Authentication is commonly understood as the act of asserting a user's or entity's identity, although in the wider sense it can refer to asserting the truthfulness of any kind of claim. Authentication, like encryption, is a major component in implementing computer security.

learn more… | top users | synonyms (1)

3
votes
1answer
203 views

getting the user back where they came from with mod_form_auth

Using the mod_form_auth module in Apache HTTPD 2.4.3, I am looking for a way to have the user redirected to their original desired target after completing a login. That is, if I have a <Location ...
3
votes
2answers
125 views

Use Outlook password for website verification

I am currently building an internal employee dashboard for our global company (it is hosted on an external website for logistical reasons) I'd like (need) to password protect the page as we will be ...
3
votes
1answer
701 views

Using Public Key Authentication for websites

I know GitHub uses it for code development (not user authentication for the website though). I saw this article on the idea: http://neverfear.org/blog/view/3/...
3
votes
4answers
748 views

Personalized content (authenticated with a cookie) and impact on SEO

We have a big website with a lot of content, that is doing pretty well in terms of SEO. Google likes the site, visitors like it as well. Our problem is that there is a lot of content that would only ...
3
votes
2answers
3k views

How to make browsers offer to remember passwords

What properties login form needs to have to trigger "remember password" for all (or most) browsers? Background: For years I have been using Opera, and the rule has been that almost anything that ...
3
votes
2answers
931 views

You don't have permission to access /index.php on this server

I made a 'login with OpenID' page and I had a error when OpenID provider return to my page: You don't have permission to access /index.php on this server. Additionally, a 404 Not Found ...
3
votes
2answers
196 views

Authentication system brainstorm [closed]

We got multiple small websites (microsites) and one main high traffic one with big users base. Right now the requirement is to build authentication system which should allow users to loign with the ...
3
votes
2answers
4k views

Can I create test accounts in Google for testing Oauth in my application?

My app contains Sign in from Google function that uses Oauth. To test it I'd want to create test accounts at Google. But Google doesn't allow me to create ordinary accounts without entering captcha so ...
2
votes
1answer
151 views

how to handle login between different domains?

I've a website with 2 domains (.nl and .com) and a translated version of the content is displayed depending on the domain. My issue is that when a client login under a .nl domain, and he moves to the ...
2
votes
2answers
155 views

HTTP code 403, access denied & Options -Indexes

at "webmasters.stackexchange.com" I already found a similar topic: Stop directory listing using .htaccess and redirect to good error page Options -Indexes ErrorDocument 403 /path/to/403.html ...
2
votes
1answer
3k views

How to log username in Apache logs?

I need some help regarding how to log the user-name into apache logs. I'm building a use-case for Security Information Event Management. Is the method the same in case of IIS or just applicable to ...
2
votes
1answer
70 views

Password protected website

I need to add a user authentication page before the actual homepage of the website. In Joomla! I just set the website offline and the offline page loads in place of the homepage but then it's ...
2
votes
2answers
220 views

FB login and privacy policy

I'm bulding up a site, where the ONLY ONE method for log in, is the fb login button. Now i'm wondering if i need to make users check and read the my own site's privacy and policy before and accept ...
2
votes
2answers
847 views

My cPanel login is being redirected. How can I resolve this?

I'm trying to get to cPanel to manage my website. When I type www.mydomain.com:2082 into the browser window, the request seems to be redirected. I made a screen-cast so I could slow down the changes ...
2
votes
2answers
2k views

Login script with member area/user

Is there a free script which I can use to: Share some PDF with my partners. But i need the user to reach only those PDFs which they have privileges for. So I need: login script with registration (i ...
2
votes
1answer
118 views

Looking for usability studies of user authentication methods and interfaces, do you know of any?

