_Login

[James]

Hi all,

Something I found from my backup discs.

#NoTrayIcon

_Login("My Password", "Please enter a password", "password")

Func _Login($Title, $Prompt, $Password, $MaxAttempts = 3)
    $Attempts = 0
    Do
        $InputBoxAnswer = InputBox($Title, $Prompt, "", "*M", "-1", "-1", "-1", "-1")
        Select
            Case @error = 0;OK - The string returned is valid
                If $InputBoxAnswer == $Password Then
                    MsgBox(1024, "Password was correct!", "You typed the correct Password. You may access this file!"); What to do if password was entered correctly!
                    Exit
                Else
                    If $Attempts < $MaxAttempts - 1 And $MaxAttempts <> 1 Then
                        MsgBox(1024, "Password was wrong!", "You typed the Wrong Password. You may try again " & ($MaxAttempts - 1) - $Attempts & " time(s)"); What to do if password was not entered correctly!
                    Else
                        MsgBox(1024, "Password was wrong!", "Sorry, You can not access this file!"); What to do if password was not entered correctly!
                    EndIf
                    $Attempts += 1
                   ;Exit
                EndIf
                
            Case @error = 1;The Cancel button was pushed
                Exit
        EndSelect
    Until $Attempts = $MaxAttempts Or $InputBoxAnswer == $Password
EndFunc  ;==>Password

Could be useful.

James

[GEOSoft]

Hi all,

Something I found from my backup discs.

#NoTrayIcon

_Login("My Password", "Please enter a password", "password")

Func _Login($Title, $Prompt, $Password, $MaxAttempts = 3)
    $Attempts = 0
    Do
        $InputBoxAnswer = InputBox($Title, $Prompt, "", "*M", "-1", "-1", "-1", "-1")
        Select
            Case @error = 0;OK - The string returned is valid
                If $InputBoxAnswer == $Password Then
                    MsgBox(1024, "Password was correct!", "You typed the correct Password. You may access this file!"); What to do if password was entered correctly!
                    Exit
                Else
                    If $Attempts < $MaxAttempts - 1 And $MaxAttempts <> 1 Then
                        MsgBox(1024, "Password was wrong!", "You typed the Wrong Password. You may try again " & ($MaxAttempts - 1) - $Attempts & " time(s)"); What to do if password was not entered correctly!
                    Else
                        MsgBox(1024, "Password was wrong!", "Sorry, You can not access this file!"); What to do if password was not entered correctly!
                    EndIf
                    $Attempts += 1
                  ;Exit
                EndIf
                
            Case @error = 1;The Cancel button was pushed
                Exit
        EndSelect
    Until $Attempts = $MaxAttempts Or $InputBoxAnswer == $Password
EndFunc ;==>Password

Could be useful.

James

I remember seeing this a long time back James. It's good but it may be better if you also added username in there. Instead if using a standard inputbox, just create a custom GUI with 2 input controls and 2 buttons.

[James]

From me? I could have posted it, but it was ages ago if I did :\

Yeah I could do that but it was just an example of how to check for attempts and passwords

[Yggdrasil]

The problem I see with this script is that you take it for granted that the user of "_Login" provides the variable "$Password". While I'm by no means a coding expert I find this rather problematic because you would have to save this password somewhere in the .exe and it could easily be read by disassambling said .exe. If you would on the other hand save it in the registry/a file it wouldn't be safe either.

So you would have to chose a more secure approach for storing a password like encryption for the password and/or the work with hashes. But on the other hand: If someone is skilled enough to do this, I doubt he would require this sample script.

So this script isn't really safe or secure and everyone using it should keep this in mind.

[GEOSoft]

The problem I see with this script is that you take it for granted that the user of "_Login" provides the variable "$Password". While I'm by no means a coding expert I find this rather problematic because you would have to save this password somewhere in the .exe and it could easily be read by disassambling said .exe. If you would on the other hand save it in the registry/a file it wouldn't be safe either.

So you would have to chose a more secure approach for storing a password like encryption for the password and/or the work with hashes. But on the other hand: If someone is skilled enough to do this, I doubt he would require this sample script.

So this script isn't really safe or secure and everyone using it should keep this in mind.

There is no such thing as fool-proof code. A bigger fool will always come along.

[James]

Yggdrasil, it's not hard to add an encryption key to it or to save the password somewhere else.