Authentication is commonly understood as the act of asserting a user's or entity's identity, although in the wider sense it can refer to asserting the truthfulness of any kind of claim. Authentication, like encryption, is a major component in implementing computer security.

learn more… | top users | synonyms (1)

4
votes
1answer
32 views

More Secure NGINX Authentication than auth_basic

I've been trying to come up with the most secure method of authentication to my reverse proxy in NGINX. I've been using ngx_http_auth_basic_module so far without any issues, but there are apparently ...
0
votes
1answer
42 views

AdSense on pages for logged in users with different content for each user

Is it possible to show AdSense to logged in users when each user sees different content? I'm developing an application where each user sees the content that they have entered. The ads would be ...
0
votes
0answers
21 views

Single Page Web App - Auto-login security conundrum

We have a single page web application written in Angular with a Java back-end. It is public facing and as part of the security model we use https, JWT tokens and take csrf measures. Occasionally, a ...
3
votes
2answers
4k views

Can I create test accounts in Google for testing Oauth in my application?

My app contains Sign in from Google function that uses Oauth. To test it I'd want to create test accounts at Google. But Google doesn't allow me to create ordinary accounts without entering captcha so ...
0
votes
1answer
51 views

Does Cloudflare use different authentication mechanisms across platforms?

I'm using Cloudflare flexible SSL for a website I made, and after investigating certificate properties, I realized different authentication mechanisms are being used. Chrome 45 for Windows desktop ...
1
vote
1answer
16 views

Is it reliable to rely on external authentication providers in the long run?

We use Google+, Facebook and Twitter oauth2 APIs for our membership infrastructure, because our content policy strictly prohibits standalone ownership of content by user (means that there is no ...
3
votes
2answers
158 views

Limit access to rewritten uri based on IP address

I'd like to limit access to a Drupal 7 registration page (/user/register) from certain IP addresses. I've tried to set the apache directive, but it's still letting me access it from an IP that isn't ...
3
votes
1answer
38 views

Access Google Analytics without original login credentials

Our Google Analytics administrator has forgotten the login credentials for our account. How can we recover this?
4
votes
2answers
200 views

Will using HTTPS hurt my site's SEO or other statistics?

I've set up a WordPress blog. Since I have to log into it from many different locations/machines, I've also got an SSL certificate, and set up Apache to redirect HTTP to HTTPS. It all works, but I'm ...
5
votes
0answers
42 views

Can't login/edit on 3 wordpress sites from a particular Windows PC

I hope I am allowed to post this here! I can't post on wordpress.org because "it's not about Wordpress"; I can't post on superuser because it IS about wordpress; I can't post on wordpress....
0
votes
0answers
9 views

Bingbot access urls from paypal transactions (Solved) [duplicate]

I log all transactions in the process of a paypal payment. If a user comes back from paypal, a unique token and PayerID is attached as GET query parameter by paypal. Today I noticed that bingbot ...
6
votes
4answers
1k views

How do you get Drupal to go to a page other than the User Profile on login?

ISSUE: I've tried a few things to get Drupal to STOP going to the User Prolfile page on login. I even installed the LoginToboggan module, which has nice features, just doesn't stop Drupal from sending ...
2
votes
1answer
50 views

CAN-SPAM and transactional emails without legitimate physical address (for foreign webmaster)

Situation I am a very small time web developer working on a personal web project. This website will be sending only two types of emails, a email validation email and a forgot password email. I do ...
2
votes
1answer
70 views

Wordpress keeps redirecting to non-existent wordpress directory

I've uploaded WordPress to my GoDaddy and when I go to example.com/wp-login.php to login page looks bare. I would expect to see the styled default WordPress login page and secondly when pressing ...
2
votes
2answers
693 views

Webmin: Cannot login through nginx reverse proxy

I've created a reverse proxy for webmin through nginx to run webmin at [site domain]/webmin instead of port 10000 ([site domain]:10000). When I go to [site domain]/webmin, the login page shows up as ...
8
votes
1answer
103 views

What do I need to do to make my site compatible with Safari's iCloud Keychain so that it saves passwords?

