TweetFollow Us on Twitter

Password
Volume Number:7
Issue Number:7
Column Tag:C Workshop
Related Info: Dialog Manager

Password Dialogs

By Bill Schilit, New York, NY

Note: Source code files accompanying article are located on MacTech CD-ROM or source code disks.

Making a Password Dialog

Bill Schilit has been programming the Macintosh since the days of the 128K. He co-authored Macintosh Kermit, and the CAP Appletalk-Unix File Server. Bill is currently a graduate student at Columbia University’s Computer Science department.

This article describes how to program a dialog with a non-displaying “password” field. In this type of dialog, when the user types in his or her password all they see are bullet characters (“•”) -- because you never know who may be looking over your shoulder.

The password field of the dialog must handle delete, backspace, and replacement of the text selection. Basically, even though you can’t see the characters being entered you want it to act like a normal Text Edit field. One nice solution to the problem is to create an offscreen TE field to hold the plain text password while the dialog TE field holds the bullets.

The Login Dialog

In the program below, LoginDialog() is called to display the dialog box, it returns the user name and password entered by the user. The filter procedure, LoginFilter() does the real work here: it checks the name and password lengths, keeps the offscreen TE record up to date, and exchanges the password character with a bullet.

LoginDialog() first loads the dialog from the resource file and then calls SetPort() to set the GrafPort to the dialog window. SetPort is required for TENew() a few lines below, since TextEdit remembers the GrafPort for you. The destination and view rectangles we supply to TENew() are outside of the dialog window, so we never actually see this TE field. After creating the invisible text edit field, a pointer to it is stored in the dialog window via SetWRefCon() so that the filter procedure has access to it.

The rest of LoginDialog() is fairly standard. The procedure loops until the user types the OK button at which point the user name and password fields are copied for the caller. Within the dialog loop the OK button is enabled or disabled -- if the password and username have some type in then OK is enabled, otherwise it is disabled.

Figure 1. Password Dialog Box

The Login Filter

LoginFilter() is the standard filter procedure called by our modal dialog. If you remember your Inside Mac then you know that returning TRUE from the filter proc means we have handled the event, and the item number is in itemHit. Returning FALSE lets ModalDialog process the event. Our filter proc is only concerned with keyboard events, so the first line in procedure LoginFilter causes a return on all other types of events.

The next task in LoginFilter() is to handle the characters tab and return (tab moves to the next field and return is the same as the default button). The filter returns here if either of these characters was typed.

The filter procedure now does the work of checking field lengths and setting those bullets. The dialog’s text edit handle and the editField tell us which field is getting type in and how large the current edit record is. We first check that adding the character will not push us past the password or user name size limit, if so the filter gives a beep and ignores the character. Notice that the auxiliary routine we call to check the length of the text edit field given the new character is smart about checking for deletes, backspace, and selection replacements.

When the character is destined for the password item we do our final manipulations. The handle to our invisible text edit record is fetched from the dialog refCon, and the selection (and insertion point) are set to be exactly the same as in the password field. TEKey() is called to insert the character into our invisible text edit. Now, unless the character is a delete or backspace, the character in the event record is replaced by a bullet. We return to ModalDialog telling it to handle the event with the now obscured character for the password field. When the dialog is complete, the password is available from the invisible text edit field.

LOGIN DIALOG.C

/*
 * Login Dialog.c - Dialog for User Login.
 *
 * Copyright (c) 1988 by Bill Schilit.
 *
 * Edit History:
 *
 *  April 23, 1988      Schilit    Created
 *  May 9, 1988         Schilit    Clean up
 *
 */

/* Includes MacHeaders */

#include “Login Dialog.h”

/* Prototypes */

static int 
TELengthCheck(TEPtr te,char c,int maxLen);

static void
TECpyText(TEHandle teH,Ptr p);

pascal Byte 
LoginFilter(DialogPtr dPtr,
        EventRecord *ePtr,short *iHit);

/*
 * LDialogStg contains the global vars used 
 * by the filter proc and user item procs in
 * our login dialog. A pointer to the 
 * LDialogStg is stored in the window refcon
 * of the dialog window.
 */

typedef struct {
    TEHandle passTeH;
} LDialogStg, *LDialogStgPtr;

