Authentication is commonly understood as the act of asserting a user's or entity's identity, although in the wider sense it can refer to asserting the truthfulness of any kind of claim. Authentication, like encryption, is a major component in implementing computer security.

learn more… | top users | synonyms (1)

2
votes
1answer
854 views

How to log username in Apache logs?

I need some help regarding how to log the user-name into apache logs. I'm building a use-case for Security Information Event Management. Is the method the same in case of IIS or just applicable to ...
2
votes
1answer
64 views

Password protected website

I need to add a user authentication page before the actual homepage of the website. In Joomla! I just set the website offline and the offline page loads in place of the homepage but then it's ...
2
votes
2answers
159 views

FB login and privacy policy

I'm bulding up a site, where the ONLY ONE method for log in, is the fb login button. Now i'm wondering if i need to make users check and read the my own site's privacy and policy before and accept ...
2
votes
2answers
518 views

My cPanel login is being redirected. How can I resolve this?

I'm trying to get to cPanel to manage my website. When I type www.mydomain.com:2082 into the browser window, the request seems to be redirected. I made a screen-cast so I could slow down the changes ...
2
votes
2answers
1k views

Login script with member area/user

Is there a free script which I can use to: Share some PDF with my partners. But i need the user to reach only those PDFs which they have privileges for. So I need: login script with registration (i ...
2
votes
1answer
117 views

Looking for usability studies of user authentication methods and interfaces, do you know of any?

Been having issues with stackexchange creating weird usernames for me and grouping them with my account, it appears to be a known issue, and emailed the stackexchange team... which leads me to my ...
2
votes
2answers
532 views

How to make browsers offer to remember passwords

What properties login form needs to have to trigger "remember password" for all (or most) browsers? Background: For years I have been using Opera, and the rule has been that almost anything that ...
2
votes
3answers
120 views

Different authentication for HTTP POST and GET requests in Apache

I want to authenticate for POST requests for http://path/to/logical/abc.xml (but not GET requests to that URL). How do I put constraints like this in place? The paths are logical and location ...
2
votes
1answer
258 views

How do I password protect a directory with a customizable login page?

At the moment, I have a directory that's password protected by .htaccess and .htpasswd. The problem with this is that when a visitor comes to my site, they get an ugly inbuilt Secure Area message ...
2
votes
1answer
786 views

Avoid the login popup when using http-auth

I have an Apache. Under the DOCUMENTROOT is a folder with an .htpasswd file for http-auth. If I open the browser and request the content in the folder I get an Popup to login. Is there a way to avoid ...
2
votes
1answer
57 views

Should OpenID clients accept adding WWW to the domain?

For a long time I've used OpenID delegation on my site: http://example.org/ delegated to: http://example.openid-provider.com/, so I logged into OpenID-consuming sites using the former as ID. ...
2
votes
2answers
464 views

Can I create test accounts in Google for testing Oauth in my application?

My app contains Sign in from Google function that uses Oauth. To test it I'd want to create test accounts at Google. But Google doesn't allow me to create ordinary accounts without entering captcha so ...
1
vote
1answer
407 views

Why isn't HTTP Authentication working on this Apache HTTPS site?

I have set up a private MoinMoin wiki, accessed through HTTPS, but I cannot get Basic HTTP Authentication to work on it. I have it working on another site, using a similar vhosts file, so I cannot ...
1
vote
3answers
322 views

Website with sign up and sign in system

I'm going to start a website where I need a Signup and Sign in system. And when the user is signed in the user will get access to stuff that only members can see an access. Would HTML be the best way ...
1
vote
2answers
91 views

Is it ill-advised to create custom text for a login link (e.g. “Become a ninja” as opposed to just “log in”)

I'm trying to figure out whether it's best to: stick with the tried and true link text for login ("log in" -> linking to the login page) Make the login button custom to the site and somewhat of a ...
1
vote
1answer
74 views

Open source login solution

Authentication is such a general problem, which most websites have to implement. There are a few commercial solutions, but all lack sufficient functionality to customize the registration process. ...
1
vote
2answers
84 views

How to hide the admin login form?

