Authentication is commonly understood as the act of asserting a user's or entity's identity, although in the wider sense it can refer to asserting the truthfulness of any kind of claim. Authentication, like encryption, is a major component in implementing computer security.

learn more… | top users | synonyms (1)

3
votes
2answers
893 views

You don't have permission to access /index.php on this server

I made a 'login with OpenID' page and I had a error when OpenID provider return to my page: You don't have permission to access /index.php on this server. Additionally, a 404 Not Found ...
3
votes
2answers
196 views

Authentication system brainstorm [closed]

We got multiple small websites (microsites) and one main high traffic one with big users base. Right now the requirement is to build authentication system which should allow users to loign with the ...
3
votes
2answers
3k views

Can I create test accounts in Google for testing Oauth in my application?

My app contains Sign in from Google function that uses Oauth. To test it I'd want to create test accounts at Google. But Google doesn't allow me to create ordinary accounts without entering captcha so ...
2
votes
2answers
186 views

Will using HTTPS hurt my site's SEO or other statistics?

I've set up a WordPress blog. Since I have to log into it from many different locations/machines, I've also got an SSL certificate, and set up Apache to redirect HTTP to HTTPS. It all works, but I'm ...
2
votes
1answer
150 views

how to handle login between different domains?

I've a website with 2 domains (.nl and .com) and a translated version of the content is displayed depending on the domain. My issue is that when a client login under a .nl domain, and he moves to the ...
2
votes
2answers
139 views

HTTP code 403, access denied & Options -Indexes

at "webmasters.stackexchange.com" I already found a similar topic: Stop directory listing using .htaccess and redirect to good error page Options -Indexes ErrorDocument 403 /path/to/403.html ...
2
votes
1answer
3k views

How to log username in Apache logs?

I need some help regarding how to log the user-name into apache logs. I'm building a use-case for Security Information Event Management. Is the method the same in case of IIS or just applicable to ...
2
votes
1answer
66 views

Password protected website

I need to add a user authentication page before the actual homepage of the website. In Joomla! I just set the website offline and the offline page loads in place of the homepage but then it's ...
2
votes
2answers
209 views

FB login and privacy policy

I'm bulding up a site, where the ONLY ONE method for log in, is the fb login button. Now i'm wondering if i need to make users check and read the my own site's privacy and policy before and accept ...
2
votes
2answers
795 views

My cPanel login is being redirected. How can I resolve this?

I'm trying to get to cPanel to manage my website. When I type www.mydomain.com:2082 into the browser window, the request seems to be redirected. I made a screen-cast so I could slow down the changes ...
2
votes
2answers
2k views

Login script with member area/user

Is there a free script which I can use to: Share some PDF with my partners. But i need the user to reach only those PDFs which they have privileges for. So I need: login script with registration (i ...
2
votes
1answer
118 views

Looking for usability studies of user authentication methods and interfaces, do you know of any?

Been having issues with stackexchange creating weird usernames for me and grouping them with my account, it appears to be a known issue, and emailed the stackexchange team... which leads me to my ...
2
votes
1answer
48 views

Wordpress keeps redirecting to non-existent wordpress directory

I've uploaded WordPress to my GoDaddy and when I go to example.com/wp-login.php to login page looks bare. I would expect to see the styled default WordPress login page and secondly when pressing ...
2
votes
2answers
327 views

Webmin: Cannot login through nginx reverse proxy

I've created a reverse proxy for webmin through nginx to run webmin at [site domain]/webmin instead of port 10000 ([site domain]:10000). When I go to [site domain]/webmin, the login page shows up as ...
2
votes
1answer
42 views

CAN-SPAM and transactional emails without legitimate physical address (for foreign webmaster)

Situation I am a very small time web developer working on a personal web project. This website will be sending only two types of emails, a email validation email and a forgot password email. I do ...
2
votes
2answers
150 views

How do I automatically log my users into other websites after they have given me their passwords?

