Authentication is commonly understood as the act of asserting a user's or entity's identity, although in the wider sense it can refer to asserting the truthfulness of any kind of claim. Authentication, like encryption, is a major component in implementing computer security.

learn more… | top users | synonyms (1)

1
vote
1answer
17 views

HTTP code 403, access denied & Options -Indexes

at "webmasters.stackexchange.com" I already found a similar topic: Stop directory listing using .htaccess and redirect to good error page Options -Indexes ErrorDocument 403 /path/to/403.html ...
0
votes
1answer
14 views

Wordpress login area for downloads

I need to create a page that requires users to log in with a username / email and password to access it, and then depending on who the user is, they get links to one more files they can download. No ...
9
votes
3answers
520 views

Does SSL really matter for most websites?

I've been pretty paranoid about learning to "do security right" for this site I'm building (first non-trivial site I've made), and I've noticed something that bothers me: SSL. I've read plenty of ...
2
votes
3answers
82 views

Different authentication for HTTP POST and GET requests in Apache

I want to authenticate for POST requests for http://path/to/logical/abc.xml (but not GET requests to that URL). How do I put constraints like this in place? The paths are logical and location ...
1
vote
1answer
662 views

Why can't my user (author) login from back-end to post article in Joomla

I have just created a new user from my administrator back-end. I have assigned this user to groups like author and publisher. But this user can't seem to login to the admin screen to create articles. ...
2
votes
2answers
154 views

FB login and privacy policy

I'm bulding up a site, where the ONLY ONE method for log in, is the fb login button. Now i'm wondering if i need to make users check and read the my own site's privacy and policy before and accept ...
3
votes
2answers
1k views

How to implement OpenID authentication for my site?

I want to offer OpenID authentication for my users (please note that I do not necessary want to become an OpenID provider; I just need to authenticate my user for my website). How to implement OpenID ...
3
votes
4answers
476 views

Personalized content (authenticated with a cookie) and impact on SEO

We have a big website with a lot of content, that is doing pretty well in terms of SEO. Google likes the site, visitors like it as well. Our problem is that there is a lot of content that would only ...
7
votes
4answers
149 views

Single Sign on across Websites

I have three different websites that I run on three distinct top level domains. I would like to be able to have users log into any one of them and then be automatically logged into all three. As an ...
5
votes
2answers
410 views

HTTP for one part of the site, HTTPS for other

We have a site which is HTTP, but it has an admin part. How can we secure the admin part with HTTPS? For example, WordPress (which I know) is located at http://foo.com, but we want to have ...
2
votes
2answers
290 views

How to make browsers offer to remember passwords

What properties login form needs to have to trigger "remember password" for all (or most) browsers? Background: For years I have been using Opera, and the rule has been that almost anything that ...
4
votes
1answer
672 views

Password protect an alias virtual directory

I have a main domain being hosted through CPanel. I also have a sub-domain that I would like to appear as a path under the main domain instead of as a sub-domain. So I have: http://example.com/ ...
3
votes
1answer
116 views

getting the user back where they came from with mod_form_auth

Using the mod_form_auth module in Apache HTTPD 2.4.3, I am looking for a way to have the user redirected to their original desired target after completing a login. That is, if I have a <Location ...
3
votes
1answer
80 views

How do I get a “Sign in with Facebook” button in Denmark?

I live in Denmark. In connection with a project I would like to add a "Sign in with Facebook" button to a website. In order to do that I apparently have to register as a Facebook developer on ...
2
votes
2answers
81 views

Will using HTTPS hurt my site's SEO or other statistics?

I've set up a WordPress blog. Since I have to log into it from many different locations/machines, I've also got an SSL certificate, and set up Apache to redirect HTTP to HTTPS. It all works, but I'm ...
2
votes
2answers
433 views

My cPanel login is being redirected. How can I resolve this?

I'm trying to get to cPanel to manage my website. When I type www.mydomain.com:2082 into the browser window, the request seems to be redirected. I made a screen-cast so I could slow down the changes ...
1
vote
2answers
118 views

Why does Google report a soft 404 when I redirect to the signup page?

