Author |
Topic  |
tduffy
Junior Member
 
146 Posts |
Posted - 02 January 2003 : 11:42:09
|
I have a forum that we have set up right now that is set to allowed memberlist(hidden), and i want to keep the forum hidden to all non-allowed members, but also have password protection on the forum, but when i go in to edit the forum details, i dont see an option to do this, if i set it to allowed memberlist & password protected, it shows the forum to everyone, yet they still need a password. What i want is the forum to still be hidden to people that dont have access, yet still be able to have a password on it.
anyone know a way to do this? |
Edited by - tduffy on 02 January 2003 11:42:53 |
|
GauravBhabu
Advanced Member
    
4288 Posts |
Posted - 02 January 2003 : 11:50:58
|
Any reason to have the Forums Password Protected which are hidden and accessible only to members in the Allowed Member List. |
 |
|
shlap
Starting Member
27 Posts |
Posted - 02 January 2003 : 12:21:26
|
the reason would be to keep people who have physical access to our machines, out of that section. |
 |
|
GauravBhabu
Advanced Member
    
4288 Posts |
Posted - 02 January 2003 : 12:28:48
|
I understand your point partly, but they will still need the username and password to login to forums. They cannot see the hidden forums, if the username they use is not in the allowed member list. |
 |
|
shlap
Starting Member
27 Posts |
Posted - 02 January 2003 : 12:37:04
|
yes, but since the site uses cookies, the allowed users rarely need to log in |
Edited by - shlap on 02 January 2003 12:37:22 |
 |
|
tduffy
Junior Member
 
146 Posts |
Posted - 02 January 2003 : 12:37:36
|
sometimes our machines are accidently left logged in, so we want another measure of security to ensure that no one other than permitted users can access it. |
 |
|
shlap
Starting Member
27 Posts |
Posted - 02 January 2003 : 12:41:15
|
now no more questions, just post the code dahm you! heh ;) |
Edited by - shlap on 02 January 2003 12:43:32 |
 |
|
tduffy
Junior Member
 
146 Posts |
Posted - 02 January 2003 : 12:46:50
|
hahahha shlap, where's your manners!?! ;) |
 |
|
GauravBhabu
Advanced Member
    
4288 Posts |
Posted - 02 January 2003 : 12:55:03
|
<edited to correct spelling mistake>
The reason for asking question is to understand why the changes/modifications in the code be made. Sometimes the functionality exists in the base code by some other means and those who are not familiar with the code may not be aware of it.
quote: Originally posted by shlap
now no more questions, just post the code dahm you! heh ;)
shalp, as far the "post the code..." goes, it is not something which is available readily and I will just pull it from a file and post it, I will look into it when (1) I find some time (2) get some inspiration to do so.
Thanks for your answers! |
Edited by - GauravBhabu on 02 January 2003 13:00:31 |
 |
|
shlap
Starting Member
27 Posts |
Posted - 02 January 2003 : 13:18:18
|
*sigh* anyone else have any ideas? |
 |
|
Classicmotorcycling
Development Team Leader
    
Australia
2085 Posts |
Posted - 02 January 2003 : 15:22:23
|
Shlap, yep...
You could work on it yourself!!!!!!!!!! 
quote: Originally posted by shlap
*sigh* anyone else have any ideas?
I know if I was GauravBhabu, it would annoy me with the demand you made. 
tduffy,
So you do not want others to get in to an area in the forums?
quote: Originally posted by tduffy
sometimes our machines are accidently left logged in, so we want another measure of security to ensure that no one other than permitted users can access it.
Yet you are saying it is OK to be able to use the rest of your system, by sending e-mails, deleting files, finding those files you enter your personal details to do online banking or other online stuff and getting in to your cookies to get passwords and so forth, as long as they do not get in to the hidden area that they are not allowed to. It doesn't make sense.
I thought that it would be easier to just lock your system. And I know with most companies, it is policy that you lock your workstation/server.
I am sure that GauravBhabu or someone of his knowledge would be able to come up with an answer for you, but it may take time. 
|
Cheers, David Greening |
 |
|
GauravBhabu
Advanced Member
    
4288 Posts |
Posted - 02 January 2003 : 16:28:48
|
<edited: to correct some syntex mistakes>
File: inc_func_secure.asp
Lines: 333-340 Find the following statements
else
chkForumAccess = true
end if
end if
rsStatus.close
set rsStatus = nothing
end function
Add the followinfg statements before the above statements as shown below:
Select case rsStatus("F_PRIVATEFORUMS")
case 6
if chkForumAccess then
'select case Request.Cookies(strUniqueID & "Forum")("PRIVATE_" & rsStatus("F_SUBJECT"))
'case rsStatus("F_PASSWORD_NEW")
' chkForumAccess = true
'case else
if Request("pass") = "" then
if Display then
doPasswordForm
Response.End
else
chkForumAccess = false
end if
else
if Request("pass") <> rsStatus("F_PASSWORD_NEW") then
if Display then
Response.Write (vbNewLine & _
"<p align=""center"">" & vbNewLine & _
" <font face=""" & strDefaultFontFace & """ size=""" & strHeaderFontSize & """>" & vbNewLine & _
"<b>Invalid password!</b>" & vbNewLine & _
"</font>" & vbNewLine & _
"</p>" & vbNewLine & _
"<p align=""center"">" & vbNewLine & _
" <font face=""" & strDefaultFontFace & """ size=""" & strDefaultFontSize & """>" & vbNewLine & _
" <a href=""JavaScript:history.go(-1)"">Go Back to Enter Data</a>" & vbNewLine & _
" </font>" & vbNewLine & _
"</p><br />")
WriteFooter
Response.End
else
chkForumAccess = false
end if
'else
' if strSetCookieToForum = 1 then
' Response.Cookies(strUniqueID & "Forum").Path = strCookieURL
' end if
' Response.Cookies(strUniqueID & "Forum")("PRIVATE_" & rsStatus("F_SUBJECT")) = Request("pass")
' chkForumAccess = true
end if
end if
'end select
end if
case else
'do nothing
end select
else
chkForumAccess = true
end if
end if
rsStatus.close
set rsStatus = nothing
end function
Let me know if this works! |
CSS and HTML4.01 Compilant Snitz Forum . ForumSquare . Rakesh Jain
It is difficult to IMPROVE on Perfection, There is no harm in Keep Trying.
Prayer Of Forgiveness "I forgive all living beings. May all living beings forgive me! I cherish the friendliness towards all and harbour enmity towards none." -- Aavashyaka Sutra(Translated) |
Edited by - GauravBhabu on 03 January 2003 17:35:36 |
 |
|
tduffy
Junior Member
 
146 Posts |
Posted - 02 January 2003 : 16:31:37
|
i will try it out right now, thanks for all the help guys |
 |
|
tduffy
Junior Member
 
146 Posts |
Posted - 02 January 2003 : 16:57:01
|
when i add that code, it errors out here:
--->this line----> else chkForumAccess = true end if end if
rsStatus.close set rsStatus = nothing end function
|
 |
|
GauravBhabu
Advanced Member
    
4288 Posts |
Posted - 02 January 2003 : 20:23:35
|
Have you added the statements in red also? They are to show how the code will look after you add the statements in black. |
 |
|
tduffy
Junior Member
 
146 Posts |
Posted - 02 January 2003 : 20:52:40
|
i didn't add the statements in red |
 |
|
Topic  |
|