The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
14 views

Wordpress login area for downloads

I need to create a page that requires users to log in with a username / email and password to access it, and then depending on who the user is, they get links to one more files they can download. No ...
2
votes
2answers
48 views

Can you create a private website without password protection that would not be indexed?

I'd like to create a "private" website that clients can visit by typing in the provided direct URL (on a business card, for example), but is not password protected and would not be indexed by search ...
23
votes
2answers
707 views

What are the steps to ensure that if you die, your hosting & domain will live on?

Assuming you are micro independent software vendor (MISV) or one man web shop (OMWS), how do you reduce your Bus Factor? In my specific case, I'm supporting a few websites that takes me a few ...
0
votes
1answer
163 views

Password protecting dynamic URLs in Apache

I am handling many logical files request using the Apache server. To make the path simple I have used mod_rewrite in the httpd.conf. Now I am planning to enforce authentication on these logical file ...
1
vote
1answer
499 views

How do I find my Joomla database password?

I have Joomla website which I can login with administrator account. I also can log into cpanel. But where can I find the Joomla database password? I don't know too much about phpMyAdmin and can't find ...
1
vote
2answers
31 views

When a user changes their password, should I let the old password be valid for a few days?

I'm building a new web site. I'm now writing the code where a user can request an email to reset a lost password. As I'm writing it, it occurs to me that there could be several scenarios: The user ...
1
vote
2answers
635 views

Chrome recent change to password field handling breaks my page

Our site has a profile update page which allows the user to change their password and other basic information. This page has been in production since 2006. Recent changes to Chrome have broken the way ...
1
vote
1answer
98 views

Asking for user's 3rd party username/password like Facebook's Find Friends feature

Preface Facebook and other sites have features where they ask users for their credentials for 3rd party web sites (see image below). Presumably, facebook then uses the credentials to login as the ...
1
vote
2answers
260 views

Is there a way to retrieve a FTP/cPanel accounts password using WHM?

I know you can reset an accounts password with WHM, but does any one know a way to retrieve an existing one?
1
vote
5answers
133 views

How do webmasters store and keep track of their passwords [closed]

I'm developing a site for the first time, and I'm trying to work out the best way to store and track all the accounts/passwords e.g. Server passwords, ftp passwords, API passwords (FB, Google, ...
1
vote
3answers
212 views

Joomla 2.5 - Password to backend lost

Can I recover the backend password for Joomla 2.5?
3
votes
2answers
145 views

How to maintain unique user per paid account in a website with given set of Email ID and password?

For a website, there is a free and a paid membership option. Once the user pays some amount he gets a membership for a month for additional products that are not in the free account on the website. ...
3
votes
4answers
180 views

How can I safely analyze users' password quality?

Given a registration service website with rather lax password requirements for the users (6-12 characters with no special requirements), how can I safely analyze what quality of passwords users pick ...
7
votes
4answers
204 views

Webhosting company able to unhash passwords?

Tonight I was using the cPanel of a web-site I host and when I went to change the password I received a warning that I couldn't change the password to my desired password because it was too similar to ...
4
votes
3answers
282 views

Why do websites require retyping the password upon user error in a registration form?

Many times, when you fill out a registration form and miss a required field, the form reloads with all the fields filled out except for the password which you have to retype. I'm wondering if I ...
2
votes
1answer
46 views

Where to place the link to the password changing form?

Sorry for this pretty general question... but, where do you place the link for password changing in your websites?, where do you think is the best place? in the login form, in the personal data ...
2
votes
1answer
64 views

Password protected website

I need to add a user authentication page before the actual homepage of the website. In Joomla! I just set the website offline and the offline page loads in place of the homepage but then it's ...
0
votes
0answers
168 views

SIMPLEST way to set up password protection for a static site, with basic admin UI?

I have a static site. I would like the simplest approach to password protecting a directory, with a basic admin UI for adding/removing users. I will have so few users that I don't care about ...
3
votes
2answers
116 views

Use Outlook password for website verification

I am currently building an internal employee dashboard for our global company (it is hosted on an external website for logistical reasons) I'd like (need) to password protect the page as we will be ...
0
votes
0answers
21 views

File Management CMS? [duplicate]

Possible Duplicate: Which Content Management System (CMS) should I use? I'm looking for some kind of a CMS -- or similar software -- for hosting non-web files (PDFs, Docs, xls, other ...
1
vote
2answers
3k views

Website hacked, cpanel password not encrypted?

Yesterday I found out that all the websites that are hosted on my webhosting site were hacked. I tried to change my password, and unbelievably, I COULD SEE my password there. This means my password is ...
1
vote
2answers
178 views

Proper password handling for login

I have read a lot about PHP login security recently, but many questions on Stack Overflow regarding security are outdated. I understand bcrypt is one of the best ways of hashing passwords today. ...
1
vote
1answer
478 views

Is the php method md5() secure? Can it be used for passwords? [closed]

So executing a php script causes the form values to be sent to the server, and then they are processed. If you want to store a password in your db than you want it to be a cryptographic hash(so ...
2
votes
1answer
27 views

htaccess setting resets upon uploading new updates

Hi I am trying to set up password protected web pages with htaccess on dreamhost.com. While the panel in dreamhost allows one to set up password protection rather quickly. Once I uploaded updates to ...
0
votes
1answer
113 views

When multiple developers use cPanel, can they get individual passwords that prevent them from uploading into each other's directories?

I have multiple developers working on my cPanel account simultaneously. I want to assign them individual directories to work. I would need to be able to secure other directories from the developers ...
2
votes
1answer
2k views

When I am root, “mysql” connects without a password, even though I've set one [closed]

When I am root, "mysql" connects without a password, even though I've set one: # mysqladmin -u root password 'whatever' # mysql -u root -p Enter password: (typing the 'whatever' above) Welcome to the ...
3
votes
2answers
113 views

What are recommended password reset mecanisms?

All, I'm developing a small, non-commercial web app. I'm trying to decide how to help a user who might have lost their password. I need a mechanism that is, in order of priority: 1) User friendly; ...
5
votes
1answer
297 views

Is there a simple way to protect my webpage by password?

I am writing some simple HTML pages. I need to protect some pages and some files (to be downloaded) by requiring username and password. Do anyone has a simple solution? Thank you very much!
1
vote
1answer
74 views

Contact YouTube

Is there any direct way do contact a „real” person, an YouTube employer? Someone created an account for the company I work for (previous employer). She entered some password and e-mail. The provided ...
0
votes
1answer
150 views

Controlling Access using htpasswd and htaccess

I've got a bit of a peculiar problem on my site. I'm using a .htaccess and .htpasswd file to protect the root of the site. This works great, but when I try to view a video file on my site, it prompts ...
1
vote
1answer
114 views

Is viewing a site's unpassword protected HTTP logs/stats illegal?

If not, why? If so, please provide US Federal code, or case law confirming this is the case.
2
votes
2answers
1k views

Can the password recovery function of Drupal be configured to only ask for email address?

(I originally asked this question in webapps.stackexchange.com.) By default, in Drupal, when we provide a "set new password" form, the form asks for either a site username or an email address. If the ...
6
votes
3answers
375 views

Using two salts for user authentication?

When storing user credentials in a database, we all know that hashing the password is the bare minimum you should do, but salting it before hashing is better. The salt should be randomly generated, ...