I've noticed that a vendor's web application triggers Safari's "suggested password" feature at "create password" forms, but does not actually save this password when the form is submitted. That is, ...
1
vote
1answer
19 views

How do you deal with users who no longer have access to their login email?

I run a reasonably sized web application and from time to time I get users who for various reasons lose access to the email address they originally registered with. The user will typically make a ...
0
votes
1answer
95 views

HELP! my login session is returning the users password instead of their username! [closed]

I have my code set up to display the username in the nav bar however its displaying their password? nav.php <li> <a href class="userName"><?php echo $_SESSION['userName'];?></...
5
votes
1answer
2k views

Are there any other login products similar to LoginRadius? [closed]

I'm thinking of using LoginRadius social site login/registration solution to integrate with traditional login/registration system. Has anyone ever used it and have any opinion about its performance ...
3
votes
1answer
95 views

How to secure database access

I am developing a personal web-site with a lot of relatively sensitive (genealogical) information stored in a MySQL database. The site engine is written in PHP. So far (prototype phase) I have only ...
0
votes
1answer
22 views

wgSecureLogin setting

According to MediaWiki's Extension:HttpsLogin: From MediaWiki 1.17, you can redirect all users to HTTPS on login by: setting $wgSecureLogin = true; and setting $wgServer as protocol-...
0
votes
1answer
116 views

Logging using Microsoft account

I would like to create WordPress website with forum where people will be able to login with Microsoft account. I would like to do this to authorize their GamerTags from Xbox Live. Is that even ...
1
vote
3answers
351 views

htaccess , htpasswd and error 401

I have a problem with htpasswd. I get an error in error.log apache2 user admin: authentication failure for "/": Password Mismatch Content of my htaccess file: # Set Access Restrictions ...
0
votes
1answer
59 views

http-basic auth, else placeholder-page

Is it possible to show a http-basic-auth, and when someone fails that test, show a certain HTML-placeholder-page? If so, how can I achieve that?
2
votes
2answers
222 views

How do I automatically log my users into other websites after they have given me their passwords?

I have to program an application where the users can connect to other websites. For example, the user clicks on the "Amazon" button and the application opens the Amazon website. It then needs to pre-...
4
votes
1answer
66 views

How to determine the sequence of ordering certificates by browser?

I did a Mutual Certificate Authentication implementation with OpenSSL and Apache Web Server on CentOS platform. To simple explanation see this diagram: ---------- | ...
2
votes
2answers
803 views

Why does Google report a soft 404 when I redirect to the signup page?

In the last month, I've got an increased number of "soft 404" errors reported by Google webmaster tools which actually work well for users. Configuration (maybe useless): I have a website built ...
2
votes
0answers
45 views

mod_ident not to be trusted? [closed]

I'm looking at Apache's mod_ident: http://httpd.apache.org/docs/2.2/mod/mod_ident.html However, on this page it has the following disclaimer: The information should not be trusted in any way except ...
1
vote
1answer
28 views

meta robots for logged in vs. not logged in users

On a site I'm working on, The homepage has generic content for visitors who aren't logged in. When a user is logged in, the content shown is personalized to them and could even be considered private. ...
1
vote
1answer
61 views

How to require approval to signup new Bluespice MediaWiki accounts?

On a MediaWiki site running BlueSpice, how can I require that all new account sign ups be approved before the account is created? I tried adding the ConfirmAccount extension described here, but now ...
3
votes
1answer
181 views

How to allow MediaWiki non-users to only read some wiki pages related login and account creation?

I've created a BlueSpice MediaWiki site that I only want visible to users that are logged in. This works fine by creating Read permission only for Users as described here. All this works fine until ...
3
votes
1answer
493 views

Multiple Apache vhosts with Basic Auth & SSL

I'm just getting started using Apache and I pretty much have everything configured the way I want, I'm just having trouble with one aspect. A quick overview: I have a document root of "/var/www", ...
1
vote
0answers
98 views

Plesk Site Preview redirects to Plesk Login

I moved over an existing PHP site to Plesk Panel 11.5 and now I'm having an issue with the site preview. When I click site preview the site comes up fine in a new window, however when I try to ...
0
votes
1answer
92 views

Is it possible to purchase a domain name from Google to take advantage of their two factor authentication?

