Build your login page in FLASH.  The source is not available.  Unless they
know how you are authenticating - file or database - they have a long way to
get in.



There is a very simple one at  www.genyousbiomed.com   look and hack if you
like.

Jackson


On 6/19/06, Larry Kavounas <[EMAIL PROTECTED]> wrote:

Carl-

Thanks for your patience! The fact that I did not mention it goes to show
you what a newbie I am...

I am writing a web application, where the customers log in with a user
name
and password. The customers are regular people doing their regular job; no
military; no banking. I am only trying to protect the customers' legal
privacy. I do not aspire to beat CIA or NSA!

I would like to prevent (if possible) hackers from viewing the source,
finding the INPUT field names, and writing a script that honors me with a
few hundred thousand gratuitous login posts per minute.

I could store their IP address in advance... with a random string... and
write the string in a picture with some weird colors and fancy fonts...
and
show them the picture... and use a turing test so as to prove their
eyeballs
are human... and and start to block out their IP addresses... but why
should
I go into all this trouble? It would be so much simpler if they just did
not
know the variables for user name and password! I want PHP to ECHO a string
so that the browser works normally, and the user experiences a normal web
page. But when they view the source, it is useless to them.

Any other ideas that solve this problem are appreciated!

Thanks again,

Larry Kavounas


--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-newbie




--
Jackson
--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-newbie

Reply via email to