Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [authentication]

Authentication is commonly understood as the act of asserting a user's or entity's identity, although in the wider sense it can refer to asserting the truthfulness of any kind of claim. Authentication, like encryption, is a major component in implementing computer security.

0
votes
1answer
20 views

How can I ban mediawiki logins from IPs that persistently fail?

I have a MediaWiki website and someone is trying to login as my WikiSysop user by guessing lots of passwords. What can I do to ban IPs if they exceed a threshold of failed login attempts? (Okay, no-...
1
vote
0answers
22 views

Do Google Analytics sessions get broken when tracking UserID and ClientID across subdomains that may not send that data?

I have a domain name with three subdomains. One where a user is authenticated and two where they aren't. I'm planning on implementing UserID tracking for Google Analytics in place of the standard ...
1
vote
0answers
40 views

After implementing HTTPS, “require valid-user” in subdirectory no longer asks for password, just gives 401 Not Authorized

I'm not very knowledgeable about server scripting, however I've only just installed SSL certificate for the domain. The main website (hosted by GoDaddy) is now working fine on SSL/TLS and I've ...
1
vote
1answer
29 views

Do most websites not use HTTP authentication header but something else for authentication?

https://curl.haxx.se/docs/httpscripting.html says It is worth noting that while this is how HTTP Authentication works, very many web sites will not use this concept when they provide logins etc. ...
1
vote
0answers
17 views

Allow our own systems to use an API and restrict it from the general internet without using authentication

I have an Apache server which is reverse proxy'd to some Java container. In Java container there is an API that we don't want internet to see but expect our own systems to use it without any ...
1
vote
0answers
489 views

Append basic authentication header NGINX to existing authentication header of upstream application

Assume the following setup: The NGINX reverse proxy is asking for basic authentication (which is a good habit when you expose things on the internet). Basic authentication uses the Authorization ...
0
votes
1answer
39 views

It is harder for users to log on to my website when using gmails “+company” email address feature. How can I help them?

If you have a website and lots of people create his accounts with this format: mail+mycompanysite@gmail.com mail+companysite@gmail.com mail+company_site@gmail.com This issue is causing me several ...
1
vote
1answer
31 views

How do I log in into Apache web server on Ubuntu from Windows?

I've been given a username and password for an Apache server, that runs on Ubuntu, and belongs to my professor. I do not know how to connect to the server from my machine(windows), and run scripts ...
1
vote
0answers
111 views

Why does CPanel keep prompting me for credentials

When I login directly to CPanel, I login successfully and can see various parts of CPanel (text only, no images), but the system keeps prompting me to login again. When I login via WHM, everything ...
2
votes
1answer
39 views

Individual directory options for every VirtualHost in Apache2

I have a Debian 9 server with two static IPv4 addresses. One of them is public and the other one is in the server's VPN subnet (the machine is running an OpenVPN server). There is a DNS server in the ...
1
vote
0answers
18 views

double authentication for https password protected password

I am hosting a customer's OpenCart store on my own domain hosting. I have add-on domain in my CPanel for customer's domain and created sub domain for it to ease access. Other than the double ...
1
vote
1answer
46 views

Can DHIS2 provision users in advance and then have them log in using OAuth2?

We are looking at using DHIS2 as the data mart/dashboard backend for an application we are built. Its great that it has OAuth2 built in which makes it easy for us to allow SSO for a user. However is ...
1
vote
1answer
13 views

Why can't I login to my wordpress at home?

I don't have the same issue in the office but when I try to login at home, it keeps on saying "too many redirects". I'm not very good at this FTP thing so can anyone help me what to do? I've tried ...
2
votes
0answers
593 views

Apache basic authentication without instant prompt for credentials

I'm looking for away to eliminate the intrusive instant prompt for credentials when basic authentication is used and instead serve a nice page that tells the user where he is and what credentials to ...
0
votes
1answer
29 views

PHP syntax issue [closed]

I'm reading a Sentry tutorial for implementing an authentication workflow in a webapp. I'm a PHP beginner. There's a thing I don't understand in this code: <?php // set up autoloader require ('...
6
votes
0answers
93 views

Automatic reauthenticate at oauth2 endpoint

I am currently (ab)using an oauth2 endpoint of an API to enable users of the API to login to my site (using response_type=code). I do not save refresh tokens or even access_token as that oauth2 ...
3
votes
1answer
95 views

Does requiring login to access content hinder SEO?

