Create
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Products
See all
Community resources
Top groups
Explore all groups
Community resources
Learn
Community resources
Events
Community resources

Is there any way to password protect a page?

Kyle Long1
Kyle Long September 25, 2012

Our wiki is already broken down so that different user accounts have different roles and access, but in the interest of provide redundent protection for especially sensitive data, is there any way you can password protect a specific page? We're getting by by using password protected excel documents and attaching them, but that's hardly ideal.

Thanks,

Kyle

Answer
Watch
Like Be the first to like this
8481 views

7 answers

2 votes
ISHO ISHO
ISHO ISHO May 29, 2013

i dont kno about Confluence

heres another way i did it

i put the javascript where it belongs,,withinm the <script> tags

<script>

function hideObject(idx){
document.getElementById(idx).style.display = "none";
//document.getElementById(idx).style.visibility = 'hidden';
}

</script>

Then the form for password objects below the <body> tag

<form action="" method="post">
<label id="passwordlabel">Password</label>
<input type="text" name="password" id="password" />
<br />
<input type="submit" name="submitpassword" id="submitpassword" value="Submit" />
</form>

and follow with PHP code below the form,, anything below PHP code will not load if the password is incorrect

<?php
if (isset($_POST['submitpassword'])){
if ($_POST['password']== "abcd"){//PREFEREED PASSOWRD IS 'abcd'
//PROOCEED WITH PAGE DISPLAY and hide password objects
echo "<script> hideObject('passwordlabel');</script>";
echo "<script> hideObject('password');</script>";
echo "<script> hideObject('submitpassword');</script>";
}else{
//terminate page
exit;
}
}else{
//terminate page
exit;
}
?>

View More Comments
MatthewC
MatthewC
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
Get recognized
May 29, 2013

What's with the PHP again? Do you use Confluence? If you don't know about Atlassian tools, why are you answering questions about something you know nothing about?

Like • # people like this
Radu Dumitriu
Radu Dumitriu
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
Get recognized
May 29, 2013

Oh, common Matt. PHP IS THE ANSWER TO EVERYTHING, not that old fashioned 42.

Like
Reply
2 votes
ISHO ISHO
ISHO ISHO May 28, 2013

its possible if you code directly on the page(s) you want to protect. if the pages are scripts e.g. index.php, index.asp etc you can hardcode the password, so here we go in php )....Indentify the page u want to protect ususlly index.php (but if its not explicity shown e.g. http://index.php/products this means "products" is a folder that contains another index.php Modify the index.php by a few line of code using a good editor,, Dreamweaver is my favourite,, but a plain text editor can do.

Put the javascript code above the <head> tag

<script>
function validatex(pwd){
var password=prompt("Enter a password please","password");
if (password!=null && password!="")
{ //check password
if (password==pwd){
//PROCEED
alert ("correct password was entered!");
}
else{
alert("Wrong password entered!");
location.reload();
}
} //else password is invalid
else{
alert("Invalid pasword entered, please try again!");
location.reload();
}
}
</script>


Then add PHP code immediately below <body> tag as follows


<?php
echo "<script> validatex('abcd')</script>";//PREFERRED PASSWORD IS 'abcd'
?>

View More Comments
Nic Brough -Adaptavist-
Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
Become a leader
May 28, 2013

That won't work for Confluence, it's not php.

Also, you should never do security with javascript, as the user can simply bypass it.

Like
Reply
1 vote
ISHO ISHO
ISHO ISHO May 29, 2013

The original question didnt mention Confluence and so i guess i can answer in the way I know best. Kind regards;

View More Comments
Nic Brough -Adaptavist-
Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
Become a leader
May 29, 2013

Er, this is an Atlassian forum, so it implies the use of at least one of the Atlassian suite. It also says "confluence" in the tags.

There's lots of clues here that it's not php based (and javascript still won't work)

Like
Reply
1 vote
ISHO ISHO
ISHO ISHO May 28, 2013

Yes the issue of security is important,,

by sniffing binary data coming in during load he can hack the password i think

for an enclosed intranet its secure enough i think. but your point is taken

i think its better to use a database stored password and do the checking within PHP code

thanks

View More Comments
Nic Brough -Adaptavist-
Nic Brough -Adaptavist-
Community Leader
Community Leader
Community Leaders are connectors, ambassadors, and mentors. On the online community, they serve as thought leaders, product experts, and moderators.
Become a leader
May 28, 2013

Javascript is utterly insecure. It's run by the *browser*, the user can simply press ctrl-u to expose it and even the most simple debugger can bypass it.

There's no need to sniff at all, you can simply walk straight around it.

And, again, your answer misses one major point - Confluence is NOT php.

Like • Deleted user likes this
Reply
0 votes
MatthewC
MatthewC
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
Get recognized
May 28, 2013

I'm guessing from yoru question that a lot of users have admin access that shouldn't? Even if you could easily password protect a page, you'd only be putting a band-aid on the problem. Anyone who has access to the server of the database can bypass the page level security provided by Confluence. It's a problem we've had with Confluence in that you can't use it to securely store passwords (haven't tried Customware/Service Rocket's plugin).

I'd tackle the problem of your user access levels as it will only come back again & again.

One solution we use is to store password files on restricted network shares and link to them from the confluence page.

Reply
0 votes
stcl
stcl May 8, 2013

Hi,

Take a look at Customware's Security and Encryption Plugin. It uses PGP to encrypt some content and adds an additional level of page protection.

It is not very userfriendly (eg. no autocomplete) and not well integrated (encrypted content is stored separately and not with the page). But if you really need this level of protection you probably can live with it.

Be sure to use the latest version if your confluence is running on Java 7!

- Steffen

Reply
0 votes
AlysonA
AlysonA
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
Get recognized
September 25, 2012

Hi Kyle,

I'm afraid this is not possible, but that's an interesting idea. You can consider raising a feature request at href="https://jira.atlassian.com%20">https://jira.atlassian.com regarding this matter.

For now, you can work with Page restrictions in order to allow only certain users/groups to view an specific page.

Cheers

Reply

Suggest an answer

Log in or Sign up to answer
Confluence
Confluence
TAGS
AUG Leaders

Atlassian Community Events

    See all events