Trying to find a more Secure Login module
-
-
- Kenneth Elsner
- Rocketeer
- Posts: 53
- Thanks: 1
- Hey rt family, I am builiding a site for missionaries that has to have "secure" section for safety reasons, and I am trying to find a more secure login module than the standard one that come with joomla. Is there anything out there? Or do I have to modify something? Which I have never done before ???
- The question is not: How many people take you seriously? How much are you going to accomplish? Can you show some results? But: Are you in love with Jesus?
~ Henri J.M. Nouwen
-
-
-
- Brian Shea
- Sr. Rocketeer
- Posts: 176
- Thanks: 18
- Web Management, Server Admin, Google Apps Service Provider
-
I'm curious as to how it is not secure. I haven't seen anything about any issues.
To make it 'feel' more secure, how about putting an image of an eyeball just above the login box.
Then instruct them on how to use the new Secure Retinal Scan.
"Enter Login info as usual, then put face up to screen being sure to line up your right eye with the eye on the screen. Blink 3 times for the scan to verify, then click the login button."
Seriously though, what security issue? -
Website Hosting and Management
for the non-technical, non-geeks
G+ Page for Seven Sages , a Google Apps Authorized Reseller
-
-
-
- Arifin FinLy
- Preeminent Rocketeer
- Posts: 17372
- Thanks: 18
-
Hello, Kenneth
May be you can take a look at component SecurityImages 3.0.8
Find it here :
www.waltercedric.com/
-
-
-
- Kenneth Elsner
- Rocketeer
- Posts: 53
- Thanks: 1
- I know that the standard login is fine, but I am dealing with sensitive material that if it was able to hacked, lives would be at risk. So I was hoping that there was something out there where there was a random password creator or something like it. Although I do like the retinal scan idea ;D ;D can someone work on it!~!!!
- The question is not: How many people take you seriously? How much are you going to accomplish? Can you show some results? But: Are you in love with Jesus?
~ Henri J.M. Nouwen
-
-
-
- cmyksteve
- Jr. Rocketeer
- Posts: 21
- Thanks: 0
-
Kenneth Elsner wrote:
I know that the standard login is fine, but I am dealing with sensitive material that if it was able to hacked, lives would be at risk.
Are you hosted on a shared server?
If so, you might be looking at the wrong set of tools- if lives are at risk.
-
-
-
- Stephen O Connor
- Sr. Rocketeer
- Posts: 132
- Thanks: 0
-
Almost all cracks I have heard about are through components and outdated versions of joomla. If lives are on the line, I certainly hope you have your own dedicated server and are using secure connections via SSL. I also hope all your passwords are long, complex, and employ a mix of letters, numbers, and punctuation.
The log in may be among the least of security risks!
I'd have a security specialist audit your entire site! There are consultants that will do that and it is one of the recommended security measures at joomla.org. I'd get over to the security forum there to read and post!
Steve
-
-
-
- Kenneth Elsner
- Rocketeer
- Posts: 53
- Thanks: 1
-
thanks for the feedback everyone. great suggestions for what we are doing? it is tricky stuff. nothing has happened yet, but we want to be careful. Most of the risk involves being imprisonment, beatings and being cutoff from families...all bad! Unfortunately, the whole dedicated server thing is costly and when you are working with limited funds we have to be creative. I'm setting up a deeper site within a site with joomla. There will be no direct access to it unless we let people in and then from there we are rotating the user/password every couple of weeks.
I'll also go and look at the security section on joomla
thanks again - The question is not: How many people take you seriously? How much are you going to accomplish? Can you show some results? But: Are you in love with Jesus?
~ Henri J.M. Nouwen
-
-
-
Not sure if this is worth any?
forum.joomla.org/index.php/topic,78781.0.html
It's mostly for developers etc. but perhaps something makes sense to you as well...
-
-
-
- Dave Goodwin
- Elite Rocketeer
- Posts: 1472
- Thanks: 4
- Howdy!!
-
My suggestion, if lives are on the line, communicate by encrypted e-mail. I don't know if I would trust any website with life or death info.
dave - "I'm an individual, just like everyone else."
-
-
-
- Kenneth Elsner
- Rocketeer
- Posts: 53
- Thanks: 1
- David, we already do some of that. This site is for partners who are stateside who want to stay connected to what is happening in the other countries. Doing this kind of site challenges my creativity for the secure part. We tend to talk in code already and want to try and be a bit more open in the "deeper" section. Thanks for feedback.
- The question is not: How many people take you seriously? How much are you going to accomplish? Can you show some results? But: Are you in love with Jesus?
~ Henri J.M. Nouwen
-
Time to create page: 0.060 seconds