https://forums.webwiz.net/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Mon, 13 Apr 2026 07:14:12 +0000 Mon, 13 Feb 2006 18:43:48 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.08 360 https://forums.webwiz.net/RSS_post_feed.asp?TID=18321 https://forums.webwiz.net/forum_images/web_wiz_forums.png https://forums.webwiz.net/ https://forums.webwiz.net/login-questions_topic18321_post99401.html#99401 Author: wistex
Subject: 18321
Posted: 13 February 2006 at 6:43pm

That's okay.  Luckily I don't have to go into the WWF admin section too much.  And for some things I've written my own admin pages (i.e. so I can find a user by e-mail for example).]]> Mon, 13 Feb 2006 18:43:48 +0000 https://forums.webwiz.net/login-questions_topic18321_post99401.html#99401 https://forums.webwiz.net/login-questions_topic18321_post99398.html#99398 Author: WebWiz-Bruce
Subject: 18321
Posted: 13 February 2006 at 5:39pm

The only admin functionality removed from the main forum and now only available in the admin section is being able to change forum names and descriptions from the main forum.

These such features are only used rarely and are just another way for a hacker to screw things up.

I will consider removing frames from the admin section, but it not high priority at the moment as I want to get beta 2 out ASAP.
]]> Mon, 13 Feb 2006 17:39:54 +0000 https://forums.webwiz.net/login-questions_topic18321_post99398.html#99398 https://forums.webwiz.net/login-questions_topic18321_post99393.html#99393 Author: wistex
Subject: 18321
Posted: 13 February 2006 at 5:12pm

Also, I heard you mention that you were deleting most admin functionality from the forums and moving it to the admin section for security reasons.  Please don't do that.  What would be better is keeping the admin links like you have now, but require the admin to relogin as the admin if they haven't relogged in as the admin in 20 minutes.   The link could take you to a specific page in the admin section which, of course, requires the relogin that you are talking about.

Also, can we get rid of the frames in the admin?
]]> Mon, 13 Feb 2006 17:12:07 +0000 https://forums.webwiz.net/login-questions_topic18321_post99393.html#99393 https://forums.webwiz.net/login-questions_topic18321_post99392.html#99392 Author: wistex
Subject: 18321
Posted: 13 February 2006 at 5:05pm

That's good.  That CAPTCHA thing was annoying me.  I like the 3rd unsuccessful attempt implementation.

I wouldn't use a different username and password, just track login seperately and not allow auto-login for the admin section.  I think that would be sufficent for admins who forget to logout of the forums or who use auto-login.  Even if someone came to the same computer and tried to do an admin function, they would have to know the password.  And if they know that, your doomed from the start.  The admin question is overkill in my thinking.
]]> Mon, 13 Feb 2006 17:05:32 +0000 https://forums.webwiz.net/login-questions_topic18321_post99392.html#99392 https://forums.webwiz.net/login-questions_topic18321_post99391.html#99391 Author: WebWiz-Bruce
Subject: 18321
Posted: 13 February 2006 at 4:56pm

Also, for beta 2, for the main user login, because users are complaining about the CAPTCHA security images, I have changed the user login page so that the CAPTCHA images only appear after the 3rd un-sucessful login attempt.]]> Mon, 13 Feb 2006 16:56:03 +0000 https://forums.webwiz.net/login-questions_topic18321_post99391.html#99391 https://forums.webwiz.net/login-questions_topic18321_post99389.html#99389 Author: WebWiz-Bruce
Subject: 18321
Posted: 13 February 2006 at 4:54pm

Thats what is putting me off changing the system to have a sepporate password for the admin section.

As it is not accessed often people are going to forget the password, leading to loads of 'I've forgotten my admin password' support questions.

Although another idea I have had is to use an admin question and awnser, so when entering the admin section, the admin has a quetsion they have set themselve's, such as, 'what is your favourite colour?'. That way hopefully the admin wouldn't forget the anwser.
]]> Mon, 13 Feb 2006 16:54:14 +0000 https://forums.webwiz.net/login-questions_topic18321_post99389.html#99389 https://forums.webwiz.net/login-questions_topic18321_post99388.html#99388 Author: wistex
Subject: 18321
Posted: 13 February 2006 at 4:49pm

For the average admin, I wouldn't have a different password for the admin section.  Since most admins don't access the admin section that often, that's asking for problems with forgotten admin passwords.  But for me it works out okay because I use different passwords for regular logins and admin logins anyway.]]> Mon, 13 Feb 2006 16:49:37 +0000 https://forums.webwiz.net/login-questions_topic18321_post99388.html#99388 https://forums.webwiz.net/login-questions_topic18321_post99378.html#99378 Author: WebWiz-Bruce
Subject: 18321
Posted: 13 February 2006 at 3:44pm

Although I have yet to go as far as having a sepporate password for the admin section of the forum I have changed the login procedure for version 8.

The next beta version will be testing a new admin login fetaure, whereby auto login is not enabled for the admin section and the user needs to re-enter the admin password to enter the admin section.

They will also need to re-enter the admin password to enter the admin section after 20 minutes of in-activity, if they forget to logout.
]]> Mon, 13 Feb 2006 15:44:44 +0000 https://forums.webwiz.net/login-questions_topic18321_post99378.html#99378 https://forums.webwiz.net/login-questions_topic18321_post99370.html#99370 Author: wistex
Subject: 18321
Posted: 13 February 2006 at 3:05pm

Borg, what I do with one of my sites is this:  I have an admin username and password for the forums & website (integrated login for entire website) and then I have a different username and password for accessing my non-WWF admin pages.

Also, for convenience, I have links to "Edit this Page," "Delete this Page," "Edit this Recipe," and things like that on the main pages but only visible when an Admin is logged on.  When you click on the links it takes you to a page on the admin section where you can take those actions but asks for the username and password if it hasn't already been entered in the last 15 minutes.

This means that even if I am still logged in to the website, people can't access most of the admin functions by clicking on the admin links (unless they came within 15 minutes of me accessing the admin part of the website with me stepping away from the computer and me forgetting to lock the computer... which I am in a habit of doing, by the way.)

That way it gives me the convenience of administrating the website directly from any page on the website (i.e. I don't have to go into the admin section and do a search for the page I was just looking at) and yet it also makes the admin functions more secure by having more than one username and password for the admin.

user name
user-name
surname
Usenet
misname
Edit...
Ignore all
Add to dictionary

lo gin
lo-gin
log in
https://forums.webwiz.net/login-questions_topic18321_post99370.html#99370 https://forums.webwiz.net/login-questions_topic18321_post99066.html#99066 Author: skbohler
Subject: 18321
Posted: 08 February 2006 at 4:25pm

OK, thanks.]]> Wed, 08 Feb 2006 16:25:13 +0000 https://forums.webwiz.net/login-questions_topic18321_post99066.html#99066