![\"\"](\"https:\/\/xlinesoft.com\/blog\/wp-content\/uploads\/2020\/09\/scr_password_protect_inline_edit.png\")
<\/a>\n<\/p>\n
The code<\/h2>\n1. Creating ‘settings’ table<\/h3>\n
This example is for MySQL. This SQL script creates the required table and columns and inserts the record with the password. The password by default is ‘password’. <\/p>\n
\r\nCREATE TABLE `settings` (\r\n `id` int(11) NOT NULL,\r\n `password` varchar(50) DEFAULT NULL\r\n);\r\n\r\nALTER TABLE `settings`\r\n ADD PRIMARY KEY (`id`);\r\n\r\nALTER TABLE `settings`\r\n MODIFY `id` int(11) NOT NULL AUTO_INCREMENT;\r\n\r\nINSERT INTO `settings` (`id`, `password`) VALUES (NULL, MD5('password'));\r\n<\/pre>\nRoom for improvement: use bcrypt instead of MD5 hashing. <\/p>\n
2. AfterAppInit event code<\/h3>\n
The following code verifies the password and returns true or false in JSON format. If you use another table instead of ‘settings’ make sure to update the code accordingly.<\/p>\n
PHP<\/strong><\/p>\n\r\nif( postvalue(\"a\") === \"check_password\" ){\r\n\t$db_password = DB::Query(\"select password from settings where id=1\")->value(0);\r\n\tprint json_encode( array(\"success\" => ( $db_password === md5( postvalue(\"password\") ) ) ) );\r\n\texit();\r\n}\r\n<\/pre>\nC#<\/strong><\/p>\n\r\ndynamic action = MVCFunctions.postvalue(\"a\");\r\nif(action == new XVar(\"check_password\")){\r\n\tdynamic record;\r\n\tdynamic rs = DB.Select(\"settings\", \"id=1\");\r\n\trecord = rs.fetchAssoc();\r\n\tdynamic response = XVar.Array();\r\n\tresponse.InitAndSetArrayItem( (record[\"password\"] == MVCFunctions.md5(MVCFunctions.postvalue(\"password\")) ), \"success\");\r\n\tMVCFunctions.Echo(MVCFunctions.my_json_encode((XVar)(response)));\r\n\tMVCFunctions.Exit();\r\n}\r\n<\/pre>\n3. Password-protecting custom button<\/h3>\n
The following code goes to the button’s ClientBefore event.<\/p>\n
\r\nvar password = prompt('Enter a password');\r\n$.post(\"\",{a:\"check_password\",password:password},function(response) {\r\n\tvar result = JSON.parse(response);\r\n\tif(result.success){\r\n \/\/ here goes your additional code ClientBefore code if any\r\n \/\/ ...\r\n\r\n\t\tajax.submit();\r\n\t}\r\n\telse{\r\n\t\talert(\"Incorrect password\");\r\n\t}\r\n});\r\nreturn false;\r\n<\/pre>\nRoom for improvement: use Dialog API instead of Javascript’s prompt() function.<\/p>\n
4. Password-protecting field changes<\/h3>\n
Enable Inline Edit for the table in question. Proceed to ‘View as\/Edit as’ settings of the field you want to password-protect. Add Field event for ‘change’, choose ‘AJAX code snippet’ and add the following code to ClientBefore part.<\/p>\n
\r\nvar password = prompt('Enter a password');\r\n$.post(\"\",{a:\"check_password\",password:password},function(response) {\r\n\tvar result = JSON.parse(response);\r\n\tif(!result.success){\r\n\t\talert(\"Incorrect password\");\r\n\t\tctrl.setValue(ctrl.defaultValue);\r\n\t}\r\n});\r\nreturn false;\r\n<\/pre>\nEnjoy!<\/p>\n","protected":false},"excerpt":{"rendered":"
Some businesses may require two people to confirm certain actions like big transactions may require a supervisor’s approval. Another scenario – certain actions require entering the second password. This additional password can be changed daily and distributed among employees in the morning along with the secret handshake. Btw, the whole application doesn’t need to be password-protected, you can add the password to a certain action. In this article, we will show how to implement this additional password security feature. We will cover two scenarios here:…<\/span>Continue Reading “Password-protecting additional admin actions”<\/span>