Link to home
Start Free TrialLog in
Avatar of Kapow
Kapow

asked on

Password creation online?

I want to develop a site with chat rooms.  I want new veiwers to get/choose a unique access password when they provide their email address.  How is this done?  If its a script where can I get it?

Also - which host would you recommend for such a site?
Avatar of Mark Franz
Mark Franz
Flag of United States of America image

There are a few random password generator scripts available.  Check download.com  you can always just use there email address as the password too.

Good luck with the host,
Are you looking for a free host?

CJ
Avatar of Kapow
Kapow

ASKER

Thanks mqfranz: I went to download.com (very good).  And found this script http://illmatic.net/ I know very little about scripts.  Do you think this script would let new viewers enter their email address as a new password?  
If yes - what would I require from a host to handle this script e.g. it says something about .htaccess.
I have emailed illmatic with this question but have no reply yet.  
The .htaccess file is a file on UNIX and Apache servers that are used to seet all kinds of users permissions.  If your ISP is a kind one and usig these OS he might let you ask for modifications, but don't bet on it...

Depending on exactly what you want to do it is easy to create a small dB that will store the user name and their email address, then is simply a matter of running a compare onthe value submited against the value in the dB for truth.
Do you have access to the cgi-bin directory.  If not, then you are pretty much out of luck.  If so, then there are many good and free Perl scripts at the  CGI Resource Index and more specifically http://cgi.resourceindex.com/Programs_and_Scripts/Perl/Password_Protection/ .

tec
Avatar of Kapow

ASKER

WOW ! that's a lot of scripts.  Yes I do have access to a cgi-bin.  Which of those would you recommend???
I started looking at them but got a bit lost.  I don't mind paying upto $150 if the script provides a password for a visitor - I like the idea of their email being a password.
ASKER CERTIFIED SOLUTION
Avatar of tecbuilder
tecbuilder

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
If you want to use a simple script, then I suggest using a VBScript.  It's easy to maintain, simple to set-up, and can be had for free...  Check this link for more; http://www.aspin.com/index/default.asp?tree=aspin%2Fwebapps&func=search&qry=password&cat=all

Mark
VBScript is not compatible with all browsers, e.g. Netscape.  I believe Netscape doesn't use it at all.  Another problem with client side scripts is that they are difficult to manage and easily broken.
Who said anything about running the password authorization running client side?  Server side VBS is compatible with virtually every browser.
You didn't say server side VBScript.
Avatar of Kapow

ASKER

Tecbuilder - That sounds great. Can it be easily modified so that it doesn't say 'Accounts'?  Visitors will only be using Chat Rooms, perhaps 'Account' sounds a bit heavy.  Also Does it, or do I set up a database/table? If I have to create a table for new paswords - what kind of table does it need?
Avatar of Kapow

ASKER

Mqfranz - (hello again) - As you probably guessed I've never used VB Script - It looks good - Does it require an NT server? Also Does it, or do I set up a database/table? If I have to create a table for new paswords - what kind of table does it need?
In short - what do I have to do to get started? - which of those scripts would you recommend???
Server Side VBScript (aka ASP) requires NT With IIS (correct me if I am wrong, Mgfranz?)

Your easy way of doing it would be perl but remember there are security risks you take when running perl scripts.
Even if they look simple any perl script that modifies data on your server is a risk - as far as I am concerned.

CJ
Avatar of Kapow

ASKER

Cheekyci - What are the risks?
What is IIS?
IIS- Internet Information Server.
It is the Web Server that Micro$oft bundles with NT Server.  It is the only server, that I know of, that handles Server Side VBScript(ASP) as it is Micro$oft proprietary.

As far as Risks with NT go...
check out:
http://www.netinnovation.com/nt/WebServerSecurity.html
http://www.ntsecurity.net/

As for Perl:
http://www.w3.org/Security/Faq/www-security-faq.html

Basically the exposure of the Perl.exe file on NT causes a security risk because a malicious hacker could execute scripts and hack your system.

ASP is much more secure.

CJ
Avatar of Kapow

ASKER

Thanks for the info.