Difference between revisions of "Bypassing the Login Page"

From SmartWiki
Jump to: navigation, search
 
(Undo revision 35822 by Efu (talk))
 
(17 intermediate revisions by 7 users not shown)
Line 1: Line 1:
Bypassing the Login Page
+
If you need to bypass '''Login Page Scripting''' that you have added to the Login Page, you use the following type of URL:
From SmartWiki
 
Jump to: navigation, search
 
  
If you need to bypass Login Page Scripting that you have added to the Login Page, you use the following type of URL:
+
http://Alias.smartsimple.biz/exlogin.jsp?alias=alias&user=username&password=password
  
http://Alias.smartsimple.biz/exlogin.jsp?alias=alias&user=username&password=password
+
* Note: '''exlogin.jsp''' is Case Sensitive
 +
 
 +
 
 +
'''IMPORTANT:''' There are security implications with using this technique. See below.
  
    * This address is Case Sensitive
 
  
 
You will need to use this technique when:
 
You will need to use this technique when:
  
    * The Login Page Scripting is not functioning correctly
+
* The '''Login Page Scripting''' is not functioning correctly
    * When you Clone a copy of SmartSimple and the orginal copy contains a Login Script preventing you from accessing the Clone.  
+
* When you '''Clone''' a copy of [[SmartSimple]] and the original copy contains a Login Script preventing you from accessing the Clone.
 +
 
 +
Note: this technique should not be used to create as [[Browser|browser]] shortcut, as the [[Username|username]] and [[Password|password]] are exposed.
 +
 
 +
 
 +
'''This method of accessing your instance can be disabled in your [[Global Settings]] > [[Security Settings]].'''
 +
 
 +
==Security Implications==
 +
Using this technique can expose your password. Accordingly it should only be used when necessary.
 +
 
 +
* '''You should change your password immediately after using this technique'''
 +
* The URL being opened may be available to other users on the same machine on which you are browsing.
 +
* The URL retrieved from the remote machine may be logged elsewhere (ie: Proxy Server history, DNS server).
 +
* Your browser history may retain the URL including your password.
 +
 
 +
To remove these possible security concerns this method of accessing SmartSimple can be disabled via [[Global Settings]] > [[Security Settings]].'''
  
Note: this technique should not be used to create as browser shortcut, as the username and password are exposed.
 
  
Category: Global Settings
+
[[Category:Global Settings]][[Category:System Management]][[Category:Security]] [[Category:Login Pages]]

Latest revision as of 15:15, 5 April 2022

If you need to bypass Login Page Scripting that you have added to the Login Page, you use the following type of URL:

http://Alias.smartsimple.biz/exlogin.jsp?alias=alias&user=username&password=password

  • Note: exlogin.jsp is Case Sensitive


IMPORTANT: There are security implications with using this technique. See below.


You will need to use this technique when:

  • The Login Page Scripting is not functioning correctly
  • When you Clone a copy of SmartSimple and the original copy contains a Login Script preventing you from accessing the Clone.

Note: this technique should not be used to create as browser shortcut, as the username and password are exposed.


This method of accessing your instance can be disabled in your Global Settings > Security Settings.

Security Implications

Using this technique can expose your password. Accordingly it should only be used when necessary.

  • You should change your password immediately after using this technique
  • The URL being opened may be available to other users on the same machine on which you are browsing.
  • The URL retrieved from the remote machine may be logged elsewhere (ie: Proxy Server history, DNS server).
  • Your browser history may retain the URL including your password.

To remove these possible security concerns this method of accessing SmartSimple can be disabled via Global Settings > Security Settings.