In the last month, I've got an increased number of "soft 404" errors reported by Google webmaster tools which actually work well for users. Configuration (maybe useless): I have a website built ...
1
vote
2answers
116 views

Still prompted for a password after adding SSH public key to a server

I'm attempting to setup a git repository on my Dreamhost web server by following the "Setup: For the Impatient" instructions here. I'm having difficulty setting up public key access to the server. ...
3
votes
1answer
371 views

Using Public Key Authentication for websites

I know GitHub uses it for code development (not user authentication for the website though). I saw this article on the idea: ...
0
votes
0answers
36 views

Are the Microsoft ASP.NET Authentication and Membership systems superior to a “roll-your-own”?

This may seem like an open-ended question without a definite answer, but in light of the fact that I am committed to using Microsoft technology (ASP.NET) would it be adequate to use their ...
0
votes
1answer
45 views

Utilising Open ID and third party auth services

I'm planning to utilise a third party authorisation service in order to allow users to sign in with their google/facebook accounts etc. In particular I am aiming to use the Yii extension here- ...
1
vote
2answers
248 views

Can I create test accounts in Google for testing Oauth in my application?

My app contains Sign in from Google function that uses Oauth. To test it I'd want to create test accounts at Google. But Google doesn't allow me to create ordinary accounts without entering captcha so ...
0
votes
1answer
29 views

Digest Authentication - how is it used? [closed]

I understand a bit about digest authentication from here http://en.wikipedia.org/wiki/Digest_access_authentication, but I am pretty unclear on where, when or how it is used. I can't find anything on ...
3
votes
0answers
34 views

How to determine the sequence of ordering certificates by browser?

I did a Mutual Certificate Authentication implementation with OpenSSL and Apache Web Server on CentOS platform. To simple explanation see this diagram: ---------- | ...
4
votes
5answers
461 views

Do user names used for login need to be unique?

Assuming a non-commercial site where users login with a user name and pw, do I need to enforce unicity of usernames? Note: The db will use a separate unique index to identify the users. The site is ...
3
votes
2answers
631 views

You don't have permission to access /index.php on this server

I made a 'login with OpenID' page and I had a error when OpenID provider return to my page: You don't have permission to access /index.php on this server. Additionally, a 404 Not Found ...
2
votes
1answer
215 views

How do I password protect a directory with a customizable login page?

At the moment, I have a directory that's password protected by .htaccess and .htpasswd. The problem with this is that when a visitor comes to my site, they get an ugly inbuilt Secure Area message ...
1
vote
1answer
659 views

SSPI Apache2.2 Windows Authentication

I am trying to set up seamless authentication on windows for my intranet site, using SSPI on Apache 2.2 and windows 2008 server. I have installed mod_auth_sspi.so in apache/bin. I have also added the ...
1
vote
1answer
98 views

Asking for user's 3rd party username/password like Facebook's Find Friends feature

Preface Facebook and other sites have features where they ask users for their credentials for 3rd party web sites (see image below). Presumably, facebook then uses the credentials to login as the ...
1
vote
1answer
428 views

Limit Joomla user login sessions

I am testing a Joomla installation for making a commercial website where you pay for accessing content. I just found out that it is possible to login from two different computers at the same time into ...
6
votes
5answers
161 views

Allowing users to post without logging in

On Stackoverflow/Stackexchange, users are allowed to add posts without requiring login, just wondering what should be considered before allowing this kind behavior on a site? Couple of things spring ...
0
votes
1answer
99 views

Capitals in URL subdirectory not changed by htaccess

Within my WordPress website I am redirecting sub directories to internal and external links. Now, when you place a CAPITAL letter in the sub dir it does not work anymore and the website does not show ...
1
vote
1answer
81 views

How to prove someone is a Realtor on my website

My boss would like me to have some sort of a "login" for Realtors. The point is to have a certain portion of the site only available to Realtors. Initially he thought we could check their name and ...
2
votes
1answer
64 views