In my website there are no accounts except for those of moderators and administrators. That's why I don't want to show the login form to everyone but to these people. I thought of using a weird URL ...
1
vote
2answers
42 views

Search Engine, Public Facing Game

I run an online game. The only pages one can access without an account are the homepage, register, lost password, contact me. If I were to make more of my pages public, and add links to them from the ...
1
vote
1answer
196 views

Facebook - “openID” danger?

I am scared that someone can get into anybodys account on my game, if user does not have Facebook. Stealer makes facebook with same email that user in my game, and then click "Login with facebook" -> ...
1
vote
1answer
397 views

One-user databaseless CMS authentication

Background: My client needs a one-user bare-bones content management system, which should be capable to Edit text-content in plain-text or in WYSIWYG-style Possibly create new subpages Update image ...
1
vote
1answer
44 views

URL query is adding an unecessary comma

I am trying to automatically place login data through a URL query for my university services. (https://login.gatech.edu/cas/login) two problems arise when I try to pass a URL query (Ex: ...
1
vote
2answers
167 views

Still prompted for a password after adding SSH public key to a server

I'm attempting to setup a git repository on my Dreamhost web server by following the "Setup: For the Impatient" instructions here. I'm having difficulty setting up public key access to the server. ...
1
vote
1answer
394 views

Good idea to use Google Sites for static content and custom PHP for dynamic

We have a site based upon Google Sites. Now we would like to create a login area (HTTPS) with a mixture of dynamic and static content. Is it a good idea to utilize Google Sites and use iFrames for the ...
1
vote
1answer
232 views

Digest access authentication “realm”

I have attempted to find documentation on what this actually is with no luck. http://en.wikipedia.org/wiki/Digest_access_authentication The hashed value is username:realm:password.
1
vote
1answer
229 views

Force SSL on IIS site with NT authentication

We recently implemented SSL on our reseller portal and have been receiving complaints about needing to log in twice. This is of course because they bookmarked the site before we had SSL so their ...
1
vote
2answers
56 views

E-commerce with secure cart and payment

I want to create an e-commerce project online.. so I have this issue : if the user is not logged in , then the selected products will be automatically added to a default cart .. under the name of ...
1
vote
2answers
168 views

Why does Google report a soft 404 when I redirect to the signup page?

In the last month, I've got an increased number of "soft 404" errors reported by Google webmaster tools which actually work well for users. Configuration (maybe useless): I have a website built ...
1
vote
1answer
593 views

Limit Joomla user login sessions

I am testing a Joomla installation for making a commercial website where you pay for accessing content. I just found out that it is possible to login from two different computers at the same time into ...
1
vote
1answer
82 views

How to prove someone is a Realtor on my website

My boss would like me to have some sort of a "login" for Realtors. The point is to have a certain portion of the site only available to Realtors. Initially he thought we could check their name and ...
1
vote
3answers
2k views

How to avoid basic authentication warning when using protected directory?

I used cpanel on my hosted site to set up a password protected directory to allow downloads of specific files. I send people a link to the file by email and include their username and password so ...
1
vote
2answers
330 views

Run server-side script as authenticated user in apache--is it possible?

I'm developing a web app that takes a bunch of parameters (dropdown boxes, etc) from an authenticated user, creates a file, then delivers that file via stdin to a program on my web server. Due to ...
1
vote
1answer
2k views

http auth an iframe automatically so users don't have to login?

I have a members only site running WordPress and a stock images gallery running an old php gallery CMS. I want the members to only have to login once but I want to protect the gallery from the general ...
1
vote
1answer
580 views

Directory access control with Apache: do I need to use a specific .htaccess?

