Second level password

  • 1
  • Question
  • Updated 8 years ago
  • Answered
I need two levels of access for my site. The 1st level I have sorted with the standard yola password protection scheme but i have 1 x blog and several pages I need to add an additional password to (for my PRO subscribers). I don't want to have to create another yola site to carve out the PRO pages as replicating the blog or pages as maintaining the links from the 2nd site back to the 1st will be a nightmare. Is there some HTML code I can add to the Blog and these pages to protect them with a different (single subscriber-wide) password?
Photo of PowerStocks

PowerStocks

  • 35 Posts
  • 0 Reply Likes
  • hopeful

Posted 8 years ago

  • 1
Photo of Dré

Dré

  • 201 Posts
  • 15 Reply Likes
Hi PowerStocks,

Within the Yola site builder, as you have noted, there is one level of password protection.

I have been looking at a lot of alternatives with HTML code that you could add in with a widget but none of them seem very successful.

Take a look at this article written about two password protection services that you could integrate. I'm going to try them out as well, but if you have any results or failures with them, feel free to post the feedback on this thread and share it with all of us.
Photo of PowerStocks

PowerStocks

  • 35 Posts
  • 0 Reply Likes
Thanks Dre, I looked at that script and modified it and found this useful to tide me over till Yola builds something more robust. You add it to each page you want to 2nd -level protect then distribute the 2nd level password.

So there is standard password and PRO password. You obviously use the yola system to keep stuff from public and then the 2nd level password for PRO subscribers. Pro user will be promted for yola password and then after that confirms, will be promted for 2nd level password before completing the page load.

Even though location of protected page can be seen the 2nd level pass is forced each time before page completes loading. It works nicely, the yola banner for your page loads but then stops right after that to prompt for password.

If wrong password entered, you redirect them to failed login message page otherwise the page completes loading. If you add to top of page, it hides whole page before prompting for password. If you add it halfway down the page then half the page will load and then prompt.

Simple effective and neat. Not industrial strength but "good enough".

You guys rock

Photo of PowerStocks

PowerStocks

  • 35 Posts
  • 0 Reply Likes
Web pages sorted but new problem - how do i add the above script to 2nd level protect one of my blogs?
Photo of PowerStocks

PowerStocks

  • 35 Posts
  • 0 Reply Likes
sorted - just add the code to very top frame of the blog. Happy days
Photo of PowerStocks

PowerStocks

  • 35 Posts
  • 0 Reply Likes
There is a bug in some IE's when security settings are high (blocks scripts) and it doesn't show its information bar to allow user to accept script and just goes straight to the "failed login page" without showing the password prompt box. Firefox doesn't have the problem. In the failed login page itself, i post this solution for my subscribers:

SOLUTION #1 (Preferred)
Use the free Mozilla Firefox for our site (its only 7.5Mb and is a much better/faster browser anyway).

SOLUTION #2
Open Internet Explorer
Select TOOLS > INTERNET OPTIONS > SECURITY
Click “Custom Level” then scroll window all the way to the bottom
ENABLE “Allow websites to prompt for information with scripted windows”
Click OK > Click YES > Click APPLY > Click OK

For some strange reason, applying the above to the TRUSTED ZONE and adding your website to the trusted zone doesn't work. Either because IE doesn't recognize .co.za domains in the trusted zone or there a bug in IE's trusted zone logic. Most likely the latter.