I have to program an application where the users can connect to other websites. For example, the user clicks on the "Amazon" button and the application opens the Amazon website. It then needs to ...
2
votes
3answers
357 views

Different authentication for HTTP POST and GET requests in Apache

I want to authenticate for POST requests for http://path/to/logical/abc.xml (but not GET requests to that URL). How do I put constraints like this in place? The paths are logical and location ...
2
votes
1answer
533 views

How do I password protect a directory with a customizable login page?

At the moment, I have a directory that's password protected by .htaccess and .htpasswd. The problem with this is that when a visitor comes to my site, they get an ugly inbuilt Secure Area message ...
2
votes
1answer
1k views

Avoid the login popup when using http-auth

I have an Apache. Under the DOCUMENTROOT is a folder with an .htpasswd file for http-auth. If I open the browser and request the content in the folder I get an Popup to login. Is there a way to avoid ...
2
votes
1answer
57 views

Should OpenID clients accept adding WWW to the domain?

For a long time I've used OpenID delegation on my site: http://example.org/ delegated to: http://example.openid-provider.com/, so I logged into OpenID-consuming sites using the former as ID. ...
2
votes
0answers
19 views

Can't login/edit on 3 wordpress sites from a particular Windows PC

I hope I am allowed to post this here! I can't post on wordpress.org because "it's not about Wordpress"; I can't post on superuser because it IS about wordpress; I can't post on ...
2
votes
2answers
132 views

Limit access to rewritten uri based on IP address

I'd like to limit access to a Drupal 7 registration page (/user/register) from certain IP addresses. I've tried to set the apache directive, but it's still letting me access it from an IP that isn't ...
2
votes
0answers
34 views

mod_ident not to be trusted? [closed]

I'm looking at Apache's mod_ident: http://httpd.apache.org/docs/2.2/mod/mod_ident.html However, on this page it has the following disclaimer: The information should not be trusted in any way except ...
1
vote
1answer
457 views

Why isn't HTTP Authentication working on this Apache HTTPS site?

I have set up a private MoinMoin wiki, accessed through HTTPS, but I cannot get Basic HTTP Authentication to work on it. I have it working on another site, using a similar vhosts file, so I cannot ...
1
vote
3answers
367 views

Website with sign up and sign in system

I'm going to start a website where I need a Signup and Sign in system. And when the user is signed in the user will get access to stuff that only members can see an access. Would HTML be the best way ...
1
vote
2answers
93 views

Is it ill-advised to create custom text for a login link (e.g. “Become a ninja” as opposed to just “log in”)

I'm trying to figure out whether it's best to: stick with the tried and true link text for login ("log in" -> linking to the login page) Make the login button custom to the site and somewhat of a ...
1
vote
1answer
103 views

Open source login solution

Authentication is such a general problem, which most websites have to implement. There are a few commercial solutions, but all lack sufficient functionality to customize the registration process. ...
1
vote
2answers
46 views

Search Engine, Public Facing Game

I run an online game. The only pages one can access without an account are the homepage, register, lost password, contact me. If I were to make more of my pages public, and add links to them from the ...
1
vote
2answers
92 views

How to hide the admin login form?

In my website there are no accounts except for those of moderators and administrators. That's why I don't want to show the login form to everyone but to these people. I thought of using a weird URL ...
1
vote
1answer
201 views

Facebook - “openID” danger?

I am scared that someone can get into anybodys account on my game, if user does not have Facebook. Stealer makes facebook with same email that user in my game, and then click "Login with facebook" -> ...
1
vote
1answer
459 views

One-user databaseless CMS authentication

Background: My client needs a one-user bare-bones content management system, which should be capable to Edit text-content in plain-text or in WYSIWYG-style Possibly create new subpages Update image ...
1
vote
3answers
164 views

htaccess , htpasswd and error 401

I have a problem with htpasswd. I get an error in error.log apache2 user admin: authentication failure for "/": Password Mismatch Content of my htaccess file: # Set Access Restrictions ...
1
vote
1answer
77 views

URL query is adding an unecessary comma

I am trying to automatically place login data through a URL query for my university services. (https://login.gatech.edu/cas/login) two problems arise when I try to pass a URL query (Ex: ...
1
vote
2answers
753 views

