website security

[Cliphead]

Read the page:

"Do NOT protect anything important with a script like the one below. Either get Coffeecup's password wizard, find a CGI Script or ask your web host to set up an .htpassword file if you need to protect important information."

[Ardesco]

What is the point of making it secure if you aren't protecting anything importnant ?

[NewbieContractor]

because there is a degree of sensative info - i.e. company calendars etc.. internal contacts etc..

[Ardesco]

Would you not classify that as important then?


I would.

[NewbieContractor]

Ok - to protect important info

[_V_]

It is somewhat alarming that clients task a newbie contractor, who freely admits, web is not their strong point, with securing what is in effect sensitive information.

No wonder so many projects go tits up.

I am going to put all the banks PIN numbers online, but will ask criminals to look away from the monitor when I display them.

No peeking!

[threaded]

dickhead - sorry i mean cliphead

Knowledge is basic - but not THAT basic..

You can not class a site as secure if u can see the password in the source code..

Security through obscurity is no security at all...

Or did you mean to say it's something you have and something you know...

[ratewhore]

You can not class a site as secure if u can see the password in the source code..

It'll be fine - it's base64 encoded...

[RW in 'just so you know - thats irony' mode]

[NewbieContractor]

"It is somewhat alarming that clients task a newbie contractor, who freely admits, web is not their strong point, with securing what is in effect sensitive information."

Just goes to show.. if you can pull the wool over your clients eyes and sell yourself well.. then you can get a nice contract out of it