/*
 * static Byte 
 *  LoginFilter(DialogPtr theDialog,
 *              EventRecord *theEvent,
 *              int *itemHit);
 *
 * Modal dialog filter to echo bullet 
 * (‘\245’) instead of the user’s password
 * and to limit the number of characters in
 * both the user name and password edit
 * records.
 */

static pascal Byte
LoginFilter(theDialog,theEvent,itemHit)
DialogPtr theDialog;
EventRecord *theEvent;
short *itemHit;
{
    register char c;
    int field,tooBig;
    TEPtr tePtr;
    LDialogStg *ldStg;
    
    /* we’re only interested in keyboard 
     * events. If not a key, let modal 
     * process as usual
     */
     
    if (theEvent->what != keyDown && 
        theEvent->what != autoKey)
            return(false);
    
    /* fetch the character from the
     * event message 
     */    

    c = theEvent->message & charCodeMask;
    
    /* Check for CR and convert to OK button.
     * Check for TAB and let it pass.
     */
     
    if (c == CR) {
        *itemHit = OK;
        return(true);
    }
    
    if (c == ‘\t’)
        return(false);

    /* make sure the edit text item is one
     * we are interested in and check to see
     * if the length is not too large.
     */
     
    field = 
      ((DialogPeek) theDialog)->editField+1;
    
    tePtr = 
      *(((DialogPeek) theDialog)->textH);

    /* User is typing in the nameItem -- 
     * our only interest is the size 
     */
    
    if (field == nameItem) {
        tooBig = 
          TELengthCheck(tePtr,c,MAXNAME);

     /* give a beep if too big, and return
      * TRUE to ignore the event.
      */
      
        if (tooBig)
            SysBeep(1);   
        return(tooBig);   
    }
    
    /* If typing into the password, check the
     * size, then diddle the character so 
     * bullet (\245) shows up instead of what
     * the user typed.
     */
     
    if (field == passwdItem) {
        if (TELengthCheck(tePtr,c,MAXPWD)) {
            SysBeep(1);
            return(true);
        }
        
   /* Insert the char into our private
     * password text edit record. First
     * set the text selection so action
     * mimicks exactly what user is 
     * selecting and typing in passwdItem
     * text edit field.
     */
    
        ldStg = (LDialogStg *) 
          GetWRefCon(theDialog);
          
        if (ldStg == 0)
            return(false);
            
        TESetSelect(tePtr->selStart,
                    tePtr->selEnd,
                    ldStg->passTeH);
                    
        TEKey(c,ldStg->passTeH);
    
        /* unless BS or DEL, replace the
         * password character with bullet 
         */

        if (c != DEL && c != BS)
            theEvent->message = ‘\245’ | 
            (theEvent->message & 
              ~charCodeMask);
        return(false);       /* return ok */
    }
    
    return(false);           /* all other items */
    
}    

/*
 * static int 
 * TELengthCheck(tePtr te,char c,int maxLen)
 *
 * Check that adding character c to the text
 * edit te does not cause more than maxLen
 * chars in the text edit item:
 *
 * 1) If delete or backspace then length will
 *    decrease so ok.
 * 2) If a selection range of 1 or more chars 
 *    then same as above.
 * 3) Finally just check the length of the 
 *    edit item. 
 *
 *
 * Returns: FALSE if OK, TRUE if too large.
 *
 */
 
static int
TELengthCheck(te,c,maxLen)
TEPtr te;
char c;
int maxLen;
{

   /* this char a del or bs */
   /*  if so, does not increase */
 
    if (c == DEL || c == BS)
        return(false);       

    /* selected a region? */
    /* if so, then does not increase */
    
    if (te->selStart < 
        te->selEnd)           
        return(false);      
   
   /* else will insert, check length */
      
    if (te->teLength < maxLen) 
        return(false);
    
    return(true);
}

/*
 * static void TECpyText(TEHandle teH,Ptr p)
 *
 * Fetch the text from the text edit handle
 * and store as a pascal string in Ptr p.
 *
 * NB: This only works if the TE text is less
 * than 255 characters (a pascal string 
 * limit) so be careful.
 *
 */
 
static void
TECpyText(teH,p)
TEHandle teH;
Ptr p;
{
    p[0] = (unsigned char) (*teH)->teLength;
    BlockMove(*(*teH)->hText,&p[1],p[0]);
}

/*
 * LoginDialog(char *uName,*uPassword)
 *
 * Perform a login dialog and return the user
 * name and password in uName and uPassword.
 *
 * The dialog has a special filter procedure
 * which echos bullet characters in the
 * password field.
 * 
 * The length of the username and password
 *  are limited to MAXNAME and MAXPWD.
 * 
 * Note: we do not issue ParamText() since 
 * this affects other dialogs on the screen.
 * 
 */
 