I am wondering what the SEO effects of a 'Login Wall' is. More specifically, we have content that is region specific, so for instance a URL could look like www.example.com/content/Canada/Ontario. This ...
4
votes
2answers
505 views

SEO Impact on presenting User details without login

I am looking to develop a functionality on our website in which i can a show user their name based on cookie data. There will be no login required. we will retrieve user's name based on the previous ...
4
votes
2answers
634 views

Can basic HTTP password authentication interfere with CDN access?

I'm doing my best to ask this question, I'm stepping across domains here to cover for another team that is MIA on this task. Please guide me if the question sounds stupid. We are dealing with a ...
1
vote
0answers
29 views

Can I get email id, which email id is used to login in webmaster? [closed]

Can I get email id, which email id is used to login in webmaster... please help... We Have all email id and passwords @admin... But I dont know which is used to login webmaster... What I can do in it.....
0
votes
1answer
303 views

Is it possible to create a full SEO website with Firebase?

I work a lot with PHP, and as many of you know, you have a lot of flexibility when it comes to creating dynamic pages. You have sessions for authentication, database queries, etc. But the most ...
0
votes
1answer
611 views

Googlebot not respecting HTTP basic auth

I have basic auth set up and it has always worked. Suddenly Google started crawling my pages. The auth is still there (I have checked it using different browsers). I am at a loss how it's possible. ...
1
vote
1answer
59 views

How to detect the server has logged out the user from the client side?

For performance reasons I'm setting some user info in the local storage of the client/navigator when he logs in. It allows me to tune the pages appearance (show/hide menus, display the name of the ...
4
votes
1answer
80 views

Website Prompting Username and Password for Authentication on Debian Apache WebServer

I am attempting to host my own website with an Apache web server on Debian, but have reached this problem. When I try to go to my site at example.com it immediately asks for me to authenticate with a ...
0
votes
1answer
41 views

Is it OK for SEO to create tutorial documentation pages on my website that are only shown to logged in users?

I'm thinking to create tutorial pages (visible only if logged in) for my client. Using same CMS database. My question is, is this bad for SEO? should I tell robots to ignore these pages?
0
votes
1answer
27 views

How to log-in with more rights than Admin or Bureaucrat?

I'm having a heck of a time with MediaWiki and an Internal Server Error. I'd like to log-in with more privileges than afforded by Admin and Bureaucrat in hopes of actually being able to save a page. ...
1
vote
1answer
30 views

Verifying that a user is from a certain country

I'm helping a small non-profit with their website and we are going to have a login and membership system where we need to verify that a user is from a certain country. How can this be done? We are ...
0
votes
1answer
466 views

How to require user login using htpasswd within the htaccess file?

I'm trying to require users to login and would like to handle the request with htpasswd in the htaccess file: Any ideas on how I can do that?
3
votes
1answer
62 views

Best way to respond to an authentication request via HTTPS

I'm implementing a very simple authentication scheme. Username:Password are sent (via header of an HTTPS POST request) to a PHP file on an Apache server that checks whether that combination is in a ...
7
votes
2answers
6k views

More Secure NGINX Authentication than auth_basic

I've been trying to come up with the most secure method of authentication to my reverse proxy in NGINX. I've been using ngx_http_auth_basic_module so far without any issues, but there are apparently ...
2
votes
1answer
37 views

Is it reliable to rely on external authentication providers in the long run?

We use Google+, Facebook and Twitter oauth2 APIs for our membership infrastructure, because our content policy strictly prohibits standalone ownership of content by user (means that there is no ...
0
votes
2answers
363 views

AdSense on pages for logged in users with different content for each user

Is it possible to show AdSense to logged in users when each user sees different content? I'm developing an application where each user sees the content that they have entered. The ads would be ...
3
votes
1answer
399 views

Access Google Analytics without original login credentials

Our Google Analytics administrator has forgotten the login credentials for our account. How can we recover this?
6
votes
1answer
56 views

Can't login or edit on 3 wordpress sites from a particular Windows PC

I have 3 wordpress.org sites and I have problems logging in and/or editing all three from one particular laptop (Win 7 Home Premium). It is puzzling. I can load regular pages from the sites OK. The ...
1
vote
1answer
22 views

How do you deal with users who no longer have access to their login email?

