Welcome, Guest
Username: Password: Remember me
1. The "search..." box above searches the Docs & Forum Posts. The "Search" tab above just searches the Forum Posts. :side:
Please use these to search for your issue *before* creating a new message topic, as your issue may have been previously solved.
2. Please put your Club # and Club Web Address in your Forum Signature (best) OR in each post to get faster support from us.
Click here to edit your signature at the bottom of the Profile Information tab.
3. Our user and admin docs are available at: support.toastmastersclubs.org/doc "There's a doc for that!" ;)
4. There is an "Opt In" Feature for newly added members. The Opt In document explains the strikethrough member information. Click Here to View the Post
5. When posting a New Topic , please include all relevant details and be specific. When did your issue 1st occur? What operating system, browser, & browser version are you using? Did you refresh your browser cache? Are your cookies enabled? Lastly, a screen shot is often helpful.
6. Please abide by the Terms of Use . We are volunteers contributing our spare time. We are happy to assist you, so long as you are respectful and courteous.
7. We are always looking for new FreeToastHost Ambassadors to join our team and support fellow Toastmasters in their use of the FreeToastHost website system. If you are familiar with the system and have some interest, send a Send Us a Private Message.
  • Page:
  • 1

TOPIC:

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #68843

  • SteveTheTechie
  • SteveTheTechie's Avatar Topic Author
  • Offline
  • FreeToastHost Developer
  • FreeToastHost Developer
  • Posts: 13529
  • Thank you received: 3831
This is one of the GDPR / privacy updates.

Now if you log in as a member from a device / IP address that the FreeToastHost system does not recognize as being familiar / valid (previously used IP address), you will receive a notification email to that effect, such as the following sample.... (note that "Test Phrase" below is just a dummy placeholder for where the anti-spoofing phrase would be put)



This email contains a couple of links that you can choose from. If you choose the link that tells the system that the unrecognized device / IP address is valid, then it is added to a stored valid IP address list, and you are routed to the following landing page.



Alternatively, if the login was not from a valid device / IP address, then you are given the option to load the page and dialog to change your member password:

Regards,

Steve James, DTM
FreeToastHost System Developer
Officer Emeritus, Mindful Communicators (Club 1966, District 52) A President's Distinguished Club for each of the last 10 years.

>>> Please put your club number in your forum profile. CLICK here to edit your profile.
Attachments:
The following user(s) said Thank You: Roxie, malikmlwilliams, jknysz
Last edit: by SteveTheTechie.
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #68844

  • SteveTheTechie
  • SteveTheTechie's Avatar Topic Author
  • Offline
  • FreeToastHost Developer
  • FreeToastHost Developer
  • Posts: 13529
  • Thank you received: 3831
FYI: I changed the verbiage from "unknown" to "unrecognized"
Regards,

Steve James, DTM
FreeToastHost System Developer
Officer Emeritus, Mindful Communicators (Club 1966, District 52) A President's Distinguished Club for each of the last 10 years.

>>> Please put your club number in your forum profile. CLICK here to edit your profile.
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #68883

  • SteveTheTechie
  • SteveTheTechie's Avatar Topic Author
  • Offline
  • FreeToastHost Developer
  • FreeToastHost Developer
  • Posts: 13529
  • Thank you received: 3831
Ok, I have made some improvements to how this is implemented.

For new members, they will not have an "IP Address History", so of course the first time they would log in, then they would get one of these notification emails... at least before the change I made just now.

What I have now done is to make this only send out the notification email if the person has something in their "IP Address History"... thus, this should prevent new members from getting these notifications. Instead, the code will just set their "history" to whatever the IP Address is that they are using when they initially set their password.
Regards,

Steve James, DTM
FreeToastHost System Developer
Officer Emeritus, Mindful Communicators (Club 1966, District 52) A President's Distinguished Club for each of the last 10 years.