LoginDialog(uName,uPasswd)
char *uName,*uPasswd;
{
    DialogPtr d;
    short itemHit;
    Rect aRect;
    int theKind;
    Handle nameHdl,okHdl;
    Boolean okOK = false;
    LDialogStg LDStg;
    

    d = GetNewDialog(LOGIN_DLOG,
                     (Ptr) 0,(Ptr) -1);
                     
    if (d == 0)
        return;
  
    /* make it the current port */          
  
    SetPort(d);         
    
    /* Make an offscreen rect for the text
     * edit to hold the plain text of the
     * entered password.
     * 
     * The dialog edit text for the password
     * will get “•” for each character typed.
     */
     
    SetRect(&aRect,0,0,1,1);
    OffsetRect(&aRect,
                d->portRect.right,
                d->portRect.bottom);
    
    LDStg.passTeH = TENew(&aRect,&aRect);
    
    /* Set the window data to be a pointer
     * to storage needed by filter procedure.
     */
     
    SetWRefCon(d,(long) &LDStg);
  /* Get handles for Name field and 
     * OK Button 
     */
        
    GetDItem(d,nameItem,&theKind,
             &nameHdl,&aRect);
    GetDItem(d,okItem,&theKind,
             &okHdl,&aRect);
    
    ShowWindow(d);
    
    while (!(okOK && itemHit == okItem)) {
        
        /* Set okOK to true if password and
         * name fields both have more than
         * one character. Enable/Disable the
         * OK button accordingly.
         */
         
        GetIText(nameHdl,uName);
        okOK = 
          (*LDStg.passTeH)->teLength > 0 &&
           uName[0] > 0;
                
        HiliteControl((ControlHandle) okHdl,
                      okOK ? 0 : 255);
        
        ModalDialog(LoginFilter,&itemHit);
    }
    
    /* Store the password and username
     *  for the caller then clean up.
     */
    
    TECpyText(LDStg.passTeH,uPasswd);
    GetIText(nameHdl,uName);

    DisposDialog(d);    
    TEDispose(LDStg.passTeH);
}

LOGIN MAIN.C

/*
 * Login Main.c - Main for Login Example.
 * This program built under LSC 3.0
 * Copyright (c) 1988 by Bill Schilit.
 * Edit History:
 *  April 23, 1988     Schilit    Created
 *  May 9, 1988        Schilit    Clean up
 */

/* MacHeaders included */

#include “Login Dialog.h”

#define ALERTID 128

main()
{    
    char User[255];
    char Password[255];
    
    InitGraf(&thePort);
    InitFonts();
    InitWindows();
    InitMenus();
    TEInit();
    InitDialogs(0);
    FlushEvents(everyEvent,0);
    InitCursor();
            
    /* Show the login dialog box and
     * repeat until the user types
     * the matching password.
     */
     
    for (;;) {
    
        /* Call LoginDialog to get user name 
         * and password.
         */
        
        LoginDialog(User,Password);
        
        /* Compare the entered password with
         * “swordfish” -- case doesn’t matter
         *  -- and exit if a match.
         */
         
        if (EqualString(Password,
                        “\pSwordFish”,
                        false,false))
            ExitToShell();
            
        /* No match, show our alert box with
         * a hint, and repeat the process.
         */
         
        ParamText(User,0,0,0);
        Alert(ALERTID,(ProcPtr) 0);
    }
}
LOGIN DIALOG.H

/*
 * Login Dialog.h - Definitions for 
 *                   Login Dialog.
 * This program built under LSC 3.0
 * Copyright (c) 1988 by Bill Schilit.
 * Edit History:
 *    April 23, 1988     Schilit   Created
 *    May 9, 1988        Schilit   Clean up
 */


#define LOGIN_DLOG 256

enum {           /* DITL for LOGIN_DLOG */
    okItem=1,    /* OK button */
    nameItem,    /* edit text name */
    passwdItem,  /* edit text password */
    myIconItem   /* the icon */
};

enum {           /* ASCII definitions */
    CR = 0x0d,
    DEL = 0x7f,
    BS = 0x08
};


  /* max chars in a password */
  
#define MAXPWD 10    

  /* max chars in a user name */
  
#define MAXNAME 12   

/* PROTOTYPES */

LoginDialog(char *uName,char *uPasswd);

