Gossamer Forum
Home : Products : Links 2.0 : Customization :

NEW MOD: Modify.cgi password protection/autofiller

(Page 1 of 2)
> >
Quote Reply
NEW MOD: Modify.cgi password protection/autofiller
I've just made what I think is a really cool mod.

The default modify.cgi protection is pretty crappy. If you know the URL then you can modify the whole link. So...I've come up with a mod that requires a username and password to modify the resource and when the user uses the username and password to login at modify.cgi, then the next page will show the modification form with resource information already filled in for modification.

So to walkthrough...

Step 1) The users adds a resource using add.cgi and create a username/passwords at the same time.

Step 2) Administrator accepts the link and the success email is sent as usual but it also includes their username and password incase they wih to modify their resource at a later date.

Step 3) The user can now go to modify.cgi and enter their username/password and if accepted they will be taken to the modification page where there record will automatically be pulled from the database and entered into the form fields so they can quickly edit what they want.

Step 4) The record is then checked by admin and re-enters the database if ok.

Example:

http://www.links247.net/l2/add.cgi

Just go here and add a resource - just make anything up. I've set it up to add the info straight into links.db so you don't need to wait for me to validate it. Once you've added the resource, click on the "Modify Resource" link and enter your username and password that you just created on the add.cgi page and press submit......

Hope you like it!

If it looks like people will be interested in this then I'll add it to my mod download page:

http://www.wiredon.net/gt/download.shtml

Thanks!

Installations:http://www.wiredon.net/gt/
Favicon:http://www.wiredon.net/favicon/

Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
Well, I installed the password MOD that uses the link id ( never did like that cause that is too easy to come by ) and a password.

This one sounds interesting. Maybe it is time to update my password mod....!

Thanks

Gene
Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
Give the demo a try to see if you like it. Smile

I'm about to add password retrieval by email too.

Installations:http://www.wiredon.net/gt/
Favicon:http://www.wiredon.net/favicon/

Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
Did some small testing

It allowed me to add a username and password.

It allowed me call the modify cgi and enter the username and password.

Making changes were a not as smooth.

First, after making changes and clicking the modify resource, I got an error msg "Category (Can not be left blank)". Then I would get an error message "A request to modify this record has already been received. Please try again later."

I think I tried changing the password. Also tried changing the username. Well, since they appear in the form, I figured I could change them.

I tried adding and changing 3 different links. Two had the same URL. I think it did accept one of the modifies. But when I callled up the modify again, the old info was there.

I suspect most if not all of this may be related to the test links and db and that in real life it may work just fine.

Emailing the username and password would be a great and necessary addition. The old password file had that.

I'll be happy to test it furthere. I'll do a much better job of documenting what happens this time....I was certainly slack in my first testing....

Thanks

Gene
Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
Hi, all that stuff you mentioned is normal and not bugs or anything.

The only function I bypassed was validation when a link is added - it will go straight into links.db to stop me having to validate it. After that if you try to modify the link multiple times it wont work because the validation feature for modifications is still active so you would need to wait for me to validate the modifications before your changes will appear and to stop those errors.

Installations:http://www.wiredon.net/gt/
Favicon:http://www.wiredon.net/favicon/

Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
I've still got a few features to add so I'll check it through and make sure it is ok.

Installations:http://www.wiredon.net/gt/
Favicon:http://www.wiredon.net/favicon/

Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
As I thought...

A couple of questions.

1) can the username be modified by the user?

2) can the password be modified by the user?

3) can the URL be modified by the user?

4) I don't have a modify confirm pages yet, but as soon as I get the time, I'm going to add one. What effect, if any, will this have?

When you are ready, I'd be happy to uninstall my other password and install this one.



Gene
Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
In Reply To:
1) can the username be modified by the user?

2) can the password be modified by the user?

3) can the URL be modified by the user?
Yep, all done on the modify page.


In Reply To:
4) I don't have a modify confirm pages yet, but as soon as I get the time, I'm going to add one. What effect, if any, will this have?
Should be fairly easy to do - just a matter of adding a new template and adding some hidden fields on the modify confirm page that are passed from the first modify page.....I will add all these features to the current mod if you would like but it wouldn't be free then because it would have a lot of features - you could also turn it into a registration system so the user must have a username and password before adding resources etc....

It would only be $20 but some want free mods and if that is the case I'll release the standard mod. If people are happy to pay $20 then I'll make a mod with a few more features.



Installations:http://www.wiredon.net/gt/
Favicon:http://www.wiredon.net/favicon/

Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
OK. One thing at a time. Go with the standard mod. I have the instructions to add the confirm page...just too lazy to do it....I guess cause so few people ever update their link on my site, it's a very low priority. But a great feature to promo a site with....!