>>> Please put your club number in your forum profile. CLICK here to edit your profile.
Last edit: by SteveTheTechie.
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #68886

  • malikmlwilliams
  • malikmlwilliams's Avatar
  • Offline
  • Senior Member
  • Senior Member
  • Posts: 49
  • Thank you received: 16
Great security feature. Thanks for this!
Malik M.L. Williams, DTM VC5 EC3 SR1
D115 Area B2 Director, 2020-2021


Educationally Speaking
Club Number: 6970723, District 115, Area B2
educationallyspeaking.toastmastersclubs.org
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69149

  • SteveTheTechie
  • SteveTheTechie's Avatar Topic Author
  • Offline
  • FreeToastHost Developer
  • FreeToastHost Developer
  • Posts: 13529
  • Thank you received: 3831
NOTE: This has now been extended so that this notification also occurs for admin logins from unrecognized devices.

The notification / verification email is similar (the missing parameter issue in yellow below has been fixed):

Regards,

Steve James, DTM
FreeToastHost System Developer
Officer Emeritus, Mindful Communicators (Club 1966, District 52) A President's Distinguished Club for each of the last 10 years.

>>> Please put your club number in your forum profile. CLICK here to edit your profile.
Attachments:
The following user(s) said Thank You: Roxie
Last edit: by SteveTheTechie.
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69205

  • mwfegan
  • mwfegan's Avatar
  • Visitor
  • Visitor
Sir:

At this point, I have logged into the club website for club 3238517 twice since this change was first implemented. Both logins were from the same device and both times I acknowledged the automatic email. I can only come up with two explanations for this behavior:
  1. There is a problem with your tracking software. I am inclined to downplay this possibility, however.
  2. My device does not have a static IP Address. This is the more likely explanation.

In any event, this feature has, so far at least, been more of a nuisance than anything. It will continue as such if I continue to receive these warning emails every time I login to a club web site. This is a concern since I am a member of several clubs and use multiple devices to perform club related work.

Is there anyway to allow a member to opt out of this feature?

Mark Fegan, DTM
Omaha Club 229 (229)
River City Speakers (5779)Road 2 DTM (3238517)
Dynamic Speakers (3261950)
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69212

  • SteveTheTechie
  • SteveTheTechie's Avatar Topic Author
  • Offline
  • FreeToastHost Developer
  • FreeToastHost Developer
  • Posts: 13529
  • Thank you received: 3831
An option that you can disable for this has been added to the notification settings for the member version in the member profile. (see image below)

If you have a good reason to disable this (e.g. dynamic, changing IP address), then fine, but please do not just blindly disable this because you do not like the email notifications that are in place for your data security. Please keep in mind that I added this functionality to address the need to inform our users of data security risks as outlined in the GDPR references we have looked at. If you disable this, then you are assuming any additional security risks... I may add a warning pop-up to the member profile save in the future to emphasize this.

Regards,

Steve James, DTM
FreeToastHost System Developer
Officer Emeritus, Mindful Communicators (Club 1966, District 52) A President's Distinguished Club for each of the last 10 years.

>>> Please put your club number in your forum profile. CLICK here to edit your profile.
Attachments:
The following user(s) said Thank You: malikmlwilliams
Last edit: by SteveTheTechie.
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69214

  • SteveTheTechie
  • SteveTheTechie's Avatar Topic Author
  • Offline
  • FreeToastHost Developer
  • FreeToastHost Developer
  • Posts: 13529
  • Thank you received: 3831
An opt-out checkbox has also been added to the Administator Tab of the Website Settings admin module for the admin version of the notification for admin logins from unrecognized device / IP addresses. (see below)

Same sentiment as above applies... If you disable this, then you are assuming any additional risks. (realizing you have a good reason to disable it)
Regards,

Steve James, DTM
FreeToastHost System Developer
Officer Emeritus, Mindful Communicators (Club 1966, District 52) A President's Distinguished Club for each of the last 10 years.

>>> Please put your club number in your forum profile. CLICK here to edit your profile.
Attachments:
The following user(s) said Thank You: Roxie
Last edit: by SteveTheTechie.
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69405

  • SteveTheTechie
  • SteveTheTechie's Avatar Topic Author
  • Offline
  • FreeToastHost Developer
  • FreeToastHost Developer
  • Posts: 13529
  • Thank you received: 3831
I have improved this functionality by storing a unique device identifier code for your device in a cookie on your device. This cookie will also get checked moving forward in addition to your IP address to determine if the device is unrecognized for your club. This should eliminate issues people have been having with dynamic IP addresses and using their computer in new locations.

