Authentication is commonly understood as the act of asserting a user's or entity's identity, although in the wider sense it can refer to asserting the truthfulness of any kind of claim. Authentication, like encryption, is a major component in implementing computer security.

learn more… | top users | synonyms (1)

7
votes
4answers
626 views

Is it generally a good idea to allow the reuse of old usernames from deleted accounts?

On a Social Networking site, is it generally a good idea to allow the reuse of old usernames from deleted accounts, or is it better to prohibit their reuse forever? How do the big boys do it ...
0
votes
1answer
375 views

Apache authentication, security exceptions and safari

I have apache authentication set up on a site, it works fine in firefox and chrome, you type in the username/pass once and then you can happily visit any page on the site. Unfortunately this is not ...
1
vote
0answers
101 views

Fix Login issues tapatalk with joomla 1.5 to phpbb3 bridge [closed]

I have a forum that I want to integrate tapatalk into. Everything works except when I login I get the following error message: http://vps.Midnightfox.be/imagehost/issue_phpbb3bridge.jpg Does anybody ...
1
vote
2answers
307 views

Run server-side script as authenticated user in apache--is it possible?

I'm developing a web app that takes a bunch of parameters (dropdown boxes, etc) from an authenticated user, creates a file, then delivers that file via stdin to a program on my web server. Due to ...
3
votes
1answer
1k views

Does Orchard have Active Directory authentication?

I've been looking over the Orchard CMS and it seems like a capable CMS and mature enough to do what we need here. However, one thing I haven't been able to find info on is AD authentication. We plan ...
3
votes
3answers
7k views

How to login as another user in phpmyadmin

I installed phpmyadmin in Win7, and if I type http://localhost/phpmyadmin/index.php in the browser, it will log in phpmyadmin as root user by default. I created a new user but still there's no login ...
3
votes
2answers
627 views

You don't have permission to access /index.php on this server

I made a 'login with OpenID' page and I had a error when OpenID provider return to my page: You don't have permission to access /index.php on this server. Additionally, a 404 Not Found ...
1
vote
1answer
222 views

Force SSL on IIS site with NT authentication

We recently implemented SSL on our reseller portal and have been receiving complaints about needing to log in twice. This is of course because they bookmarked the site before we had SSL so their ...
3
votes
4answers
476 views

Personalized content (authenticated with a cookie) and impact on SEO

We have a big website with a lot of content, that is doing pretty well in terms of SEO. Google likes the site, visitors like it as well. Our problem is that there is a lot of content that would only ...
1
vote
2answers
54 views

E-commerce with secure cart and payment

I want to create an e-commerce project online.. so I have this issue : if the user is not logged in , then the selected products will be automatically added to a default cart .. under the name of ...
0
votes
1answer
223 views

PHP Library to accept logins from Facebook and Google?

I'm making a site and I want creating accounts / logging in to be very easy, so I want to support logins with Facebook Connect and Google Accounts. I know both offer APIs, but seems like a lot of ...
0
votes
1answer
239 views

Creating a form that posts to Twitter - how to get started?

I'm trying to figure out how to create an HTML form that would allow a user to log in and tweet their message directly to Twitter. What resources should I look at to get started?
1
vote
1answer
400 views

Why isn't HTTP Authentication working on this Apache HTTPS site?

I have set up a private MoinMoin wiki, accessed through HTTPS, but I cannot get Basic HTTP Authentication to work on it. I have it working on another site, using a similar vhosts file, so I cannot ...
1
vote
0answers
56 views

How to verify new accounts against a known persons database? [closed]

I need to (try to) solve the problem of new account creation for a patient portal for a medical records system (electronic health record). That is, a way to activate a patient online and match her ...
0
votes
1answer
430 views

How do I display content from another website that requires the user being logged in?

Say I have a website that requires a login, hosted somewhere remote. I would like to make a portal that shows this remote site but should always be logged in with the same user name and password on ...
4
votes
2answers
392 views

Facebook connect vs. OpenID

I just started working on a new project that has a general login feature. One suggestion in a meeting was to look into Facebook Connect or OpenID as an alternative. I'm curious if there's one that has ...
1
vote
1answer
194 views

Facebook - “openID” danger?

