Website Security

Hello All (Again)

I am building a website that requires two levels of security with password access to both levels. I have hacked some simple code enabling the password / passthrough functionality, but I don't know how to make these pages non-editable, i.e. anyone can just use the EDIT | NOTEPAD button to view the source code and passwords. I have two questions regarding this:

1/ How do I turn this edit function off?

2/ Where can I find resources on Negative Testing? As I can test the functionality that should work but require detail on testing those functions that shouldn't work.

CBE
GH

The source code that is viewed when someone "View Sources" is what is sent to the browser. The solution is to use a Server Side type of authentication. Depending on the type of system/webserver you can use built in system security (i.e. .htaccess) or you can write a script that the server will execute and not enable the client to see the password.