Passwords

drummel

I am sure there is an easy answer here, but can't seem to find it. I have a webform that requries three different passwords. I am using this code for all three passwords with slight modifications of course in the webform:
<tr><td>Choose a 4 digit numeric employee code:</td>
<td><input type="password" name="Code" size="4" maxlength="4"></td>
</tr>
<tr><td>Please retype your 4 digit numeric code:</td>
<td><input type="password" name="Verify_Code" size="4" maxlength="4"></td>
</tr>

This works out well for privacy, however if a person gets one password wrong after submitting the form and has to go back then all the passwords get erased. How do you keep the passwords that are correct from being erased?

I am using PHP, should I be using JAVA for this?

Thanks a bunch you guys and gals rock!

WinterDragon

keep it in the same page, echo the errors on the same page... and do this...

echo "<input type=\"text\" name=\"name\" value=\"$name\">";

That will fill the value with whatever $name is, you could do if(is_set($name)) { echo $name } first, just so you don't send an empty variable, but that should work ^{^.} shrugs just respond to tell me if it did work.

cgraz

or pass them as hidden inputs. password fields tend to be erased when you click the back button. I'd pass hidden fields with the password values for the ones that were correct, then when they click the link, use javascript (not java. they're different) to submit the form (the user wouldn't even know they were submitting a form casue it's all hidden). Then, make the values in the password fields be what they entered.

etc.

Also, just a note to winterdragon. isset(), not is_set 😉

Cgraz

drummel

Just to let you know the value once put in is passed to an email. Here's the PHP that handles the code from the form
==> SECTION 3 CSS

Employee Code: $HTTP_POST_VARS


Here is the code after your suggestion

<tr><td>Choose a 4 digit numeric employee code:</td>
	<td><input type="password" name="Code" size ="4" maxlength="4" value="<?= $_POST['pass1'] ?>"</td>
</tr>
<tr><td>Please retype your 4 digit numeric code:</td>
	<td><input type="password" name="Verify_Code" size ="4" maxlength="4" value="<?= $_POST['pass1'] ?>"</td>
</tr>

Yet when I revceive my email there is no code just white space. Also the passwords do not stay they get erased after I try to go back to change the password. 

Just  to let you know I am total newbie at this so bear with my ignorance on this topic. Thanks:)

cgraz

no no

make your code look like this

<tr><td>Choose a 4 digit numeric employee code:</td> 
<td><input type="password" name="Code" size ="4" maxlength="4" value="<?= $_POST['Code'] ?>"</td> 
</tr> 
<tr><td>Please retype your 4 digit numeric code:</td> 
<td><input type="password" name="Verify_Code" size ="4" maxlength="4" value="<?= $_POST['Verify_Code'] ?>"</td> 
</tr>

Then on the page that processes this, if the passwords don't match or whatever, then you'd use the following code to send them back with the variables

<form name="theForm" method="post" action="bla.php">

<input type="hidden" name="Code" value="<?= $_POST['code'] ?>">
<input type="hidden" name="Verify_Code" value="<?= $_POST['Verify_Code'] ?>">

<input type="button" value="Try Again" onClick="theForm.submit();">

</form>

where bla.php (in the action) is the original page tha they type the passwords into.

Cgraz

Blob

Huh?
It helps if you put PHP between PHP tags...

$see = "Like this" // :P :) ^_^

Anyway, if you post ALL of your code it'll be easier to help, but for the input use:

<input type="password" name="code" value="<? if(isset($TESTpass)){ echo $TESTpass; }?>">

If they're on one page, it'll be something like...

<html><?
$form = "<html>
<body>
<table>
<tr><td>Choose a 4 digit numeric employee code:</td> 
<td><input type="password" name="code" size ="4" maxlength="4" value="<? if(isset($code)){ echo $code; }?>"></td> 
</tr> 
<tr><td>Please retype your 4 digit numeric code:</td> 
<td><input type="password" name="verify_code" size ="4" maxlength="4" value="<? if(isset($code)){ echo $code; }?>"></td> 
</tr>
</table></body></html"

if(!isset($submit)){
echo $form;
}elseif($code == $verify_code){
// Been submitted, codes match...
$to = your@email@com
$subject = passemail
mail($to,$passemail,
"Hey... Someone entered this: $code")
echo "<head><meta http-equiv="refresh" content="5;url=http://www.yoursite.co.uk"></head><body>Thank you, you'll be redirected to the home page in 5 seconds.</body></html>
}elseif($code !== $verify_code{
// LOOK! Ha ha! It didn't match! Send him back where he came from!
echo $form;
}

Just off the top of my head, good luck.

drummel

Okay here is my web form according to your suggestion. Thanks a million to take some time out of your day to look at this...