I am scared that someone can get into anybodys account on my game, if user does not have Facebook. Stealer makes facebook with same email that user in my game, and then click "Login with facebook" -> ...
1
vote
1answer
1k views

http auth an iframe automatically so users don't have to login?

I have a members only site running WordPress and a stock images gallery running an old php gallery CMS. I want the members to only have to login once but I want to protect the gallery from the general ...
8
votes
2answers
120 views

What do I lose if I use OpenID instead of the custom login system I built

I'm trying to make the decision whether to use OpenID or stay with a well-built custom login system. I think the appeal of OpenID is clear, in that the user doesn't have to create yet another account ...
0
votes
2answers
82 views

Trying to add a private zone to a website

I'm trying to add a "login page" as soon as someone clicks on the Galerie, in order to keep the pictures only between the members of the school. I tried several options, even designed a page named ...
1
vote
3answers
304 views

Website with sign up and sign in system

I'm going to start a website where I need a Signup and Sign in system. And when the user is signed in the user will get access to stuff that only members can see an access. Would HTML be the best way ...
1
vote
1answer
572 views

Directory access control with Apache: do I need to use a specific .htaccess?

I have an Apache webserver, and in the Apache configuration, I have Alias /backups "/backups" <Directory "/backups"> AllowOverride None Options Indexes Order allow,deny Allow ...
3
votes
2answers
113 views

What are recommended password reset mecanisms?

All, I'm developing a small, non-commercial web app. I'm trying to decide how to help a user who might have lost their password. I need a mechanism that is, in order of priority: 1) User friendly; ...
4
votes
1answer
416 views

Does htpasswd authentication prevent Google from crawling my site?

I have a site that I want to continue testing before I make public, so I don't want Google to start crawling the site as there will be a large amount of garbage content during testing. I currently ...
8
votes
8answers
369 views

What are the reasons to have a two step login? (Username on one page, password on the second.)

So I've recently been encountering more two step login processes, where I'm required to enter my username on one page and my password on a second. I really don't like this pattern, as it requires an ...
2
votes
1answer
56 views

Should OpenID clients accept adding WWW to the domain?

For a long time I've used OpenID delegation on my site: http://example.org/ delegated to: http://example.openid-provider.com/, so I logged into OpenID-consuming sites using the former as ID. ...
3
votes
2answers
186 views

Authentication system brainstorm [closed]

We got multiple small websites (microsites) and one main high traffic one with big users base. Right now the requirement is to build authentication system which should allow users to loign with the ...
7
votes
3answers
195 views

How should a site respond to automated login attempts with phony usernames?

For the last couple weeks I've been seeing a consistent stream of 15-30 invalid login attempts per hours on my site. Many of them are non-sensical usernames that nobody would ever register for real, ...
5
votes
2answers
178 views

Managing accounts on a private website for a real-life community

I'm looking at setting-up a walled-in (i.e. mostly private, with a small public-facing login page) website for a real-life community of people, and I was wondering if anyone has any experience with ...
3
votes
2answers
1k views

How to implement OpenID authentication for my site?

I want to offer OpenID authentication for my users (please note that I do not necessary want to become an OpenID provider; I just need to authenticate my user for my website). How to implement OpenID ...
1
vote
1answer
382 views

One-user databaseless CMS authentication

Background: My client needs a one-user bare-bones content management system, which should be capable to Edit text-content in plain-text or in WYSIWYG-style Possibly create new subpages Update image ...
2
votes
1answer
140 views

how to handle login between different domains?

I've a website with 2 domains (.nl and .com) and a translated version of the content is displayed depending on the domain. My issue is that when a client login under a .nl domain, and he moves to the ...
1
vote
2answers
91 views

Is it ill-advised to create custom text for a login link (e.g. “Become a ninja” as opposed to just “log in”)

I'm trying to figure out whether it's best to: stick with the tried and true link text for login ("log in" -> linking to the login page) Make the login button custom to the site and somewhat of a ...
4
votes
5answers
461 views

Do user names used for login need to be unique?

