The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
3answers
977 views

Chrome recent change to password field handling breaks my page

Our site has a profile update page which allows the user to change their password and other basic information. This page has been in production since 2006. Recent changes to Chrome have broken the way ...
2
votes
2answers
225 views

What are the Pros and Cons for password recovery change links in email?

Although a lot of sites still send your password in plain text through email, there has been a push to send a web page url instead. But how can that be any more secure than the password in clear ...
2
votes
2answers
66 views

Can you create a private website without password protection that would not be indexed?

I'd like to create a "private" website that clients can visit by typing in the provided direct URL (on a business card, for example), but is not password protected and would not be indexed by search ...
24
votes
2answers
791 views

What are the steps to ensure that if you die, your hosting & domain will live on?

Assuming you are micro independent software vendor (MISV) or one man web shop (OMWS), how do you reduce your Bus Factor? In my specific case, I'm supporting a few websites that takes me a few ...
0
votes
1answer
116 views

When multiple developers use cPanel, can they get individual passwords that prevent them from uploading into each other's directories?

I have multiple developers working on my cPanel account simultaneously. I want to assign them individual directories to work. I would need to be able to secure other directories from the developers ...
1
vote
5answers
138 views

How do webmasters store and keep track of their passwords [closed]

I'm developing a site for the first time, and I'm trying to work out the best way to store and track all the accounts/passwords e.g. Server passwords, ftp passwords, API passwords (FB, Google, ...
0
votes
1answer
185 views

Password protecting dynamic URLs in Apache

I am handling many logical files request using the Apache server. To make the path simple I have used mod_rewrite in the httpd.conf. Now I am planning to enforce authentication on these logical file ...
1
vote
1answer
833 views

How do I find my Joomla database password?

I have Joomla website which I can login with administrator account. I also can log into cpanel. But where can I find the Joomla database password? I don't know too much about phpMyAdmin and can't find ...
1
vote
2answers
35 views

When a user changes their password, should I let the old password be valid for a few days?

I'm building a new web site. I'm now writing the code where a user can request an email to reset a lost password. As I'm writing it, it occurs to me that there could be several scenarios: The user ...
1
vote
1answer
101 views

Asking for user's 3rd party username/password like Facebook's Find Friends feature

Preface Facebook and other sites have features where they ask users for their credentials for 3rd party web sites (see image below). Presumably, facebook then uses the credentials to login as the ...
1
vote
2answers
408 views

Is there a way to retrieve a FTP/cPanel accounts password using WHM?

I know you can reset an accounts password with WHM, but does any one know a way to retrieve an existing one?
2
votes
1answer
64 views

Password protected website

I need to add a user authentication page before the actual homepage of the website. In Joomla! I just set the website offline and the offline page loads in place of the homepage but then it's ...
1
vote
3answers
226 views

Joomla 2.5 - Password to backend lost

Can I recover the backend password for Joomla 2.5?
0
votes
0answers
193 views

SIMPLEST way to set up password protection for a static site, with basic admin UI?

I have a static site. I would like the simplest approach to password protecting a directory, with a basic admin UI for adding/removing users. I will have so few users that I don't care about ...
3
votes
2answers
152 views

How to maintain unique user per paid account in a website with given set of Email ID and password?

For a website, there is a free and a paid membership option. Once the user pays some amount he gets a membership for a month for additional products that are not in the free account on the website. ...
3
votes
4answers
182 views

How can I safely analyze users' password quality?

Given a registration service website with rather lax password requirements for the users (6-12 characters with no special requirements), how can I safely analyze what quality of passwords users pick ...
7
votes
4answers
207 views

Webhosting company able to unhash passwords?

Tonight I was using the cPanel of a web-site I host and when I went to change the password I received a warning that I couldn't change the password to my desired password because it was too similar to ...
4
votes
3answers
288 views

Why do websites require retyping the password upon user error in a registration form?

Many times, when you fill out a registration form and miss a required field, the form reloads with all the fields filled out except for the password which you have to retype. I'm wondering if I ...
2
votes
1answer
49 views

Where to place the link to the password changing form?

Sorry for this pretty general question... but, where do you place the link for password changing in your websites?, where do you think is the best place? in the login form, in the personal data ...
3
votes
2answers
118 views

Use Outlook password for website verification

I am currently building an internal employee dashboard for our global company (it is hosted on an external website for logistical reasons) I'd like (need) to password protect the page as we will be ...
1
vote
2answers
3k views

Website hacked, cpanel password not encrypted?

Yesterday I found out that all the websites that are hosted on my webhosting site were hacked. I tried to change my password, and unbelievably, I COULD SEE my password there. This means my password is ...
0
votes
0answers
21 views

File Management CMS? [duplicate]

Possible Duplicate: Which Content Management System (CMS) should I use? I'm looking for some kind of a CMS -- or similar software -- for hosting non-web files (PDFs, Docs, xls, other ...
1
vote
2answers
182 views

Proper password handling for login

I have read a lot about PHP login security recently, but many questions on Stack Overflow regarding security are outdated. I understand bcrypt is one of the best ways of hashing passwords today. ...
1
vote
1answer
528 views

Is the php method md5() secure? Can it be used for passwords? [closed]

So executing a php script causes the form values to be sent to the server, and then they are processed. If you want to store a password in your db than you want it to be a cryptographic hash(so ...
2
votes
1answer
27 views

htaccess setting resets upon uploading new updates

Hi I am trying to set up password protected web pages with htaccess on dreamhost.com. While the panel in dreamhost allows one to set up password protection rather quickly. Once I uploaded updates to ...
2
votes
1answer
2k views

When I am root, “mysql” connects without a password, even though I've set one [closed]

When I am root, "mysql" connects without a password, even though I've set one: # mysqladmin -u root password 'whatever' # mysql -u root -p Enter password: (typing the 'whatever' above) Welcome to the ...
3
votes
2answers
117 views

What are recommended password reset mecanisms?

All, I'm developing a small, non-commercial web app. I'm trying to decide how to help a user who might have lost their password. I need a mechanism that is, in order of priority: 1) User friendly; ...
5
votes
1answer
311 views

Is there a simple way to protect my webpage by password?

I am writing some simple HTML pages. I need to protect some pages and some files (to be downloaded) by requiring username and password. Do anyone has a simple solution? Thank you very much!
1
vote
1answer
74 views

Contact YouTube

Is there any direct way do contact a „real” person, an YouTube employer? Someone created an account for the company I work for (previous employer). She entered some password and e-mail. The provided ...
0
votes
1answer
150 views

Controlling Access using htpasswd and htaccess

I've got a bit of a peculiar problem on my site. I'm using a .htaccess and .htpasswd file to protect the root of the site. This works great, but when I try to view a video file on my site, it prompts ...
2
votes
2answers
1k views

Can the password recovery function of Drupal be configured to only ask for email address?

(I originally asked this question in webapps.stackexchange.com.) By default, in Drupal, when we provide a "set new password" form, the form asks for either a site username or an email address. If the ...
1
vote
1answer
114 views

Is viewing a site's unpassword protected HTTP logs/stats illegal?

If not, why? If so, please provide US Federal code, or case law confirming this is the case.
6
votes
3answers
380 views

Using two salts for user authentication?

When storing user credentials in a database, we all know that hashing the password is the bare minimum you should do, but salting it before hashing is better. The salt should be randomly generated, ...