Authentication is commonly understood as the act of asserting a user's or entity's identity, although in the wider sense it can refer to asserting the truthfulness of any kind of claim. Authentication, like encryption, is a major component in implementing computer security.

learn more… | top users | synonyms (1)

6
votes
5answers
114 views

How to include content from remote server while keeping that content secure

I am hosting collection of videos, for which I retain the copyright, on a file server that I'd like to share with family and friends. When a user visits my file server via a web browser they are ...
2
votes
2answers
187 views

FB login and privacy policy

I'm bulding up a site, where the ONLY ONE method for log in, is the fb login button. Now i'm wondering if i need to make users check and read the my own site's privacy and policy before and accept ...
1
vote
1answer
93 views

Open source login solution

Authentication is such a general problem, which most websites have to implement. There are a few commercial solutions, but all lack sufficient functionality to customize the registration process. ...
1
vote
1answer
446 views

Good idea to use Google Sites for static content and custom PHP for dynamic

We have a site based upon Google Sites. Now we would like to create a login area (HTTPS) with a mixture of dynamic and static content. Is it a good idea to utilize Google Sites and use iFrames for the ...
3
votes
1answer
165 views

getting the user back where they came from with mod_form_auth

Using the mod_form_auth module in Apache HTTPD 2.4.3, I am looking for a way to have the user redirected to their original desired target after completing a login. That is, if I have a <Location ...
0
votes
0answers
277 views

SIMPLEST way to set up password protection for a static site, with basic admin UI?

I have a static site. I would like the simplest approach to password protecting a directory, with a basic admin UI for adding/removing users. I will have so few users that I don't care about ...
3
votes
2answers
120 views

Use Outlook password for website verification

I am currently building an internal employee dashboard for our global company (it is hosted on an external website for logistical reasons) I'd like (need) to password protect the page as we will be ...
4
votes
1answer
901 views

Password protect an alias virtual directory

I have a main domain being hosted through CPanel. I also have a sub-domain that I would like to appear as a path under the main domain instead of as a sub-domain. So I have: http://example.com/ ...
5
votes
1answer
1k views

Are there any other login products similar to LoginRadius?

I'm thinking of using LoginRadius social site login/registration solution to integrate with traditional login/registration system. Has anyone ever used it and have any opinion about its performance ...
2
votes
2answers
674 views

My cPanel login is being redirected. How can I resolve this?

I'm trying to get to cPanel to manage my website. When I type www.mydomain.com:2082 into the browser window, the request seems to be redirected. I made a screen-cast so I could slow down the changes ...
0
votes
1answer
383 views

How to create email request forms and auto-responder?

I'm building a site in css and I'm pretty new to any code or script other than html and css. I'm trying to create a landing page that requires an email from visitors and set up an auto responder to ...
2
votes
1answer
1k views

Avoid the login popup when using http-auth

I have an Apache. Under the DOCUMENTROOT is a folder with an .htpasswd file for http-auth. If I open the browser and request the content in the folder I get an Popup to login. Is there a way to avoid ...
1
vote
2answers
46 views

Search Engine, Public Facing Game

I run an online game. The only pages one can access without an account are the homepage, register, lost password, contact me. If I were to make more of my pages public, and add links to them from the ...
0
votes
1answer
291 views

Drupal node access for anonymous users

I've never used Drupal before so this may be something that can easily be remedied, and that would be awesome. My problem is that a block, containing node information can't be viewed by anonymous ...
1
vote
0answers
345 views

Different behaviour with windows authentication on IIS7 websites

I need to run a website with just windows authentication. Given the following situation: The location of the default website is: c:\inetpub\wwwroot The location of my code is: c:\Sites\WebApp My ...
1
vote
1answer
247 views

Digest access authentication “realm”

I have attempted to find documentation on what this actually is with no luck. http://en.wikipedia.org/wiki/Digest_access_authentication The hashed value is username:realm:password.
2
votes
2answers
2k views

Login script with member area/user

Is there a free script which I can use to: Share some PDF with my partners. But i need the user to reach only those PDFs which they have privileges for. So I need: login script with registration (i ...
1
vote
0answers
186 views

Can I use both Digest and Basic Authentication on the same directory in Apache?

