IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [registration]

Registration can refer to: (-) The act of making an identity on a service (like getting a Facebook account) (-) The process of getting credentials from a service (like using OpenID to login to Stack Exchange) (-) The protocol to get information from a system (like getting updates from a Forum you want to follow)

Registration can refer to:

  • The act of making an identity on a service (like getting a Facebook account)
  • The process of getting credentials from a service (like using OpenID to login to Stack Exchange)
  • The protocol to get information from a system (like getting updates from a forum you want to follow)

This tag should be applied when a question is about:

  • A security issue that can occur with a registration process.
  • A question about an attack vector on the registration process.
  • A question security consideration for a registration process.
50 questions
0
votes
2 answers

Activating a user on a website -- why include anything other than an activation code?

Quite often in order to active my account on a website I'll receive an email with this: https://web_site.com/access?uid=1234&secret=456789&login=0123456789&mid=aabbcccdd Why user id, login, mid or other addition parameters? Why not only a secret…
Incerteza
  • 2,177
  • 3
  • 15
  • 22
0
votes
0 answers

Automatic login after registration

After a user has registered a new account I want the new user of my site to be logged in automatically, i.e. an automatic login after registration. The registration is a JavaScript application. When the registration form is submitted the first…
DanielE
  • 701
  • 4
  • 10
0
votes
1 answer

PHP registration script, how to check if request is coming from a credible source

I've got a php registration script, that just takes all the data as a post request. I've got another page which sends that data to the script using jQuery ajax. How can i be sure, that the request came from that page, and not a spammer that would…
Jojo01
  • 101
0
votes
2 answers

Pros and cons of password policy filtering common weak passwords?

We all know the basics "password rules" when a user register on a website, such as: more than 8 characters, must contain an upper case letter, must contain numbers and so on Why don't websites filter (as in not accept) well-known weak passwords…
Mxsky
  • 193
  • 2
  • 12
-1
votes
2 answers

Recommending diceware upon user registration

The Diceware method of password generation is simple, secure and easy to use When registering an account on a website Why do websites not suggest to their users to use the diceware method? Why do websites not include a diceware based password…
user922367
  • 11
1 2 3
4