Authentication is commonly understood as the act of asserting a user's or entity's identity, although in the wider sense it can refer to asserting the truthfulness of any kind of claim. Authentication, like encryption, is a major component in implementing computer security.

learn more… | top users | synonyms (1)

5
votes
2answers
187 views

Managing accounts on a private website for a real-life community

I'm looking at setting-up a walled-in (i.e. mostly private, with a small public-facing login page) website for a real-life community of people, and I was wondering if anyone has any experience with ...
3
votes
2answers
2k views

How to implement OpenID authentication for my site?

I want to offer OpenID authentication for my users (please note that I do not necessary want to become an OpenID provider; I just need to authenticate my user for my website). How to implement OpenID ...
1
vote
1answer
431 views

One-user databaseless CMS authentication

Background: My client needs a one-user bare-bones content management system, which should be capable to Edit text-content in plain-text or in WYSIWYG-style Possibly create new subpages Update image ...
2
votes
1answer
149 views

how to handle login between different domains?

I've a website with 2 domains (.nl and .com) and a translated version of the content is displayed depending on the domain. My issue is that when a client login under a .nl domain, and he moves to the ...
1
vote
2answers
93 views

Is it ill-advised to create custom text for a login link (e.g. “Become a ninja” as opposed to just “log in”)

I'm trying to figure out whether it's best to: stick with the tried and true link text for login ("log in" -> linking to the login page) Make the login button custom to the site and somewhat of a ...
4
votes
5answers
957 views

Do user names used for login need to be unique?

Assuming a non-commercial site where users login with a user name and pw, do I need to enforce unicity of usernames? Note: The db will use a separate unique index to identify the users. The site is ...
1
vote
3answers
1k views

Drupal + LDAP + Automatic

I've got Drupal 6 setup within a XAMPP test area. I have LDAP authentication, groups and data working against Active Directory. What I want... is since I'm on an intranet where users are logged in ...
4
votes
2answers
190 views

Why do user registration process not end with the user logged in?

Often I see websites when at the end of the registration process the user is not logged in. What is the rational for that? It seems redundant to ask a user to reenter their credentials just after ...
0
votes
1answer
49 views

Need stats on the effectiveness of user verification systems on fraud, abuse and/or compliance?

Here's an example, although not a good one from Craigslist.
3
votes
3answers
1k views

How do you get Drupal to go to a page other than the User Profile on login?

ISSUE: I've tried a few things to get Drupal to STOP going to the User Prolfile page on login. I even installed the LoginToboggan module, which has nice features, just doesn't stop Drupal from sending ...
2
votes
1answer
117 views

Looking for usability studies of user authentication methods and interfaces, do you know of any?

Been having issues with stackexchange creating weird usernames for me and grouping them with my account, it appears to be a known issue, and emailed the stackexchange team... which leads me to my ...
0
votes
2answers
1k views

Godaddy - folder with password protection

Godaddy windows shared hosting on IIS6, but will probably migrate to IIS7 soon. Is there easy way to setup folder with password protection, so when I try to access secure folder, login dialog pops ...
4
votes
3answers
496 views

How useful is Facebook Connect Login?

I'm starting to see some Websites offer the option to login via Facebook. I'm curious how useful it is a feature. For example, when someone logs in, does her friend knows on Facebook that she logged ...
6
votes
3answers
395 views

Using two salts for user authentication?

When storing user credentials in a database, we all know that hashing the password is the bare minimum you should do, but salting it before hashing is better. The salt should be randomly generated, ...
10
votes
4answers
618 views

Does SSL really matter for most websites?

I've been pretty paranoid about learning to "do security right" for this site I'm building (first non-trivial site I've made), and I've noticed something that bothers me: SSL. I've read plenty of ...
5
votes
2answers
431 views

HTTP for one part of the site, HTTPS for other

We have a site which is HTTP, but it has an admin part. How can we secure the admin part with HTTPS? For example, WordPress (which I know) is located at http://foo.com, but we want to have ...
6
votes
5answers
163 views

Allowing users to post without logging in

On Stackoverflow/Stackexchange, users are allowed to add posts without requiring login, just wondering what should be considered before allowing this kind behavior on a site? Couple of things spring ...
7
votes
1answer
785 views

Permissions for serving up temporary files

I have a system (web based application) which pulls file attachments from a 3rd party system via SOAP. These are in turn on our system created as files in a directory. When a user of the system ...
5
votes
2answers
2k views

How can I secure an installation of MediaWiki?

I want to run an installation of MediaWiki as a Internet-accessible personal wiki, running on wiki.mysite.com. However, I want to ensure that I am the only one who can read and write to this wiki. In ...
8
votes
2answers
462 views

Should I support facebook login or openid login?

What are the pros and cons of each? Does it make any sense supporting both? Which is easier for users/to implement?
4
votes
2answers
239 views

How do I edit/modify a file on a webserver using php file in the same location? [closed]

I have an XML file on my server. In the same directory I have a PHP file which modifies the content of the XML and saves it. In this, the save part doesn't work. In my knowledge the code is alright ...
6
votes
3answers
522 views

When should you consider being an OpenID provider?

I know that OpenID would benefit more from a larger number of sites adopting it, than it would from more people being providers. But even still, I am curious as to when it would be good for a site to ...
4
votes
2answers
851 views

CDN for authenticated sites

We have a site that requires users to sign into. Typical stuff. Today, all the content (dynamic and static) is behind the login process, and you cannot access any of the pages or files via a URL ...
3
votes
2answers
2k views

OpenID, Gmail, Facebook, Yahoo login for Wordpress

Is there somethink like this for free for wordpress?
7
votes
2answers
4k views

How to use cookies in a secure manner to authenticate users?

In most cases I like using cookies to remember returning users to my websites. In my early/foolish days, I would store a UserID (auto-increment integer) in a cookie and if the user returned I would ...
5
votes
1answer
920 views

How do I setup authentication on a specific folder using .htaccess?

I have a folder that I want to host files privately on my webserver. How do I go about making it password protected using .htaccess? Note: Nothing monolithic, I want something that is simple/easy so ...