Ephox EditLive! Password Encryption Tool

Ephox, January 2004

Introduction

Ephox EditLive! supports the use of authentication when accessing File Transfer Protocol (FTP) and WebDAV resources.  EditLive! uses FTP for loading static Web files for modification and working with images.  WebDAV is used to insert hyperlinks and work with images.  In order for EditLive! to authenticate with the server it is essential for EditLive! to have access to the username and password.  For this reason these details are usually set in the source code of the page that contains EditLive! using the following properties:

• FTPUsername and FTPPassword for FTP
• WebDAVUserName and WebDAVPassword for WebDAV

We understand that some security concerns may arise from this practice.  For this reason we have included a new tool which will allow you to encrypt your password for inclusion in any EditLive! page.  This new tool is called the Ephox EditLive! for Windows Password Encryption Tool.

Minimum Requirements

The minimum version of the EditLive! SDK that the Password Encryption Tool is included in is EditLive! 3.0.  This is also the minimum version of the EditLive! client install that will recognize encrypted passwords in the source code of any EditLive! page.

Note: a previous version of this tool was included in EditLive! 2.1 Service Pack 2 that only supported FTP.

How the Password Encryption Tool Works

The Password Encryption Tool is a small standalone program.  It allows you to enter your password and returns an encrypted string.  This encrypted string can then be used when setting the password property in your EditLive! pages instead of your actual password.  This will allow EditLive! to connect to your server while preventing people accessing your password when viewing the source of your EditLive! page.

Accessing the Password Encryption Tool

The Password Encryption Tool is installed as part of the EditLive! SDK.  Once you have installed the EditLive! SDK please click Start > Programs > Ephox EditLive! 3 > SDK > Password Encryption.  This will launch the Password Encryption Tool interface.

Encrypting your Password

1. Within the Password Encryption Tool Interface, enter your password into the Password text area, ensuring that the case is correct.
2. Click the Encrypt button to create the encrypted password in the Encrypted Password text area.  
3. Highlight the encrypted password in the Encrypted Password text area and hit CTRL+C to copy the string to your clipboard.  This can then be pasted into your EditLive! page source code.

Using your Encrypted Password for FTP

Once you have your encrypted string, this can be used when setting the FTPPassword property of EditLive! instead of your FTP password.

function EditLive1_onload() {
    ...
    editLive1.setFTPPassword( 'elcryptëýëQð' );
    ...
}

Using your Encrypted Password for WebDAV

Once you have your encrypted string, this can be used when setting the WebDAVPassword property of EditLive! instead of your WebDAV password.

function EditLive1_onload() {
    ...
    editLive1.setWebDAVPassword( 'elcryptëýëQð' );
    ...
}

More Information

WebDAVPassword Property Reference Page

FTPPassword Property Reference Page

FTP Security

FTP Configuration within EditLive!

Using Images in EditLive!