Still prompted for a password after adding SSH public key to a server

I'm attempting to setup a git repository on my Dreamhost web server by following the "Setup: For the Impatient" instructions here. I'm having difficulty setting up public key access to the server. ...
1
vote
1answer
28 views

meta robots for logged in vs. not logged in users

On a site I'm working on, The homepage has generic content for visitors who aren't logged in. When a user is logged in, the content shown is personalized to them and could even be considered private. ...
1
vote
1answer
466 views

How to solve “Login Only” rejection when applying to Google AdSense

Recently, a site of mine was rejected due to "Login Only": Login Only: During our review of your website, we found that the majority of pages on your site are behind a login, or there is ...
1
vote
1answer
469 views

Good idea to use Google Sites for static content and custom PHP for dynamic

We have a site based upon Google Sites. Now we would like to create a login area (HTTPS) with a mixture of dynamic and static content. Is it a good idea to utilize Google Sites and use iFrames for the ...
1
vote
1answer
251 views

Digest access authentication “realm”

I have attempted to find documentation on what this actually is with no luck. http://en.wikipedia.org/wiki/Digest_access_authentication The hashed value is username:realm:password.
1
vote
1answer
297 views

Force SSL on IIS site with NT authentication

We recently implemented SSL on our reseller portal and have been receiving complaints about needing to log in twice. This is of course because they bookmarked the site before we had SSL so their ...
1
vote
2answers
58 views

E-commerce with secure cart and payment

I want to create an e-commerce project online.. so I have this issue : if the user is not logged in , then the selected products will be automatically added to a default cart .. under the name of ...
1
vote
1answer
443 views

Creating a form that posts to Twitter - how to get started?

I'm trying to figure out how to create an HTML form that would allow a user to log in and tweet their message directly to Twitter. What resources should I look at to get started?
1
vote
1answer
19 views

How do you deal with users who no longer have access to their login email?

I run a reasonably sized web application and from time to time I get users who for various reasons lose access to the email address they originally registered with. The user will typically make a ...
1
vote
1answer
50 views

How to require approval to signup new Bluespice MediaWiki accounts?

On a MediaWiki site running BlueSpice, how can I require that all new account sign ups be approved before the account is created? I tried adding the ConfirmAccount extension described here, but now ...
1
vote
1answer
298 views

Can't login to Archiva via LDAP with “Could not find object” error

We upgraded to Apache Archiva 2.1.1 and successfully configured LDAP, so that "Ldap connection verified." appears in Redback Runtime Configuration. My user credentials are also recognized, as there is ...
1
vote
1answer
320 views

How to set up Nginx directory password authentication?

How to set up? Nginx directory password authentication /usr/local/nginx/conf/vhost/xxx.xxx.com.conf site configuration files. I want to in this website xxx.xxx.com/123 folders in password access ...
1
vote
2answers
657 views

Why does Google report a soft 404 when I redirect to the signup page?

In the last month, I've got an increased number of "soft 404" errors reported by Google webmaster tools which actually work well for users. Configuration (maybe useless): I have a website built ...
1
vote
1answer
1k views

Limit Joomla user login sessions

I am testing a Joomla installation for making a commercial website where you pay for accessing content. I just found out that it is possible to login from two different computers at the same time into ...
1
vote
1answer
94 views

How to prove someone is a Realtor on my website

My boss would like me to have some sort of a "login" for Realtors. The point is to have a certain portion of the site only available to Realtors. Initially he thought we could check their name and ...
1
vote
3answers
3k views

How to avoid basic authentication warning when using protected directory?

I used cpanel on my hosted site to set up a password protected directory to allow downloads of specific files. I send people a link to the file by email and include their username and password so ...
1
vote
2answers
411 views

Run server-side script as authenticated user in apache--is it possible?

I'm developing a web app that takes a bunch of parameters (dropdown boxes, etc) from an authenticated user, creates a file, then delivers that file via stdin to a program on my web server. Due to ...