<tr><td>Choose a 4 digit numeric employee code:</td>
<td><input type="password" name="code" size ="4" maxlength="4" value="<? if(isset($code)){ echo $code; }?>"></td>
</tr>
<tr><td>Please retype your 4 digit numeric code:</td>
<td><input type="password" name="verify_code" size ="4" maxlength="4" value="<? if(isset($verify_code)){ echo $verify_code; }?>"></td>

And here is my form mailer that will check for verification and will send the email.

<?
ob_start();
foreach ($Module as $Mods) {
$Modtext.=$Mods . "\n\t\t ";
}

foreach ($RTP as $RTPPos) {
$RTPJob.=$RTPPos . "\n\t\t\t";
}
$message = <<<EOD
USER REQUEST FORM

==> SECTION 1 USER INFORMATION

What to do with the user: $HTTP_POST_VARS[Required_Mode]

Users Name: $HTTP_POST_VARS[Required_Users_Name]
Company: Northstar-at-Tahoe
Department: $HTTP_POST_VARS[Required_Department]
Phone: $HTTP_POST_VARS[Phone_Prefix]-$HTTP_POST_VARS[Phone_Suffix] Ext$HTTP_POST_VARS[Phone_Ext]
Voice Mail: $HTTP_POST_VARS[Voice_Mail]
Manager: $HTTP_POST_VARS[Required_Manager]
Managers Email: $HTTP_POST_VARS[Required_Email_Address]

==> SECTION 2 JDEDWARDS

Users Class: $HTTP_POST_VARS[Required_JDEdwards]
Access To: $Modtext

==> SECTION 3 CSS

Employee Code: $HTTP_POST_VARS

Security Level: $HTTP_POST_VARS[Security_Level]

==> SECTION 4  KRONOS TIME KEEPER

Kronos Department: $HTTP_POST_VARS[Kronos_Department]
User Class:        $HTTP_POST_VARS[Kronos]
Similar Profile 
Access As:         $HTTP_POST_VARS[Kronos_Similar_Profile]

==> SECTION 5  NOVELL NETWORK

Similar Network Access as: $HTTP_POST_VARS[Novell_Department]
Access To Specific 
Network Folders:           $HTTP_POST_VARS[Novell_Folders]
Novell Password:           $HTTP_POST_VARS[Novell_Password]

==> SECTION 6  EMAIL/INTERNET REQUEST

Does Employee Require Internet Access: $HTTP_POST_VARS[Internet_Access]
Does Employee Require Email:           $HTTP_POST_VARS[Required_Email]
Email/Internet Password:               $HTTP_POST_VARS[Email_Password]

==> SECTION 7  RESORT POS

Which Modules ?:  $RTPJob
Responsible for closing at the end of the day?: $HTTP_POST_VARS[Close_RTP]

Verified Before Sending: $HTTP_POST_VARS[Verification]


EOD;

$form = ('http://spylos.boothcreek.net/drummel/nurf.php');
$ToAddress =  ('drummel.ns@boothcreek.com');
$FromAddress = $HTTP_POST_VARS[Required_Email_Address];
$Subject = "User Request form for $HTTP_POST_VARS[Required_Users_Name] ";

//Error Checking
// Check to make sure email address is valid


function checkEmail($Required_Email_Address)
    {
    if(ereg( "^[^@ ]+@([a-zA-Z0-9\-]+\.)+([a-zA-Z0-9\-]{2}|net|com|gov|mil|org|edu|int)$",$Required_Email_Address) ) 
    		return true;
    	else
    		return false;
    }

if (empty($Required_Mode) || empty($Required_Users_Name) || empty($Required_Department) || empty($Required_Manager)
 || empty($Required_Email_Address))
 { 
 header( "Location: Error.html" ); 
 }

   else if
    (!is_numeric($Phone_Prefix) || !is_numeric($Phone_Suffix) || !is_numeric($Phone_Ext))
    {
     header ("Location: phonenumber.html");
	 }
   else if
   		(!checkEmail($Required_Email_Address)) 
		{ 
		header("Location: emailerror.html" );
        }
   else if
  		(empty($Verification))
		{
		header("Location: verify.html");
		}
   else if
   		($code != $verify_code)
		{
        echo $form;
		}
	else if ($Novell_Password != $Verify_Novell_Password)
		{
		header("Location: NovellPassword.html");
		}
	else if ($Email_Password != $Verify_Email_Password)
		{
		header("Location: EmailPassword.html");
		}
else 
{
    $headers = "From: $FromAddress\r\n";
    mail($ToAddress,$Subject,$message,$headers);
	header("Location: Thanks.html");

exit;
ob_end_flush();
}
?>