Secure Client-Side Scripting

[killer_cow]

Does it exist?
Im wanting to have a quick prompt (such as that provided by javascript) thats works within a single page asking a user to confirm his/her password so that he/she can continue, so either if with a correct password he/she recieves the necessary web data and with an incorrect password he/she recieves other web data (ie. a WRONG PASSWORD go away message)


Of course a password is always sensitive material and I need to make sure no one can just view source the page and walk right into my system.

I really want to get this working within a single page, but cant find any ways to safely do so.

Any help would be most appreciated!

Thanks in advance,

KC

[greffov]

Have a look at yahoo's login system. They use a JavaScript implementation of the MD5 algorithm. You could use the md5 hash of the password instead of the password itself.

[renegadeandy]

Or you could use J2ME, which allows text to be sent securely to a server, text is hashed in a session, and compared against a db of users...?

Thats how industry do it!