Been having issues with stackexchange creating weird usernames for me and grouping them with my account, it appears to be a known issue, and emailed the stackexchange team... which leads me to my ...
2
votes
1answer
70 views

Wordpress keeps redirecting to non-existent wordpress directory

I've uploaded WordPress to my GoDaddy and when I go to example.com/wp-login.php to login page looks bare. I would expect to see the styled default WordPress login page and secondly when pressing ...
2
votes
2answers
687 views

Webmin: Cannot login through nginx reverse proxy

I've created a reverse proxy for webmin through nginx to run webmin at [site domain]/webmin instead of port 10000 ([site domain]:10000). When I go to [site domain]/webmin, the login page shows up as ...
2
votes
1answer
50 views

CAN-SPAM and transactional emails without legitimate physical address (for foreign webmaster)

Situation I am a very small time web developer working on a personal web project. This website will be sending only two types of emails, a email validation email and a forgot password email. I do ...
2
votes
2answers
219 views

How do I automatically log my users into other websites after they have given me their passwords?

I have to program an application where the users can connect to other websites. For example, the user clicks on the "Amazon" button and the application opens the Amazon website. It then needs to pre-...
2
votes
2answers
802 views

Why does Google report a soft 404 when I redirect to the signup page?

In the last month, I've got an increased number of "soft 404" errors reported by Google webmaster tools which actually work well for users. Configuration (maybe useless): I have a website built ...
2
votes
3answers
470 views

Different authentication for HTTP POST and GET requests in Apache

I want to authenticate for POST requests for http://path/to/logical/abc.xml (but not GET requests to that URL). How do I put constraints like this in place? The paths are logical and location ...
2
votes
1answer
588 views

How do I password protect a directory with a customizable login page?

At the moment, I have a directory that's password protected by .htaccess and .htpasswd. The problem with this is that when a visitor comes to my site, they get an ugly inbuilt Secure Area message ...
2
votes
1answer
1k views

Avoid the login popup when using http-auth

I have an Apache. Under the DOCUMENTROOT is a folder with an .htpasswd file for http-auth. If I open the browser and request the content in the folder I get an Popup to login. Is there a way to avoid ...
2
votes
1answer
57 views

Should OpenID clients accept adding WWW to the domain?

For a long time I've used OpenID delegation on my site: http://example.org/ delegated to: http://example.openid-provider.com/, so I logged into OpenID-consuming sites using the former as ID. ...
2
votes
0answers
45 views

mod_ident not to be trusted? [closed]

I'm looking at Apache's mod_ident: http://httpd.apache.org/docs/2.2/mod/mod_ident.html However, on this page it has the following disclaimer: The information should not be trusted in any way except ...
1
vote
1answer
465 views

Why isn't HTTP Authentication working on this Apache HTTPS site?

I have set up a private MoinMoin wiki, accessed through HTTPS, but I cannot get Basic HTTP Authentication to work on it. I have it working on another site, using a similar vhosts file, so I cannot ...
1
vote
3answers
371 views

Website with sign up and sign in system

I'm going to start a website where I need a Signup and Sign in system. And when the user is signed in the user will get access to stuff that only members can see an access. Would HTML be the best way ...
1
vote
2answers
93 views

Is it ill-advised to create custom text for a login link (e.g. “Become a ninja” as opposed to just “log in”)

I'm trying to figure out whether it's best to: stick with the tried and true link text for login ("log in" -> linking to the login page) Make the login button custom to the site and somewhat of a ...
1
vote
1answer
108 views

Open source login solution

Authentication is such a general problem, which most websites have to implement. There are a few commercial solutions, but all lack sufficient functionality to customize the registration process. ...
1
vote
2answers
49 views

Search Engine, Public Facing Game

I run an online game. The only pages one can access without an account are the homepage, register, lost password, contact me. If I were to make more of my pages public, and add links to them from the ...
1
vote
3answers
348 views

htaccess , htpasswd and error 401

I have a problem with htpasswd. I get an error in error.log apache2 user admin: authentication failure for "/": Password Mismatch Content of my htaccess file: # Set Access Restrictions ...
1
vote
2answers
93 views

How to hide the admin login form?

In my website there are no accounts except for those of moderators and administrators. That's why I don't want to show the login form to everyone but to these people. I thought of using a weird URL ...
1
vote
1answer
201 views

Facebook - “openID” danger?