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

Default Folder X 5.1.6 - Enhances Open a...
Default Folder X attaches a toolbar to the right side of the Open and Save dialogs in any OS X-native application. The toolbar gives you fast access to various folders and commands. You just click on... Read more
Evernote 6.12.3 - Create searchable note...
Evernote allows you to easily capture information in any environment using whatever device or platform you find most convenient, and makes this information accessible and searchable at anytime, from... Read more
Geekbench 4.1.2 - Measure processor and...
Geekbench provides a comprehensive set of benchmarks engineered to quickly and accurately measure processor and memory performance. Designed to make benchmarks easy to run and easy to understand,... Read more
Carbon Copy Cloner 5.0.2 - Easy-to-use b...
Carbon Copy Cloner backups are better than ordinary backups. Suppose the unthinkable happens while you're under deadline to finish a project: your Mac is unresponsive and all you hear is an ominous,... Read more
BetterTouchTool 2.305 - Customize multi-...
BetterTouchTool adds many new, fully customizable gestures to the Magic Mouse, Multi-Touch MacBook trackpad, and Magic Trackpad. These gestures are customizable: Magic Mouse: Pinch in / out (zoom... Read more
calibre 3.8.0 - Complete e-book library...
Calibre is a complete e-book library manager. Organize your collection, convert your books to multiple formats, and sync with all of your devices. Let Calibre be your multi-tasking digital librarian... Read more
BetterTouchTool 2.305 - Customize multi-...
BetterTouchTool adds many new, fully customizable gestures to the Magic Mouse, Multi-Touch MacBook trackpad, and Magic Trackpad. These gestures are customizable: Magic Mouse: Pinch in / out (zoom... Read more
calibre 3.8.0 - Complete e-book library...
Calibre is a complete e-book library manager. Organize your collection, convert your books to multiple formats, and sync with all of your devices. Let Calibre be your multi-tasking digital librarian... Read more
Carbon Copy Cloner 5.0.2 - Easy-to-use b...
Carbon Copy Cloner backups are better than ordinary backups. Suppose the unthinkable happens while you're under deadline to finish a project: your Mac is unresponsive and all you hear is an ominous,... Read more
Evernote 6.12.3 - Create searchable note...
Evernote allows you to easily capture information in any environment using whatever device or platform you find most convenient, and makes this information accessible and searchable at anytime, from... Read more

The best new games we played this week -...
It's pretty much been one big release after another. We were privy to a bunch of surprises this week, with a lot of games we'd been waiting for quite some time dropping unexpectedly. We hope you're free this weekend, because there is a lot for... | Read more »
Stormbound: Kingdom Wars guide - how to...
Stormbound: Kingdom Wars is an excellent new RTS turned card battler out now on iOS and Android. Lovers of strategy will get a lot of enjoyment out of Stormbound's chess-like mechanics, and it's cardbased units are perfect for anyone who loves the... | Read more »
The best AR apps and games on iOS right...
iOS 11 has officially launched, and with it comes Apple's ARKit, a helpful framework that makes it easier than ever for developers to create mobile AR experiences. To celebrate the occassion, we're featuring some of the best AR apps and games on... | Read more »
Phoenix Wright: Ace Attorney - Spirit of...
Phoenix Wright: Ace Attorney - Spirit of Justice 1.00.00 Device: iOS Universal Category: Games Price: $.99, Version: 1.00.00 (iTunes) Description: ************************************************※IMPORTANT※・Please read the “When... | Read more »
Kpressor (Utilities)
Kpressor 1.0.0 Device: iOS Universal Category: Utilities Price: $4.99, Version: 1.0.0 (iTunes) Description: The ultimate ZIP compression application for iPhone and iPad. - Full integration of iOS 11 with support for multitasking.-... | Read more »
Find out how you can save £35 and win a...
Nothing raises excitement like a good competition, and we’re thrilled to announce our latest contest. We’ll be sending one lucky reader and a friend to the Summoners War World Arena Championship at Le Comedia in Paris on October 7th. It’s the... | Read more »
Another Lost Phone: Laura's Story...
Another Lost Phone: Laura's Story 1.0 Device: iOS Universal Category: Games Price: $2.99, Version: 1.0 (iTunes) Description: Another Lost Phone is a game about exploring the social life of a young woman whose phone you have just... | Read more »
The Witness (Games)
The Witness 1.0 Device: iOS Universal Category: Games Price: $9.99, Version: 1.0 (iTunes) Description: You wake up, alone, on a strange island full of puzzles that will challenge and surprise you. You don't remember who you are, and... | Read more »
Egg, Inc. guide - how to build your gold...
Egg, Inc.'s been around for some time now, but don't you believe for one second that this quirky clicker game has gone out of style. The game keeps popping up on Reddit and other community forums thanks to the outlandish gameplay (plus, the... | Read more »
The best deals on the App Store this wee...
Good news, everyone! Your favorite day of the week has arrived at last -- it's discount roundup day! This fine Wednesday evening we're gathering up the hottest deals on the App Store. We've got action platformers, we've got puzzle games, we've got... | Read more »