If you disabled these notifications via the settings I added (explained above in this thread), I encourage you to enable them again. You may get 1 or 2 notification emails for this after you do, but you should not normally get any after that. Of course, if you clear your cookies, then you should expect to get at least one unrecognized device notification email after that.

The cookie Device UID value is a random string that looks like the following:
Regards,

Steve James, DTM
FreeToastHost System Developer
Officer Emeritus, Mindful Communicators (Club 1966, District 52) A President's Distinguished Club for each of the last 10 years.

>>> Please put your club number in your forum profile. CLICK here to edit your profile.
Attachments:
Last edit: by SteveTheTechie.
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69414

  • Jane Atkinson
  • Jane Atkinson's Avatar
  • Offline
  • Administrator
  • Administrator
  • Posts: 4007
  • Thank you received: 878
Thank you. The repeated warnings were starting to get a little painful. :)

Also, users need to be aware that, as this is a browser cookie, if you're using more than one browser on a device, you'll still get a warning when you use the second (or subsequent) browser, because it doesn't yet have the cookie.
VPE Ernst&Young Achieving Potential, club 1137486 (Auckland, NZ)
FreeToastHost Field Officer, District 112 (Northern New Zealand)

Spare yourself anxiety and Backup your site regularly.

Last edit: by Jane Atkinson.
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69415

  • SteveTheTechie
  • SteveTheTechie's Avatar Topic Author
  • Offline
  • FreeToastHost Developer
  • FreeToastHost Developer
  • Posts: 13529
  • Thank you received: 3831

Also, users need to be aware that, as this is a browser cookie, if you're using more than one browser on a device, you'll still get a warning when you use the second (or subsequent) browser, because it doesn't yet have the cookie.


That is worth considering for people that have dynamic IP Addresses. However, as the check includes both the person's IP address and the Device Identifier in the cookie (either / or), if they used a different browser but it was still the same or a recognized IP Address, they would not get the warning.

I do intend to modify the text in the email message taking into account input from you and others... I welcome any input on how to make the resulting message clear as to not raise undue concern where it is not warranted.
Regards,

Steve James, DTM
FreeToastHost System Developer
Officer Emeritus, Mindful Communicators (Club 1966, District 52) A President's Distinguished Club for each of the last 10 years.

>>> Please put your club number in your forum profile. CLICK here to edit your profile.
Last edit: by SteveTheTechie.
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69424

  • Jane Atkinson
  • Jane Atkinson's Avatar
  • Offline
  • Administrator
  • Administrator
  • Posts: 4007
  • Thank you received: 878
I'm still getting an email every time I log in, even though my IP address hasn't changed and I've set my browser to accept cookies from the site.
VPE Ernst&Young Achieving Potential, club 1137486 (Auckland, NZ)
FreeToastHost Field Officer, District 112 (Northern New Zealand)

Spare yourself anxiety and Backup your site regularly.

The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69425

  • SteveTheTechie
  • SteveTheTechie's Avatar Topic Author
  • Offline
  • FreeToastHost Developer
  • FreeToastHost Developer
  • Posts: 13529
  • Thank you received: 3831
Let me see your cookies

site url followed by ?cookies

Also, which club #?
Regards,

Steve James, DTM
FreeToastHost System Developer
Officer Emeritus, Mindful Communicators (Club 1966, District 52) A President's Distinguished Club for each of the last 10 years.

>>> Please put your club number in your forum profile. CLICK here to edit your profile.
Last edit: by SteveTheTechie.
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69427

  • Jane Atkinson
  • Jane Atkinson's Avatar
  • Offline
  • Administrator
  • Administrator
  • Posts: 4007
  • Thank you received: 878

FTH.AcceptCookies=Y
FTH.MembersPurged=1
FTH.DeviceUID=1vpY7bj7Xm8E
FTH.SID=1Gkh6hK8sqxOMm2epX6BgZjNR
FTH.HoldAdminMsg=1
FTH.AgendasPurged=1
FTH.HidePhotos=1

This one is tohi.toastmastersclubs.org (club 5316066)

I'm also getting on the 123456 test site.
Cookies from there are:

FTH.AcceptCookies=Y
FTH.HideTMAd=1
FTH.MembersPurged=1
FTH.EnforceHTTPS=1
FTH.DeviceUID=1vpZJIbsPV8s

VPE Ernst&Young Achieving Potential, club 1137486 (Auckland, NZ)
FreeToastHost Field Officer, District 112 (Northern New Zealand)

Spare yourself anxiety and Backup your site regularly.