I've paid for Links 2 MODs when they add sufficient value. Hell, I think G-T should pay you guys for the MODs. They have certainly improved the vanilla, out-of-the-box version....!

Gene
Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
I've added password retrieval to the demo:

http://www.links247.net/l2/modify.cgi

Just click the "Forgot Password?" link under the submit button.

Installations:http://www.wiredon.net/gt/
Favicon:http://www.wiredon.net/favicon/

Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
Hi Paul,
I use the Password mod that was found in the resource section. I'm not sure what it's called but instead of the user name it asks for the ID and password. I've created a good members area with it by modifying a few feilds. Anyway do you know if yours is safer or has more features. I would just like to know to see if it's worth messing with my links again to make these couple of changes. BTW: how do you come out with a new mod almost everyday, it's quite amazing.
Thanks,
Paul

Hot Web Hosting
Low cost web hosting:
http://www.thehotweb.net/webhosting
Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
Hi,

My mod requires a username and password so I'd say it is more secure as the ID is easy to find out whereas no-one knows the username/password. Also my mod auto-fills the modify form with the database values for the particular record in question so the user doesn't have to write it all out again and can just modify the bits they want and press submit. It also now includes username and password retrieval which is sent to the email address on record, so again it is secure as only the record owner can receive this info.

I've never used the mod you are talking about but at a guess I'd say mine has a few more features and is more secure. Anyway the demo is there for you to try so you can see the features and give it a whirl!

Installations:http://www.wiredon.net/gt/
Favicon:http://www.wiredon.net/favicon/

Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
hi,
Well I customized it so it's almost like yours, including the feilds automaticlly inserted. But this looks like a great mod and I will try it out very soon. Thanks for your hard work I appreciate it.
The Other Paul

Hot Web Hosting
Low cost web hosting:
http://www.thehotweb.net/webhosting
Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
I checked out the demo, and it seems to be an improvement over the standared ID/Password mod, except how does a user change categories on the modify page?

Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
Hi,

Yeah good point, I need to change that. I'll alter it to build a select list of the categories rather than print it out - I removed the code that creates the list and just passed the database value to modify.cgi, that is why it isn't working properly.

Will fix that today.

Installations:http://www.wiredon.net/gt/
Favicon:http://www.wiredon.net/favicon/

Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
OK the category list now shows allowing the user to change the category associated with their link.

I have zipped it up and it is now available for download at:

http://www.wiredon.net/gt/download.shtml

I'm warning you now, it is tricky to install (well for someone new to Links2 at least) - there are 16-18 files in the zip.

add.cgi
modify.cgi
modify_ret.cgi
site_html_templates.pl
links.def
modify.html
modify_error.html
modify_up_ret.html
modify_up_ret_fail.html
modify_up_ret_suc.html
modify_up.html
modify_up_failure.html
email-add.txt
email-mod.txt
README

In the README I have provided instructions for installing over your current files but also installing without overwriting your current files.

I have also mentioned in the readme that I am happy to help with installation errors that are either my fault or fairly simple, but big messups or full mod installations are paid. ($20)

As long as you follow my instructions you shouldn't mess up though but just remember to backup - to be totally safe, backup everything!

In return for free use of this mod I require a button/link to be placed on a VIEWABLE page/place on your website, alternatively for $20 you do not have to put the link on your page.

You can find the button here (there is only one whilst I design some more):

http://www.wiredon.net/img/wo1.gif

If you have any problems just let me know here and I'll try to help as best I can.

Installations:http://www.wiredon.net/gt/
Favicon:http://www.wiredon.net/favicon/

Quote Reply
Re: NEW MOD: Modify.cgi password protection/autofiller In reply to
.......and THANKYOU again to the following person:

In Reply To:
Name:thrj rthtehyty
URL:http://ryuryu.com
Mod:5_Star_Rating.zip
Comments:yjyjytjytjytj

Name:thrj rthtehyty
URL:http://ryuryu.com
Mod:AddSpider.zip
Comments:yjtyj

Name:thrj rthtehyty
URL:http://ryuryu.com
Mod:ReportIt.zip
Comments:uytjyj

Name:thrj rthtehyty
URL:http://ryuryu.com
Mod:5_Star_Rating.zip
Comments:jtyjtykjt

Name:thrj rthtehyty
URL:http://ryuryu.com
Mod:Modify_Protection_Auto-Fill.zip
Comments:jtyjtykjt

Name:thrj rthtehyty
URL:http://ryuryu.com
Mod:Link_Hits_on_Home_Page.zip
Comments:hjkhjlkjlk
Do you have some sort of problem understanding what I asked?

It was kind if a stupid idea though because as moderator I can see eveyones IP and so I can just compare it with the one I log when a mod is downloaded and trace it back to the username and then just block you from downloading any more mods.