I run a reasonably sized web application and from time to time I get users who for various reasons lose access to the email address they originally registered with. The user will typically make a ...
2
votes
1answer
2k views

Wordpress keeps redirecting to non-existent wordpress directory

I've uploaded WordPress to my GoDaddy and when I go to example.com/wp-login.php to login page looks bare. I would expect to see the styled default WordPress login page and secondly when pressing ...
0
votes
1answer
443 views

HELP! my login session is returning the users password instead of their username! [closed]

I have my code set up to display the username in the nav bar however its displaying their password? nav.php <li> <a href class="userName"><?php echo $_SESSION['userName'];?></...
0
votes
1answer
85 views

Does Cloudflare use different authentication mechanisms across platforms?

I'm using Cloudflare flexible SSL for a website I made, and after investigating certificate properties, I realized different authentication mechanisms are being used. Chrome 45 for Windows desktop ...
3
votes
1answer
125 views

How to secure database access

I am developing a personal web-site with a lot of relatively sensitive (genealogical) information stored in a MySQL database. The site engine is written in PHP. So far (prototype phase) I have only ...
0
votes
1answer
43 views

wgSecureLogin setting

According to MediaWiki's Extension:HttpsLogin: From MediaWiki 1.17, you can redirect all users to HTTPS on login by: setting $wgSecureLogin = true; and setting $wgServer as protocol-...
1
vote
3answers
3k views

htaccess , htpasswd and error 401

I have a problem with htpasswd. I get an error in error.log apache2 user admin: authentication failure for "/": Password Mismatch Content of my htaccess file: # Set Access Restrictions ...
1
vote
2answers
4k views

Webmin: Cannot login through nginx reverse proxy

I've created a reverse proxy for webmin through nginx to run webmin at [site domain]/webmin instead of port 10000 ([site domain]:10000). When I go to [site domain]/webmin, the login page shows up as ...
2
votes
1answer
94 views

CAN-SPAM and transactional emails without legitimate physical address (for foreign webmaster)

Situation I am a very small time web developer working on a personal web project. This website will be sending only two types of emails, a email validation email and a forgot password email. I do ...
0
votes
1answer
410 views

Logging using Microsoft account

I would like to create WordPress website with forum where people will be able to login with Microsoft account. I would like to do this to authorize their GamerTags from Xbox Live. Is that even ...
3
votes
2answers
560 views

Limit access to rewritten uri based on IP address

I'd like to limit access to a Drupal 7 registration page (/user/register) from certain IP addresses. I've tried to set the apache directive, but it's still letting me access it from an IP that isn't ...
3
votes
2answers
3k views

How do I automatically log my users into other websites after they have given me their passwords?

I have to program an application where the users can connect to other websites. For example, the user clicks on the "Amazon" button and the application opens the Amazon website. It then needs to pre-...
0
votes
1answer
109 views

http-basic auth, else placeholder-page

Is it possible to show a http-basic-auth, and when someone fails that test, show a certain HTML-placeholder-page? If so, how can I achieve that?
2
votes
0answers
96 views

mod_ident not to be trusted? [closed]

I'm looking at Apache's mod_ident: http://httpd.apache.org/docs/2.2/mod/mod_ident.html However, on this page it has the following disclaimer: The information should not be trusted in any way except ...
8
votes
1answer
269 views

What do I need to do to make my site compatible with Safari's iCloud Keychain so that it saves passwords?

I've noticed that a vendor's web application triggers Safari's "suggested password" feature at "create password" forms, but does not actually save this password when the form is submitted. That is, ...
1
vote
1answer
128 views

How to require approval to signup new Bluespice MediaWiki accounts?

On a MediaWiki site running BlueSpice, how can I require that all new account sign ups be approved before the account is created? I tried adding the ConfirmAccount extension described here, but now ...