Changes

Jump to: navigation, search

Login Page

1,462 bytes removed, 17:38, 27 August 2020
Disable External Login Shortcut
:: [[File:Login security.png|700px|border]]
 
===Disable External Login Shortcut===
This function will disable the use of external login shortcut from the URL. '''Because there are security implications to using the external login shortcut (see below), disabling the feature completely is a good preventative measure.'''
 
=====What is the External Login Shortcut?=====
This function allows you to ''bypass ''Login Page Scripting that you have added to the Login Page. However, this technique should only be used when it is completely necessary because there are numerous security implications: 
 
* The URL being opened may be available to other users on the same machine on which you are browsing
* The URL retrieved from the remote machine may be logged elsewhere (i.e. Proxy Server history, DNS server) 
* Your browser history may retain the URL, '''including your password'''
 
The conditions for when you should use this technique include: 
 
* When the '''Login Page Scripting '''is not functioning correctly
* When you ''clone ''a copy of [[SmartSimple]] and the original copy contain a Login Script that prevents you from accessing the clone 
 
<pre> Never create this technique as a browser shortcut because the username and the password are exposed. </pre>
 To employ this method of accessing your SmartSimple [[instance]], you use the following type of URL: 
 
: http://Alias.smartsimple.biz/exlogin.jsp?alias=alias&user=username&password=password
* '''exlogin.jsp '''is case-sensitive
===Disable Session Timeout Alert===
Smartstaff, administrator
3,314
edits

Navigation menu