Simple Wink

If people continue to do this then the easy solution is that I'll just take down my download page and won't share my mods.

It is also a "SHOCK" how I don't seem to see a link/button to my site on quite a few of the pages.

Thanks guys...much appreciated! (This doesn't apply to everyone)

Installs:http://www.wiredon.net/gt/
MODS:http://wiredon.net/gt/download.shtml

Quote Reply
Re: [esm] NEW MOD: Modify.cgi password protection/autofiller In reply to
Hi Paul. I've been running the modify protection script for quite some time now, very nice job. I've think i've run into a small issue of sorts, unless I have it installed incorrectly. Once a user goes into the actual modify section, if they change their password it isn't reversed in the database and therefore if they use that password its denied, wanting the reverse of the password instead...So I think i'm missing a check that checks to see if the changed password is the same as the database password and if so keep it and if not reverse the new password....

Am I missing that in my script? What would I need to add?

Thanks a lot Paul for any help you can give.
Quote Reply
Re: [Paul] NEW MOD: Modify.cgi password protection/autofiller In reply to
In Reply To:
.......and THANKYOU again to the following person:

In Reply To:
Name:thrj rthtehyty
URL:http://ryuryu.com
Mod:5_Star_Rating.zip
Comments:yjyjytjytjytj

Name:thrj rthtehyty
URL:http://ryuryu.com
Mod:AddSpider.zip
Comments:yjtyj

Name:thrj rthtehyty
URL:http://ryuryu.com
Mod:ReportIt.zip
Comments:uytjyj

Name:thrj rthtehyty
URL:http://ryuryu.com
Mod:5_Star_Rating.zip
Comments:jtyjtykjt

Name:thrj rthtehyty
URL:http://ryuryu.com
Mod:Modify_Protection_Auto-Fill.zip
Comments:jtyjtykjt

Name:thrj rthtehyty
URL:http://ryuryu.com
Mod:Link_Hits_on_Home_Page.zip
Comments:hjkhjlkjlk
Do you have some sort of problem understanding what I asked?

It was kind if a stupid idea though because as moderator I can see eveyones IP and so I can just compare it with the one I log when a mod is downloaded and trace it back to the username and then just block you from downloading any more mods.

Simple Wink

If people continue to do this then the easy solution is that I'll just take down my download page and won't share my mods.

It is also a "SHOCK" how I don't seem to see a link/button to my site on quite a few of the pages.

Thanks guys...much appreciated! (This doesn't apply to everyone)

Installs:http://www.wiredon.net/gt/
MODS:http://wiredon.net/gt/download.shtml
rexxx webmaster
Quote Reply
Re: [Paul] NEW MOD: Modify.cgi password protection/autofiller In reply to
I'm confused as to that reply but....

Does anyone know the of the issue i'm having above? In your implementations is it reversing the password if you change your password in the modify section?

Thanks
Quote Reply
Re: [DanJ] NEW MOD: Modify.cgi password protection/autofiller In reply to
DanJ,

I hadn't tried changing a password before now. But you're right, if you re-type your password or enter a new one it does not reverse it in the database. Maybe we can get a little help from Paul on this. He's the author of ModifyPassword.

BTW Paul's scripts are the most straight forward, well documented, mods I've found.

Web Rat
Davez Webz
Sure Links A Lot
Quote Reply
Re: [Web Rat] NEW MOD: Modify.cgi password protection/autofiller In reply to
Whoops sorry about that...in modify.cgi just under:

close MOD;

Try adding:

$in{Password} = reverse $in{Password};

Let me know if that works.
Quote Reply
Re: [Paul] NEW MOD: Modify.cgi password protection/autofiller In reply to
Hi Paul; thanks for the reply! :)

Wouldn't that just reverse an already reversed password though? Like if someone didn't edit it, it would reverse and then no longer be valid? I think it has to make a check to the original to see if it has been changed, if so reverse, if not don't...I've been trying to implement that but i'm not the greatest with perl :)

Thanks for any help you can give!
Quote Reply
Re: [Paul] NEW MOD: Modify.cgi password protection/autofiller In reply to
There are 3 occurances of close MOD;

I chose to put it under the third one with the heading:

# Print out the modified record to a "modified database" where it is stored until
# the admin decides to add it into the real database.

It did not work.

The other heading with two close MOD; 's

# First make sure the link isn't already in there.

Doesn't seem to be the logical place to put it.


Web Rat
Davez Webz
Sure Links A Lot
Quote Reply
Re: [Web Rat] NEW MOD: Modify.cgi password protection/autofiller In reply to
Ok I'll have to look a bit closer at this ...you are right about not modifying it if it isn't changed.
> >