PDA

View Full Version : Force reauthentication


jchamber2010
08-09-2009, 01:53 AM
I'm creating a system that needs to be slightly more secure than the normal forums, IE. CANNOT be access via the normal cookie save. Therefore I've set out to find a way that when a user enters the system it asks them to enter their password again (to verify they are who they say they are), and then sets a session for say 15 minutes of inactivity; or when their browser closes (which ever comes first).

Here's my dilemma:

What I'm looking for is basically that box that pops up every now and then when you try to delete more than 1 post on your forums. The box that says something like "Please verify the authenticity of your request by entering your password below".

Any help in the solution of this problem would be apreciated.

Dismounted
08-09-2009, 10:26 AM
Do you mean something like the "Inline Moderation Authentication" option that already exists? ;)

IIRC, it is under vBulletin Options > General Options.

jchamber2010
08-10-2009, 12:03 PM
No, I was using that as a description for something I want elsewhere in a mod that I'm creating. What I'm creating is an email account creation script, but I also want users to be able to close their email, and delete their account. However, I don't want people accidentally deleting their accounts, or people deleting their accounts from a computer that has a stored cookie. The only way that I can think of solving this is to have them relogin, like the Inline Moderation Authentication does.

Thanks.

Marco van Herwaarden
08-10-2009, 12:11 PM
Or generate a delete link that is sent by email to confirm.

jchamber2010
08-15-2009, 02:01 AM
That might work, but I'd still like to be able to just simply have the relogin box, and once they do that it deletes their email.