Client Web login

[Halfling]

I was just wondering if there is a possible way to allow the clients to login through a web interface, or even through TS to allow a way to change their password. I have looked through the html documents, and tried to figure a way to create a form of some sort to allow a login, but I do not want to attempt it, when someone else may have an answer :D . I am sorry if someone posted an answer to this question earlier.

Regaurds,
Zach

[Bastian]

Unless you write a complicated script which makes use of the tcp query interface AND reads the current password from the servers database, this is not possible.

As you can't get the current password from anywhere else than the database itself, you would have to use some SQLite module or class to work with the database. Otherwise, there is no way to verify that the person who wants to change the password is really the person this password belongs to.

After you checked that, you would have to use the tcp query interface to change the password with "dbuserchangepw" as changes to the database itself will not take effect until the server is beeing restarted.

As you can see: if someone really wants to create such a script, this would be a lot of work. However it would be a really nice tool. ;)

BTW: This is not the right forum. Moved to "Webpost / Scripts".

[Cyrus]

if I understood him right this is not a big problem.

just need a script to connect to TCP-Query and checks if the old password is valid [login with his account, fetch output of "login"-command,] then invoke dbuserchangepw and it should be done.

[Bastian]

As far as I remember, only ServerAdmins are allowed to use the login command. This means normal users can't login and therefore you can't do it this way.

[Cyrus]

You are right but there is a difference.
As you may see i have a user test with password 1234 on my server and it has no serveradmin rights. The output on telnet is:

sel 8767
OK
login test 1236
ERROR, invalid login
login test 1235
ERROR, invalid login
login test 1234
ERROR, invalid permissions


So it throws "invalid permissions" instead of "invalid login" if the password is right.
So a check "ERROR, invalid permissions" || "OK" should manage this.

[Bastian]

Amazing. :)

[Halfling]

Wow, it seems to have be more of an effort than I really want to put out, lol. Thank you for the answer! It would be a very nice feature in the future, because it sucks to change a password for a client for them. Guess I'm going to post it into the "Wishlist" :cool: .

Thanks again,
Zach

P.S. Sorry that it was in the wrong forum, and thank you for moving it!!