The reason I would want to do this is to support very old browsers (e.g. IE 6) that does not implement the more secure Digest method. If all new clients advertise the types of authentication they ...
3
votes
1answer
572 views

Using Public Key Authentication for websites

I know GitHub uses it for code development (not user authentication for the website though). I saw this article on the idea: ...
0
votes
2answers
404 views

htaccess and htpasswd trouble

This is the first time that I have ever tried working with .htpasswd and .htaccess files, so please point out my childish works. I have my apache document root set to /www/ on my debian server. ...
1
vote
3answers
2k views

How to avoid basic authentication warning when using protected directory?

I used cpanel on my hosted site to set up a password protected directory to allow downloads of specific files. I send people a link to the file by email and include their username and password so ...
7
votes
4answers
885 views

Is it generally a good idea to allow the reuse of old usernames from deleted accounts?

On a Social Networking site, is it generally a good idea to allow the reuse of old usernames from deleted accounts, or is it better to prohibit their reuse forever? How do the big boys do it ...
0
votes
1answer
458 views

Apache authentication, security exceptions and safari

I have apache authentication set up on a site, it works fine in firefox and chrome, you type in the username/pass once and then you can happily visit any page on the site. Unfortunately this is not ...
1
vote
0answers
107 views

Fix Login issues tapatalk with joomla 1.5 to phpbb3 bridge [closed]

I have a forum that I want to integrate tapatalk into. Everything works except when I login I get the following error message: http://vps.Midnightfox.be/imagehost/issue_phpbb3bridge.jpg Does anybody ...
1
vote
2answers
374 views

Run server-side script as authenticated user in apache--is it possible?

I'm developing a web app that takes a bunch of parameters (dropdown boxes, etc) from an authenticated user, creates a file, then delivers that file via stdin to a program on my web server. Due to ...
3
votes
1answer
1k views

Does Orchard have Active Directory authentication?

I've been looking over the Orchard CMS and it seems like a capable CMS and mature enough to do what we need here. However, one thing I haven't been able to find info on is AD authentication. We plan ...
4
votes
4answers
14k views

How to login as another user in phpmyadmin

I installed phpmyadmin in Win7, and if I type http://localhost/phpmyadmin/index.php in the browser, it will log in phpmyadmin as root user by default. I created a new user but still there's no login ...
3
votes
2answers
785 views

You don't have permission to access /index.php on this server

I made a 'login with OpenID' page and I had a error when OpenID provider return to my page: You don't have permission to access /index.php on this server. Additionally, a 404 Not Found ...
1
vote
1answer
266 views

Force SSL on IIS site with NT authentication

We recently implemented SSL on our reseller portal and have been receiving complaints about needing to log in twice. This is of course because they bookmarked the site before we had SSL so their ...
3
votes
4answers
596 views

Personalized content (authenticated with a cookie) and impact on SEO

We have a big website with a lot of content, that is doing pretty well in terms of SEO. Google likes the site, visitors like it as well. Our problem is that there is a lot of content that would only ...
1
vote
2answers
58 views

E-commerce with secure cart and payment

I want to create an e-commerce project online.. so I have this issue : if the user is not logged in , then the selected products will be automatically added to a default cart .. under the name of ...
0
votes
1answer
235 views

PHP Library to accept logins from Facebook and Google?

I'm making a site and I want creating accounts / logging in to be very easy, so I want to support logins with Facebook Connect and Google Accounts. I know both offer APIs, but seems like a lot of ...
1
vote
1answer
376 views

Creating a form that posts to Twitter - how to get started?

I'm trying to figure out how to create an HTML form that would allow a user to log in and tweet their message directly to Twitter. What resources should I look at to get started?
1
vote
1answer
440 views

Why isn't HTTP Authentication working on this Apache HTTPS site?

