I have a web database for my clients that I want to require two fields for them to sign in with (name and password fields). I would like to avoid using the Web Security Database for configuration reasons.

What I have now is not working properly. All the client has to do now is fill in one of the fields to gain entry to the database. How do I create a login page that requires both fields to be filled in before allowing entry into the database?

Thanks in advance for you help

This is a non-trivial problem. For an example, grab my starter template from the Sample Files section. For discussion of the how's and why's of that solution, get the book by Moyer/Bowers "Advanced FileMaker Pro 5.5" which presents a simpler solution and then a more satisfying (but complex) solution which is essentially what I implemented in the above template.

The Moyer/Bowers method has some nice features, but in my opinion it is made unnecessarily complex simply because they store the users' passwords in the file. They take a lot of steps to prevent unauthorized access to these. Instead, they should be storing a one-way hash of the passwords. Then, even if someone gained access to them, it wouldn't do them any good. The login system I'm setting up for my current project stores only one-way hashes of passwords. Even as the developer with my full access into all the files, I can't find out what password a user has. I can only delete his account or create a new one.

You can do it in CDML and FM also, e.g. to use calc field with Name & Password and compare that...

How you will protect the databases against hacking?

Bobweaver - any chance for a copy of or a look at your login system so I can try and apply it to my system?

Thx

I will try to post something, but I'm afraid that I won't be able to get to it until sometime in January. I have a lot of stuff that suddenly has to get done before Xmas.

I would definitely like people to look at it though, to try to break into it, and see if there are loopholes that I've overlooked. That's always the best way to find out how good the security is.