Last edit: by SteveTheTechie.
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69428

  • SteveTheTechie
  • SteveTheTechie's Avatar Topic Author
  • Offline
  • FreeToastHost Developer
  • FreeToastHost Developer
  • Posts: 13529
  • Thank you received: 3831

FTH.AcceptCookies=Y
FTH.MembersPurged=1
FTH.DeviceUID=1vpY7bj7Xm8E
FTH.SID=1Gkh6hK8sqxOMm2epX6BgZjNR
FTH.HoldAdminMsg=1
FTH.AgendasPurged=1
FTH.HidePhotos=1

This one is tohi.toastmastersclubs.org (club 5316066)

I'm also getting on the 123456 test site.
Cookies from there are:

FTH.AcceptCookies=Y
FTH.HideTMAd=1
FTH.MembersPurged=1
FTH.EnforceHTTPS=1
FTH.DeviceUID=1vpZJIbsPV8s



Look at the last notification you got for the tohi club... find the link... does the link have uid=1vpY7bj7Xm8E in it? If so, just click the link to add the device identifier to your valid list. Right now that is not in your valid list for your member record for that club.

Let me know after you have clicked the link... I will verify that the device identifier got added to your member record.
Regards,

Steve James, DTM
FreeToastHost System Developer
Officer Emeritus, Mindful Communicators (Club 1966, District 52) A President's Distinguished Club for each of the last 10 years.

>>> Please put your club number in your forum profile. CLICK here to edit your profile.
Last edit: by SteveTheTechie.
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69429

  • SteveTheTechie
  • SteveTheTechie's Avatar Topic Author
  • Offline
  • FreeToastHost Developer
  • FreeToastHost Developer
  • Posts: 13529
  • Thank you received: 3831
If you do not click the link in the notification email to add the IP Address and the Device Identifier to your valid list stored in the DB, you will keep getting the notifications every time you log in.
Regards,

Steve James, DTM
FreeToastHost System Developer
Officer Emeritus, Mindful Communicators (Club 1966, District 52) A President's Distinguished Club for each of the last 10 years.

>>> Please put your club number in your forum profile. CLICK here to edit your profile.
Last edit: by SteveTheTechie.
The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69430

  • Jane Atkinson
  • Jane Atkinson's Avatar
  • Offline
  • Administrator
  • Administrator
  • Posts: 4007
  • Thank you received: 878
Ah OK. Not really much use to me because my IP address changes frequently.
VPE Ernst&Young Achieving Potential, club 1137486 (Auckland, NZ)
FreeToastHost Field Officer, District 112 (Northern New Zealand)

Spare yourself anxiety and Backup your site regularly.

The topic has been locked.

NEW FEATURE - Notification of Login from Unrecognized Device / IP Address 5 years 10 months ago #69431

  • SteveTheTechie
  • SteveTheTechie's Avatar Topic Author
  • Offline
  • FreeToastHost Developer
  • FreeToastHost Developer
  • Posts: 13529
  • Thank you received: 3831

Ah OK. Not really much use to me because my IP address changes frequently.


It will match on *either* the IP address or the Device Identifier. Does not matter if your IP address changes. Just click the link.
Regards,

Steve James, DTM
FreeToastHost System Developer
Officer Emeritus, Mindful Communicators (Club 1966, District 52) A President's Distinguished Club for each of the last 10 years.

>>> Please put your club number in your forum profile. CLICK here to edit your profile.
The topic has been locked.
  • Page:
  • 1
Moderators: Pamrhtaylor3jliumarc33NotLiabledeedubbleyooNSBPhyllis Kirouac
Time to create page: 0.099 seconds
Powered by Kunena Forum