I have set up a private MoinMoin wiki, accessed through HTTPS, but I cannot get Basic HTTP Authentication to work on it. I have it working on another site, using a similar vhosts file, so I cannot ...
1
vote
0answers
59 views

How to verify new accounts against a known persons database? [closed]

I need to (try to) solve the problem of new account creation for a patient portal for a medical records system (electronic health record). That is, a way to activate a patient online and match her ...
0
votes
1answer
489 views

How do I display content from another website that requires the user being logged in?

Say I have a website that requires a login, hosted somewhere remote. I would like to make a portal that shows this remote site but should always be logged in with the same user name and password on ...
4
votes
2answers
446 views

Facebook connect vs. OpenID

I just started working on a new project that has a general login feature. One suggestion in a meeting was to look into Facebook Connect or OpenID as an alternative. I'm curious if there's one that has ...
1
vote
1answer
199 views

Facebook - “openID” danger?

I am scared that someone can get into anybodys account on my game, if user does not have Facebook. Stealer makes facebook with same email that user in my game, and then click "Login with facebook" -> ...
1
vote
1answer
3k views

http auth an iframe automatically so users don't have to login?

I have a members only site running WordPress and a stock images gallery running an old php gallery CMS. I want the members to only have to login once but I want to protect the gallery from the general ...
8
votes
2answers
128 views

What do I lose if I use OpenID instead of the custom login system I built

I'm trying to make the decision whether to use OpenID or stay with a well-built custom login system. I think the appeal of OpenID is clear, in that the user doesn't have to create yet another account ...
0
votes
2answers
95 views

Trying to add a private zone to a website

I'm trying to add a "login page" as soon as someone clicks on the Galerie, in order to keep the pictures only between the members of the school. I tried several options, even designed a page named ...
1
vote
3answers
350 views

Website with sign up and sign in system

I'm going to start a website where I need a Signup and Sign in system. And when the user is signed in the user will get access to stuff that only members can see an access. Would HTML be the best way ...
1
vote
1answer
600 views

Directory access control with Apache: do I need to use a specific .htaccess?

I have an Apache webserver, and in the Apache configuration, I have Alias /backups "/backups" <Directory "/backups"> AllowOverride None Options Indexes Order allow,deny Allow ...
3
votes
2answers
119 views

What are recommended password reset mecanisms?

All, I'm developing a small, non-commercial web app. I'm trying to decide how to help a user who might have lost their password. I need a mechanism that is, in order of priority: 1) User friendly; ...
4
votes
1answer
673 views

Does htpasswd authentication prevent Google from crawling my site?

I have a site that I want to continue testing before I make public, so I don't want Google to start crawling the site as there will be a large amount of garbage content during testing. I currently ...
8
votes
8answers
416 views

What are the reasons to have a two step login? (Username on one page, password on the second.)

So I've recently been encountering more two step login processes, where I'm required to enter my username on one page and my password on a second. I really don't like this pattern, as it requires an ...
2
votes
1answer
57 views

Should OpenID clients accept adding WWW to the domain?

For a long time I've used OpenID delegation on my site: http://example.org/ delegated to: http://example.openid-provider.com/, so I logged into OpenID-consuming sites using the former as ID. ...
3
votes
2answers
192 views

Authentication system brainstorm [closed]

We got multiple small websites (microsites) and one main high traffic one with big users base. Right now the requirement is to build authentication system which should allow users to loign with the ...
7
votes
3answers
209 views

How should a site respond to automated login attempts with phony usernames?

For the last couple weeks I've been seeing a consistent stream of 15-30 invalid login attempts per hours on my site. Many of them are non-sensical usernames that nobody would ever register for real, ...
5
votes
2answers
187 views

Managing accounts on a private website for a real-life community

I'm looking at setting-up a walled-in (i.e. mostly private, with a small public-facing login page) website for a real-life community of people, and I was wondering if anyone has any experience with ...