I am scared that someone can get into anybodys account on my game, if user does not have Facebook. Stealer makes facebook with same email that user in my game, and then click "Login with facebook" -> ...
1
vote
1answer
470 views

One-user databaseless CMS authentication

Background: My client needs a one-user bare-bones content management system, which should be capable to Edit text-content in plain-text or in WYSIWYG-style Possibly create new subpages Update image ...
1
vote
1answer
85 views

URL query is adding an unecessary comma

I am trying to automatically place login data through a URL query for my university services. (https://login.gatech.edu/cas/login) two problems arise when I try to pass a URL query (Ex: https://login....
1
vote
2answers
932 views

Still prompted for a password after adding SSH public key to a server

I'm attempting to setup a git repository on my Dreamhost web server by following the "Setup: For the Impatient" instructions here. I'm having difficulty setting up public key access to the server. ...
1
vote
1answer
28 views

meta robots for logged in vs. not logged in users

On a site I'm working on, The homepage has generic content for visitors who aren't logged in. When a user is logged in, the content shown is personalized to them and could even be considered private. ...
1
vote
1answer
568 views

How to solve “Login Only” rejection when applying to Google AdSense

Recently, a site of mine was rejected due to "Login Only": Login Only: During our review of your website, we found that the majority of pages on your site are behind a login, or there is ...
1
vote
1answer
479 views

Good idea to use Google Sites for static content and custom PHP for dynamic

We have a site based upon Google Sites. Now we would like to create a login area (HTTPS) with a mixture of dynamic and static content. Is it a good idea to utilize Google Sites and use iFrames for the ...
1
vote
1answer
253 views

Digest access authentication “realm”

I have attempted to find documentation on what this actually is with no luck. http://en.wikipedia.org/wiki/Digest_access_authentication The hashed value is username:realm:password.
1
vote
1answer
330 views

Force SSL on IIS site with NT authentication

We recently implemented SSL on our reseller portal and have been receiving complaints about needing to log in twice. This is of course because they bookmarked the site before we had SSL so their ...
1
vote
2answers
58 views

E-commerce with secure cart and payment

I want to create an e-commerce project online.. so I have this issue : if the user is not logged in , then the selected products will be automatically added to a default cart .. under the name of ...
1
vote
1answer
483 views

Creating a form that posts to Twitter - how to get started?

I'm trying to figure out how to create an HTML form that would allow a user to log in and tweet their message directly to Twitter. What resources should I look at to get started?
1
vote
1answer
16 views

Is it reliable to rely on external authentication providers in the long run?

We use Google+, Facebook and Twitter oauth2 APIs for our membership infrastructure, because our content policy strictly prohibits standalone ownership of content by user (means that there is no ...
1
vote
1answer
19 views

How do you deal with users who no longer have access to their login email?

I run a reasonably sized web application and from time to time I get users who for various reasons lose access to the email address they originally registered with. The user will typically make a ...
1
vote
1answer
60 views

How to require approval to signup new Bluespice MediaWiki accounts?

On a MediaWiki site running BlueSpice, how can I require that all new account sign ups be approved before the account is created? I tried adding the ConfirmAccount extension described here, but now ...
1
vote
1answer
437 views

Can't login to Archiva via LDAP with “Could not find object” error

We upgraded to Apache Archiva 2.1.1 and successfully configured LDAP, so that "Ldap connection verified." appears in Redback Runtime Configuration. My user credentials are also recognized, as there is ...
1
vote
1answer
382 views

How to set up Nginx directory password authentication?

How to set up? Nginx directory password authentication /usr/local/nginx/conf/vhost/xxx.xxx.com.conf site configuration files. I want to in this website xxx.xxx.com/123 folders in password access ...
1
vote
1answer
1k views

Limit Joomla user login sessions

I am testing a Joomla installation for making a commercial website where you pay for accessing content. I just found out that it is possible to login from two different computers at the same time into ...