We are planning to purchase a domain name from Google. Somewhere I have seen GoDaddy.com and eNom.com are the Google's partner. So can I purchase domain from Google? The reason for purchasing from ...
1
vote
0answers
106 views

How to log in to Domjudge after setting the password during installation

I am trying to install Domjudge on my VPS. I ran ./configure, make and config database. At this point I should be able to login at /public/login.php with the user/pass: judgehost/judge but it doesn'...
1
vote
1answer
437 views

Can't login to Archiva via LDAP with “Could not find object” error

We upgraded to Apache Archiva 2.1.1 and successfully configured LDAP, so that "Ldap connection verified." appears in Redback Runtime Configuration. My user credentials are also recognized, as there is ...
1
vote
1answer
569 views

How to solve “Login Only” rejection when applying to Google AdSense

Recently, a site of mine was rejected due to "Login Only": Login Only: During our review of your website, we found that the majority of pages on your site are behind a login, or there is ...
1
vote
1answer
384 views

How to set up Nginx directory password authentication?

How to set up? Nginx directory password authentication /usr/local/nginx/conf/vhost/xxx.xxx.com.conf site configuration files. I want to in this website xxx.xxx.com/123 folders in password access ...
10
votes
4answers
740 views

Does SSL really matter for most websites?

I've been pretty paranoid about learning to "do security right" for this site I'm building (first non-trivial site I've made), and I've noticed something that bothers me: SSL. I've read plenty of ...
0
votes
1answer
21 views

Requiring authorisation on multiple devices

In creating a sort of "remote control" site, I'm wondering what the best way for authorisation is going to be. The simplest example would be: User logs in on desktop - page 1 is displayed (controlled ...
4
votes
2answers
427 views

Should I track the login page?

I've recently started using Google Analytics on a B2B ecommerce site with authentication. Users must login and are redirected to the login page if they try to access an internal page without first ...
3
votes
5answers
420 views

How to you prevent someone from getting a “new free trial period” by just creating a new login?

I am considering several options for the Trial version of our web app. The one I favor the most is the classic trial period. Of course, it's a LOT easier for someone to hack this system. They can ...
1
vote
1answer
85 views

URL query is adding an unecessary comma

I am trying to automatically place login data through a URL query for my university services. (https://login.gatech.edu/cas/login) two problems arise when I try to pass a URL query (Ex: https://login....
5
votes
4answers
22k views

How to login as another user in phpmyadmin

I installed phpmyadmin in Win7, and if I type http://localhost/phpmyadmin/index.php in the browser, it will log in phpmyadmin as root user by default. I created a new user but still there's no login ...
0
votes
1answer
118 views

Authentication issues when hosting static site on DropBox

I am trying to host my static website on Dropbox and forward my domain to the public link of index.html of my site; I'm following the last tip from this post. I have two problems with this approach: ...
2
votes
2answers
155 views

HTTP code 403, access denied & Options -Indexes

at "webmasters.stackexchange.com" I already found a similar topic: Stop directory listing using .htaccess and redirect to good error page Options -Indexes ErrorDocument 403 /path/to/403.html ...
2
votes
3answers
472 views

Different authentication for HTTP POST and GET requests in Apache

I want to authenticate for POST requests for http://path/to/logical/abc.xml (but not GET requests to that URL). How do I put constraints like this in place? The paths are logical and location ...
1
vote
1answer
2k views

Why can't my user (author) login from back-end to post article in Joomla

I have just created a new user from my administrator back-end. I have assigned this user to groups like author and publisher. But this user can't seem to login to the admin screen to create articles. ...
2
votes
2answers
220 views

FB login and privacy policy

I'm bulding up a site, where the ONLY ONE method for log in, is the fb login button. Now i'm wondering if i need to make users check and read the my own site's privacy and policy before and accept ...
3
votes
1answer
2k views

How to implement OpenID authentication for my site?

I want to offer OpenID authentication for my users (please note that I do not necessary want to become an OpenID provider; I just need to authenticate my user for my website). How to implement OpenID ...