Assuming a non-commercial site where users login with a user name and pw, do I need to enforce unicity of usernames? Note: The db will use a separate unique index to identify the users. The site is ...
1
vote
3answers
1k views

Drupal + LDAP + Automatic

I've got Drupal 6 setup within a XAMPP test area. I have LDAP authentication, groups and data working against Active Directory. What I want... is since I'm on an intranet where users are logged in ...
4
votes
2answers
184 views

Why do user registration process not end with the user logged in?

Often I see websites when at the end of the registration process the user is not logged in. What is the rational for that? It seems redundant to ask a user to reenter their credentials just after ...
0
votes
1answer
47 views

Need stats on the effectiveness of user verification systems on fraud, abuse and/or compliance?

Here's an example, although not a good one from Craigslist.
3
votes
3answers
861 views

How do you get Drupal to go to a page other than the User Profile on login?

ISSUE: Please help, I've tried a few things to get Drupal to STOP going to the User Prolfile page on login, even installed a module called LoginToboggan; which has nice features, just doesn't stop ...
2
votes
1answer
117 views

Looking for usability studies of user authentication methods and interfaces, do you know of any?

Been having issues with stackexchange creating weird usernames for me and grouping them with my account, it appears to be a known issue, and emailed the stackexchange team... which leads me to my ...
0
votes
2answers
793 views

Godaddy - folder with password protection

Godaddy windows shared hosting on IIS6, but will probably migrate to IIS7 soon. Is there easy way to setup folder with password protection, so when I try to access secure folder, login dialog pops ...
4
votes
3answers
452 views

How useful is Facebook Connect Login?

I'm starting to see some Websites offer the option to login via Facebook. I'm curious how useful it is a feature. For example, when someone logs in, does her friend knows on Facebook that she logged ...
6
votes
3answers
375 views

Using two salts for user authentication?

When storing user credentials in a database, we all know that hashing the password is the bare minimum you should do, but salting it before hashing is better. The salt should be randomly generated, ...
9
votes
3answers
520 views

Does SSL really matter for most websites?

I've been pretty paranoid about learning to "do security right" for this site I'm building (first non-trivial site I've made), and I've noticed something that bothers me: SSL. I've read plenty of ...
5
votes
2answers
410 views

HTTP for one part of the site, HTTPS for other

We have a site which is HTTP, but it has an admin part. How can we secure the admin part with HTTPS? For example, WordPress (which I know) is located at http://foo.com, but we want to have ...
6
votes
5answers
161 views

Allowing users to post without logging in

On Stackoverflow/Stackexchange, users are allowed to add posts without requiring login, just wondering what should be considered before allowing this kind behavior on a site? Couple of things spring ...
7
votes
1answer
664 views

Permissions for serving up temporary files

I have a system (web based application) which pulls file attachments from a 3rd party system via SOAP. These are in turn on our system created as files in a directory. When a user of the system ...
5
votes
2answers
2k views

How can I secure an installation of MediaWiki?

I want to run an installation of MediaWiki as a Internet-accessible personal wiki, running on wiki.mysite.com. However, I want to ensure that I am the only one who can read and write to this wiki. In ...
8
votes
2answers
437 views

Should I support facebook login or openid login?

What are the pros and cons of each? Does it make any sense supporting both? Which is easier for users/to implement?
4
votes
2answers
222 views

How do I edit/modify a file on a webserver using php file in the same location? [closed]

I have an XML file on my server. In the same directory I have a PHP file which modifies the content of the XML and saves it. In this, the save part doesn't work. In my knowledge the code is alright ...
6
votes
3answers
466 views

When should you consider being an OpenID provider?

I know that OpenID would benefit more from a larger number of sites adopting it, than it would from more people being providers. But even still, I am curious as to when it would be good for a site to ...