login

True or False: cross-domain SSO always requires a third party identity provider

I currently have several websites which live on separate domains: www.app1.com www.app2.com www.app3.com Each has its own authentication mechanism - some query active directory via web service, others have their own user database. The goal is to have Single Sign On through some technology or product that doesn't require users to re-...

Design a login form so IE will remember login data

My company website, which I develop, requires a login using a form. Firefox correctly asks for and remembers login details, but test instances of IE6, IE7 do not remember either the username or password, and IE8 will give a dropdown of usernames previously used, but will not remember the password. What is it about the design of my pas...

Including User IP addr for hash Cookie value... bad idea?

Is using a User's IP addr as part of a Cookie's hashed value that I store in the database a bad idea? I read somewhere that since most user's have dynamic IP addresses that it was bad practice to use this as part of the hash. If so what kind of user data should I pull in the hash? Or do I really need to? Thanks. ...

Are there any demerit if I use JSON as the storage mechanism, for storing ID/password information ?

I asked for PHP login system and I got answers, lots of files tactics * aaa.txt(content is aaa-pass) * bbb.txt(content is bbb-pass) * and scandir. XML CSV MySQL SQLite PEAR::AUTH But no one mentioned about JSON. but I feel JSON is the best way for me. Because it looks easy , and PHP has JSON dedicated built-in fun...

How to programmatically log in to a website to screenscape?

I need some information from a website that's not mine, in order to get this information I need to login to the website to gather the information, this happens through a HTML form. How can I do this authenticated screenscaping in C#? Extra information: Cookie based authentication. POST action needed. ...

How to make IE remember login details?

For some odd reason IE no longer will remember previously typed in usernames/passwords on our login screen. IE8 will remember the username only and then the password still needs to be typed in, but IE6 and IE7 don't fill in either. And of course it works fine in Firefox/Chrome/Safari/etc. (And yes, I've already checked my preferences ...

lots of files tactics have directory traversal security problem?

If I choose lots of files tactics, then I become to have directory traversal security problem? I need to write login system, and lots of file tactics means make lots of id files and use scandir. so the directory would have aaa.txt (contents is aaa_pass) bbb.txt (contents is bbb_pass) ccc.txt (contents is ccc_pass) and when some...

Util-Linux Login not working with shadow password

I downloaded util-linux-2.12b package and and built it. I need to use the login utility in the login-utils folder. But after running it, it gives a "Login incorrect" for every user even with correct username/password. Now it seems the utility is not working with /etc/shadow passowrds. if I disable the shadow passwords by #pwunconv ...

check if user is logged in

Hi, I have some basic code that I place at the header of every page to make sure that the user is logged in. I was hoping someone could take a look at it and give me some suggestions: if ($_SESSION['logged_in'] == 1) { $handle = dbconnect::init; $result = $handle->select()->from('session_id') ...

Result of var_dump($_POST['pass_field']) is a bunch of dashes?

Greetings, I am trying to debug a login script. So I decided to use var_ dump to print out the password. But for some reason say If I type in 'BOSTON' rather then printing 'BOSTON' it prints out six dashes, 1 dash for each character. I haven't encountered it like this before. I'm sure i'm missing something. I tried ob_ start() var_ dump...

How can I set up ASP.NET login to allow the UserName or UserId to be retrieved later on in the session?

Hi, I'm trying to create a login system for my website, I've created a custom login.ascx and when the user clicks [ Login ] a div pops up with the contents of login.ascx. Then after the user enters their credentials, they click on the Login button. They get validated and logged in using this code in the login click function: if( Membe...

customize login in google app engine

I need to add few more options for login and therefor need to customize create_login_url with some html code. Is there a way to add on your code in default login screen of google? ENvironment - python-google app engine. I want to continue having the default google ext class Users behavior to conntinue to be in place. ...

ASP.Net MVC: IAuthorizationFilter/Attribute prefered security check for login?

Is IAuthorizationFilter coupled with an attribute the preferred way to check if a user is logged in before a controller runs it's course? Since I'm new to MVC I've been trying to figure out how to handle situations done in WebForms. The one I ran into yesterday is checking to see if the user is able to view a page or not depending on w...

Web site login in Java + Google App Engine

Hi, I am new to web programming, coming from a video game development background (c++), and am really starting to feel information overload. There are so many competing libraries which all pick something they don't like in some other library, and build an entirely new way of doing the same thing! I am sure there there are good reasons...

Sharepoint popup login windows

Hi, After I log into my sharepoint website, I have to login everytime I access a document from the library. Is there a way to fix this? Thanks ...

Allowing oracle db login only to specific application?

We want to allow DB access (Oracle) to our users only through our own application - let's call it "ourTool.exe", installed locally on the users computers. Currently, the users must provide username/password whenever they start "ourTool". The provided password password gets decrypted and we use username/decrypted-password to finally log i...

How do you write code for ID/password info get from CSV and login process?

I thought that I should use JSON for ID/pass storing format once, but I reserched about it, then I finally found that JSON is too difiicult to me, so now I am considering to use CSV. The CSV file would be like this. File name is id.csv. aaa_id,aaa_pass bbb_id,bbb_pass ccc_id,ccc_pass Left colum is id, and right colum is password an...

Can I put custom code into the standard DotNetNuke Login?

Where can I find the function that handles the login for DNN? I would like to add custom features to the login and I don't see the function in Login.ascx.vb (unless I missed it). There is a tag and a tag that forms the login. I figure one of these has the actual "Login" button, but I cannot seem to figure out where they're coming fro...

What interacts with the DotNetNuke UserLogin function found in the AspNetMembershipProvider?

I'm trying to figure out where the login functionality is that interacts with the UserLogin function of the AspNetMembershipProvider section, there's no references to where the login functionality exists. I know this is the function to intact with the data, I just need to find where in the source code the login is so I can customize the ...

WCF Service login failure unknown username or bad password

i'm new to the WCF service i have WCF service, in which i use to do file operation to a shared drive. when i try writing/reading to shared location, it throws me a Exception saying "login failure unknown username or bad password" i can do file operation in code that works fine, the problem is i have moved all the code to WCF service,...