I have an Apache webserver, and in the Apache configuration, I have Alias /backups "/backups" <Directory "/backups"> AllowOverride None Options Indexes Order allow,deny Allow ...
1
vote
1answer
103 views

Asking for user's 3rd party username/password like Facebook's Find Friends feature

Preface Facebook and other sites have features where they ask users for their credentials for 3rd party web sites (see image below). Presumably, facebook then uses the credentials to login as the ...
1
vote
1answer
778 views

SSPI Apache2.2 Windows Authentication

I am trying to set up seamless authentication on windows for my intranet site, using SSPI on Apache 2.2 and windows 2008 server. I have installed mod_auth_sspi.so in apache/bin. I have also added the ...
1
vote
0answers
26 views

How do I do this? [closed]

Yesterday I visited the site. http://www.rottentomatoes.com After a few clicks, If Opened My facebook account, me, will immediately become a member. How it works? Document, the article I'm looking ...
1
vote
1answer
833 views

Why can't my user (author) login from back-end to post article in Joomla

I have just created a new user from my administrator back-end. I have assigned this user to groups like author and publisher. But this user can't seem to login to the admin screen to create articles. ...
1
vote
0answers
325 views

Different behaviour with windows authentication on IIS7 websites

I need to run a website with just windows authentication. Given the following situation: The location of the default website is: c:\inetpub\wwwroot The location of my code is: c:\Sites\WebApp My ...
1
vote
0answers
159 views

Can I use both Digest and Basic Authentication on the same directory in Apache?

The reason I would want to do this is to support very old browsers (e.g. IE 6) that does not implement the more secure Digest method. If all new clients advertise the types of authentication they ...
1
vote
0answers
106 views

Fix Login issues tapatalk with joomla 1.5 to phpbb3 bridge [closed]

I have a forum that I want to integrate tapatalk into. Everything works except when I login I get the following error message: http://vps.Midnightfox.be/imagehost/issue_phpbb3bridge.jpg Does anybody ...
1
vote
0answers
56 views

How to verify new accounts against a known persons database? [closed]

I need to (try to) solve the problem of new account creation for a patient portal for a medical records system (electronic health record). That is, a way to activate a patient online and match her ...
1
vote
3answers
1k views

Drupal + LDAP + Automatic

I've got Drupal 6 setup within a XAMPP test area. I have LDAP authentication, groups and data working against Active Directory. What I want... is since I'm on an intranet where users are logged in ...
0
votes
1answer
30 views

Digest Authentication - how is it used? [closed]

I understand a bit about digest authentication from here http://en.wikipedia.org/wiki/Digest_access_authentication, but I am pretty unclear on where, when or how it is used. I can't find anything on ...
0
votes
2answers
85 views

Trying to add a private zone to a website

I'm trying to add a "login page" as soon as someone clicks on the Galerie, in order to keep the pictures only between the members of the school. I tried several options, even designed a page named ...
0
votes
2answers
362 views

htaccess and htpasswd trouble

This is the first time that I have ever tried working with .htpasswd and .htaccess files, so please point out my childish works. I have my apache document root set to /www/ on my debian server. ...
0
votes
1answer
119 views

Capitals in URL subdirectory not changed by htaccess

Within my WordPress website I am redirecting sub directories to internal and external links. Now, when you place a CAPITAL letter in the sub dir it does not work anymore and the website does not show ...
0
votes
1answer
316 views

How to create email request forms and auto-responder?

I'm building a site in css and I'm pretty new to any code or script other than html and css. I'm trying to create a landing page that requires an email from visitors and set up an auto responder to ...
0
votes
1answer
401 views

Apache authentication, security exceptions and safari

I have apache authentication set up on a site, it works fine in firefox and chrome, you type in the username/pass once and then you can happily visit any page on the site. Unfortunately this is not ...
0
votes
1answer
229 views

PHP Library to accept logins from Facebook and Google?

I'm making a site and I want creating accounts / logging in to be very easy, so I want to support logins with Facebook Connect and Google Accounts. I know both offer APIs, but seems like a lot of ...
0
votes
1answer
270 views

Creating a form that posts to Twitter - how to get started?

I'm trying to figure out how to create an HTML form that would allow a user to log in and tweet their message directly to Twitter. What resources should I look at to get started?