login

.NET login control inconsistent

I have the following login control using .net membership: <asp:Login ID="l_Main" runat="server" MembershipProvider="SqlProvider" DestinationPageUrl="Pages.aspx" /> Config: <authentication mode="Forms" > <forms path="/ad" loginUrl="/Admin/Login.aspx" name=".ASPXFORMSAUTH" /> </authentication> <membership default...

Implementing authentication in an webpage through WinForms app

and here comes the situation... A customer has installed my super dooper winforms application. The username and password are authenticated on the app startup with my MSSQL server. I would like to redirect the user in my webpage and have him as "logged-in" when he clicks the "Update subscription" button within my app (without the need o...

Stop Submit With Empty Input Values

Im Looking for a simple solution to stop a login form from submitting with empty input fields. The code for the form is below. I would like to use a simple Javascript soluiton if possible. <form id="login" method="post" action=""> <input type="text" name="email" id="email" /> <input type="password" name="pwd" id="pwd" /> ...

To understand a line about a login -variable in a session

What does the following line mean? Put the boolean variable isLogin to your session such that you check the session each time your user goes to the secured site. I would like to know how you can put a variable to a session. I know at the abstract level that session is a semi-permanent interactive information interchange, al...

Adding command button to Windows Logon screen

I want to implement a self reset password functionality for Windows users. When the Logon screen prompts the domain users should be presented with a forgot password button which will take the user to a passwrod reset wizard. So the problem is how to add a command button to the standard windows logon screen. ...

To implement Reddit's login feature in Rails, would I need to use RJS and remote_form_for?

A feature in Reddit that I like is the ajax login - you enter your username and password on the front page and you never leave the front page even if there is a login error. If your login succeeds, I think it simply does something like a flash[:message] onto the front page to say "login successful". If I wanted to do this in Rails, would...

Https, Php secure login page?

Hi, I am new to php, I can do a simple login page, e.g create form, submit form, process and authenticate in a php page and so on. I read somewhere on the internet, and saw some big companies like banks, google and yahoo, their login form is in "https" not "http". So I try google what is "https" thing. Well, I could not say I fully unde...

Magento "My Account" link section

I'm currently developing a helpticket module for magento. After you login an go to My Account you see a menu on the left side. I already managed to get a link to my module in that menu. I now want to show this menu when you open my module. Does anybody has some information about this issue? ...

Design of database to record failed logins to prevent brute forcing

There have been a couple of questions about limiting login attempts, but none have really discussed the advantages or disadvantages or different ways of storing the record of login attempts (most have focused on the issue of throttling vs captchas, for instance, which is not what I'm interested in). Instead, I'm trying to figure out the ...

Confirm NT username+password in ASP.NET

I want to be able to authenticate an NT username/password combination through an ASP.NET site, completely separate from the username that's recognized through Request.ServerVariables("LOGON_USER") and the like. There are accounts that will have the rights to completely override others, but the users will still have to enter the correct ...

How to disable redirection to login page in JBoss, when the session expires?

I'm using JBoss AS 5 and JSF+Seam for my web application. I'm using FORM authentication and have defined the login page in "login-config" tag in web.xml file. I also have a filter which will check for the session expired condition and redirect the user to a session_timed_out page. Now the issue I'm facing is that when the session expir...

Is a secure domain (HTTPS) totally necessary for a sign in page?

It seems that most major websites will use a secure domain, but there are a few major exceptions, notably facebook and twitter. The benefits of using a secure domain are obvious I suppose - your login credentials are never transmitted in plain text. So how do major sites like facebook and twitter get away with it? If a secure doma...

PHP\MySql Multiuser System Backend Structure

Hey guys I'm writing a multiple user log in system using PHP and MySql, the way i have done it in the past is to have a central "processing" file that will handle all of the code on the backend, like logging in, messaging other users etc..., I've used forms with hidden fields to define which action to perform in the processing file. he...

Load Webpage with login in java

Hi community, I have a webpage http:/ /www.somesite.de This webpage gives me a file I want to download, but before I can do it I have to login with a username and a password. Can anyone tell me where I have to look for best practices for such a problem? Thanks in advance Sebastian ...

How Does Google Global Login Work?

Whenever I login to one Google service, I am automatically logged in all their other websites on different domains. What I want to know is how they are able to access the disparate cookies and sessions that belong on another domain. I tried searching online but I couldn't find any information. I could probably pull out firebug and tr...

Selling Monthly Online Services

Hi Everyone: I am wondering if anyone knows of a system (open source or otherwise) that will allow my clients to sell their online services per month/year/etc. In other words, the user buys a month subscription, can log in, and access anything that my clients choose for them to see. Thanks for any help. ...

WCF Security and what to use in this situation.....

I have a client/server application that has many client machines and one service on a server..... On the server side I will be using a Windows Service to host my WCF service. The service will be passing data across the internet to the client machines. I figure I will be using wsHttpBinding with message level security, which requires a...

To redirect an user back to index.php after a handler

I put "username" and "password" to a form of mine. The action starts up a handler.php. The user sees then only a white page (handler.page) if he does not reload his browser at handler.php. If he does, the handler puts him to back to index.php. I would like to put the user automatically back to the homepage after being at handler.php wh...

Find out the current user's username - when multiple users are logged on

"User A" is logged on My application recognizes Environment.Username as "User A" Now in Windows, I click on Switch user ... "User B" logs on "User A's" processes are still running Application run by "User A" still says Environment.Username is "User A" I want the application to recognize that the currently logged on user (currently acti...

Best way to implement "Remember Me" check box in WinForms / WPF

I want to add a "Remember Me" check box to the login form of my WPF App. What's the best way to do this? Currently the app logs in via a websevice call that returns an authenticated token that it uses for subsequent calls. Should I simply two-way encrypt and store this token somewhere in the files system? ...