No More JavaScript login pages?

[kenannet1]

Hi there,

Right after Microsoft released a security cumulative patch for Internet Explorer 6.1 (Q832894--http://www.microsoft.com/technet/security/Bulletin/MS04-004.asp) about a month ago

After that my online clients can not use javascript based login like the one I have

-->>>

.

var varjs;

.

.

varjs = varjs + document.myform.mypassword.value + "@" ;

document.location = "http://" + varjs + "domain.com/FMPro?-db=logo......

.

.

I may leave just the logon button in my form maybe without using text boxes for user id and the password but I'd like to avoid "Pop-up" login.

Is there any workaround for this?

Thanks for your time.

Ken

[Garry Claridge]

You can look at ways of using your own security system. Combining a User database and [FMP-InlineActions] at the start of each page.

A small PHP script in the middle may offer another solution.

Good Luck.

Garry

[Mariano Peterson]

You might still be able to use JavaScript by creating an MSXML ActiveX object and setting the username and password in the open method. This doesn't embed in the user and password in the URL, so it circumvents the limitations imposed by Microsoft's recent change.

The following syntax for the open() method is from the MSDN:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/xmlsdk/htm/xml_mth_or_7nxs.asp

Syntax:

oXMLHttpRequest.open(bstrMethod, bstrUrl, varAsync, bstrUser, bstrPassword);

Sample usage:

var xmlhttp = new ActiveXObject("Msxml2.XMLHTTP.4.0");

xmlHTTP.open("GET","http://myserver/save.asp", false, myUserName, myPassword);

xmlHTTP.send();

[kenannet1]

Thanks for the leads Garry and Mariano,

for now I think I should go ahead with ActiveX, but I believe it is time for me to redesign everything with PHP.

Ken

[Mariano Peterson]

If you switch to PHP, be sure to check out the FX class that Chris Hansen wrote. It really makes connecting to FileMaker from PHP very easy. You can download it at www.iviking.org .

[kenannet1]

Mariano,

FX looks awesome...

I believe you saved me ~100hrs (maybe even more) of reviewing my design notes

Thanks a million

Ken

[Mariano Peterson]

You're welcome - although credit goes to Chris Hansen for writing it.

I've also written an ASP equivalent to the FX class which you are free to use if you prefer ASP. I'm still adding documentation and a few extra frills - but the core functionality is complete. You can download a beta copy at:

http://mariano.petersonpages.com/demo/asp/FMPasp_v0-2.zip

[kenannet1]

Yes he did a great job,

I'm out of thanks Mariano,

Thank you for the link,

Ken

[Leb i Sol]

Mariano!

there is no icon to post along with yours....great work!!

To take (ASP) even further and use "pure ASP" vs. pull from XML we would need to go ODBC ways which is really in FM. Have you looked at FMconnector? Any thoughts on its quality?

I stubled upon http://www.openlinksw.com/info/docs/rel155/odbcagnt.htm

..perhaps there is some value in the link...

thanx again!