Password protected website

I need to add a user authentication page before the actual homepage of the website. In Joomla! I just set the website offline and the offline page loads in place of the homepage but then it's ...
1
vote
0answers
317 views

Different behaviour with windows authentication on IIS7 websites

I need to run a website with just windows authentication. Given the following situation: The location of the default website is: c:\inetpub\wwwroot The location of my code is: c:\Sites\WebApp My ...
3
votes
3answers
7k views

How to login as another user in phpmyadmin

I installed phpmyadmin in Win7, and if I type http://localhost/phpmyadmin/index.php in the browser, it will log in phpmyadmin as root user by default. I created a new user but still there's no login ...
1
vote
0answers
26 views

How do I do this? [closed]

Yesterday I visited the site. http://www.rottentomatoes.com After a few clicks, If Opened My facebook account, me, will immediately become a member. How it works? Document, the article I'm looking ...
1
vote
1answer
1k views

http auth an iframe automatically so users don't have to login?

I have a members only site running WordPress and a stock images gallery running an old php gallery CMS. I want the members to only have to login once but I want to protect the gallery from the general ...
3
votes
1answer
192 views

How to allow Google to index protected content?

I'm working on my site and as it require users to log in it will be hard to Google to index the sites, because to see 90% of the content you have to be online. So I've made a script which looks for ...
2
votes
1answer
548 views

How to log username in Apache logs?

I need some help regarding how to log the user-name into apache logs. I'm building a use-case for Security Information Event Management. Is the method the same in case of IIS or just applicable to ...
7
votes
1answer
665 views

Permissions for serving up temporary files

I have a system (web based application) which pulls file attachments from a 3rd party system via SOAP. These are in turn on our system created as files in a directory. When a user of the system ...
0
votes
0answers
168 views

SIMPLEST way to set up password protection for a static site, with basic admin UI?

I have a static site. I would like the simplest approach to password protecting a directory, with a basic admin UI for adding/removing users. I will have so few users that I don't care about ...
0
votes
2answers
334 views

htaccess and htpasswd trouble

This is the first time that I have ever tried working with .htpasswd and .htaccess files, so please point out my childish works. I have my apache document root set to /www/ on my debian server. ...
1
vote
2answers
307 views

Run server-side script as authenticated user in apache--is it possible?

I'm developing a web app that takes a bunch of parameters (dropdown boxes, etc) from an authenticated user, creates a file, then delivers that file via stdin to a program on my web server. Due to ...
3
votes
2answers
145 views

How to maintain unique user per paid account in a website with given set of Email ID and password?

For a website, there is a free and a paid membership option. Once the user pays some amount he gets a membership for a month for additional products that are not in the free account on the website. ...
2
votes
1answer
590 views

Avoid the login popup when using http-auth

I have an Apache. Under the DOCUMENTROOT is a folder with an .htpasswd file for http-auth. If I open the browser and request the content in the folder I get an Popup to login. Is there a way to avoid ...
4
votes
2answers
329 views

Combining a content management system with ASP.NET

I am going to be creating a site that seems like it requires a blend of a content management system (CMS) and some custom web development (which is done in ASP.NET MVC). I have plenty of web ...
3
votes
3answers
210 views

Which social sign-in (Google, twitter, fb, etc) is most often used (if I could only choose one, which would statistically retain the most users)?

I am working with a startup which is about to do its launch in maybe 2-3 weeks. In order to see the primary features of the site, the user has to register or sign in if they have already registered. ...
6
votes
5answers
111 views

How to include content from remote server while keeping that content secure

I am hosting collection of videos, for which I retain the copyright, on a file server that I'd like to share with family and friends. When a user visits my file server via a web browser they are ...
1
vote
2answers
83 views

How to hide the admin login form?

In my website there are no accounts except for those of moderators and administrators. That's why I don't want to show the login form to everyone but to these people. I thought of using a weird URL ...