Form:

<form action="login.asp" method="post">
<input type="text" name="username">
<input type="password" name="password">
<input type="Submit">
</form>

------- Login.asp

Dim objRs, objConn
'Declare objects
Set objRs = Server.createobject("ADODB.RecordSet")
Set objConn = server.createobject("ADODB.Connection")

'Open DB Connection
objConn.open "Your DSN String"

objRs.open "SELECT COUNT(*) AS loggedin FROM users WHERE username='" & request("username") & "' AND password='" & request("password") & ";", objConn, adOpenForwardOnly, adLockReadOnly

If (objRs("loggedin")=1) Then
response.write "You are in!!!"
Else
response.write "Try again!"
End If

'Close Db Connection
objConn.close

' Undeclare Objects
Set objConn = Nothing
Set objRs = Nothing

by: tommoranPosted on 2003-07-11 at 05:51:17ID: 8901967

Dang Pizz you beat me to it. LOL! But if you want to use the username and password for multiple pages, just put it into a session. Eg.

//Make sure your database has fields for username, password, and level (with level you can have different users accessing only pages you allow.
//When you query the database you get the following
//      Column 0 = username
//      Column 1 = password
//      Column 2 = level
//Declare variables.
Dim objConn, objRS

//Make sure your session is blank before filling it in.
Session.Contents("status") = ""

//Connection string to database
objConn = Server.CreateObject("ADODB.Connection")
objConn.Provider = "whatever you are using"
objConn.Open = Server, Database, UID, PWD (specific to your database)

//Using the username and password from the form on the login.html, search databse for username.
Set objRS = objConn.Execute("SELECT * FROM tbl_login WHERE Username LIKE '" & Request.Form("txtUsername") & "'")

//Check the recordset to make sure it's not empty
If Not objRS.EOF Then

      //If it's not empty then check the password against the one entered in the form on the login.html page.
      If objRS(1) = Request.Form("txtPassword") Then

            //If password matches the one in database, then fill the "status" session with column 2 (which is the user level) of the database.
            Session.Contents("status") = objRS(2)

            //Redirect the user to some kind of a link or menu page which gives them a list of the pages they can access.
            Response.Redirect "menu.asp"
      Else

            //If password doesn't match one in database, give this friendly reminder.
            Response.Write ("The password you entered does not match your current password. ")
            Response.Write ("Click <a href='javascript:self.history.back()'>here</a> to enter you password again.<br>")

      End If
      Else
            //If username doesn't exist in database (perhaps they typed it wrong) then give this friendly advice.
            Response.Write ("Sorry but the login you entered is invalid or does not exist. ")
            Response.Write ("Please check the login and try again. ")
            Response.Write ("If you still have problems, contact your supervisor for more help.")
            Response.Write ("Click <a href='javascript:self.history.back()'>here</a> to try again.<br>")
      End If

//Close the recordset
objRS.Close
Set objRS = Nothing

//Close the connection
objConn.Close
Set objConn = Nothing

With all that done, you now have the Session("status") filled with level. You can use the Session("status") on any page you like to allow or deny access.
For example,
      On say a page called lookhere.asp.
      At the top of the page you put something like this.
      <%
      //You need this
      Response.Buffer = True

      //Check the level number stored in the Session("status") variable and then do whatever you want with it.
      //If the Session("status") does not equal the level you specify, then you redirect them back to the login.html
      //this also protects against anyone typing www.whatever.com/menu.asp into their browser.
      If Session.Contents("status") <> "10" Then
            Response.Redirect "login.html"
      End If

      %>

Hope this helps,
Tom

by: pizzametsalamiPosted on 2003-07-11 at 06:01:03ID: 8902026

MMhh well it does add some good points that I didn't add to save time.... :-)

The addition of sessions is a good way to do it.

Please note that this (mine too :-)) is ASP code which needs to be supported by your ISP. Contact your ISP to check whether you can use ASP, PHP or some other web-programming language and report that to us, before we throw you up with useless information.

Question

Open a URL with username and password on click of button

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

url

password

username

Web Application Hosting

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Need individual assistance?

Our experts are ready to help.

Want to learn from the best?

Read articles from industry experts.

Working on a long term project?

Store your work and research.

What Makes Experts Exchange Unique?

Trusted by the world's most respected brands.

Faithfully serving IT professionals since 1996.

Related Solutions

Free Tech Articles

Cloud Class Webinars

Join the Community

Give a Little. Get a Lot.

Answers

3 Ways to Join

The Experts

The Experts

Testimonials

Testimonials

Testimonials

Business Clients

Business Clients

In the Press

In the Press

In the Press