Price Scanner via MacPrices.net

Apple Offering Up To $455 Credit Toward iPhon...
iPhone 8 and 8 Plus are now available at the Apple Store, and you can receive up to $375 credit toward a new iPhone purchase when you trade in your eligible smartphone. Photo Courtesy Apple Just... Read more
AnyTrans Offers iOS Users Three Ways For Movi...
iMobie Inc. today announceed AnyTrans v6.0.1, which now can help iOS users move all data to iPhone 8/8 Plus seamlessly. The software is available both on Mac and Windows and fully able to move all... Read more
Snag a 13-inch 2.3GHz MacBook Pro for $100 of...
B&H Photo has 2017 13″ 2.3GHz MacBook Pros in stock today and on sale for $100 off MSRP, each including free shipping plus NY & NJ sales tax only: – 13-inch 2.3GHz/128GB Space Gray MacBook... Read more
Verizon offers new iPhone 8 for $100-$300 off...
Verizon is offering the new iPhone 8 for up to $300 off MSRP with an eligible trade-in: • $300 off: iPhone 6S/6S Plus/7/7 Plus, Google Pixel XL, LG G6, Moto Z2 Force, Samsung Galaxy S7/S7 edge/S8/S8... Read more
Apple Refurbished 2017 13-inch MacBook Pros a...
Apple has Certified Refurbished 2017 13″ Touch Bar MacBook Pros in stock today and available for $200-$300 off MSRP. A standard Apple one-year warranty is included with each MacBook, and shipping is... Read more
OWC USB-C Travel Dock with 5 Ports Connectivi...
OWC have announced the new OWC USB-C Travel Dock, the latest addition to their line of connectivity solutions. The USB-C Travel Dock lets you connect its integrated USB-C cable to a Mac or PC laptop... Read more
Pelican Products, Inc. Unveils Cases For All...
Pelican Products, Inc. has announced the launch of its full line of cases including Voyager, Adventurer, Protector, Ambassador, Interceptor (for the Apple iPhone 8 and 8 Plus backwards compatible... Read more
$100 off new 2017 13-inch MacBook Airs
B&H Photo has 2017 13″ MacBook Airs on sale today for $100 off MSRP including free shipping. B&H charges NY & NJ sales tax only: – 13″ 1.8GHz/128GB MacBook Air (MQD32LL/A): $899, $100 off... Read more
Apple restocks Certified Refurbished 13-inch...
Apple has Certified Refurbished 2015 13″ MacBook Airs available starting at $719 and 2016 models available starting at $809. An Apple one-year warranty is included with each MacBook, and shipping is... Read more
Is iPhone X Really The Future Of The Smartpho...
Should iPhone X even be called a telephone? It does of course support telephony and texting, but its main feature set is oriented to other things. It is also debatable whether it makes any rational... Read more

Jobs Board

Development Operations and Site Reliability E...
Development Operations and Site Reliability Engineer, Apple Payment Gateway Job Number: 57572631 Santa Clara Valley, California, United States Posted: Jul. 27, 2017 Read more
Specialist - Retail Customer Services and Sal...
The position listed below is not with Tennessee Interviews but with Apple , Inc. Tennessee Interviews is a private organization that works in collaboration with Read more
Specialist - Retail Customer Services and Sal...
The position listed below is not with South Carolina Interviews but with Apple , Inc. South Carolina Interviews is a private organization that works in collaboration Read more
Behavior Technician with *Apple* Consulting...
The position listed below is not with Washington Interviews but with APPLE CONSULTING Washington Interviews is a private organization that works in collaboration Read more
Infection Control RN with *Apple* Rehab - A...
The position listed below is not with Georgia Interviews but with Apple Rehab Georgia Interviews is a private organization that works in collaboration with Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.