2 Replies Latest reply on Feb 10, 2017 4:04 AM by wimdecorte

    Adjusting the WebDirect login dialog box text

    duncanbaker

      Hey

       

      Has anyone successfully (and without screwing things up) ever changed the text in the Log In dialog box for WebDirect? I realize this is 'under the hood' but curious if it's a simple thing or not and if so where it lives. Image below to confirm where I mean. Many thanks.

      2017-02-09 16_18_32-.png

        • 1. Re: Adjusting the WebDirect login dialog box text
          Johan Hedman

          That is one thing that you would not like to do any changes to. It will most definitely be very bad when you do updates of FileMaker Server.

           

          If you do not want to have that dialog for login, you have to let your users in without FileMaker login and then create your own Custom Dialog where you control if users are aloud to access your system. This is not a "best practice" for security, but it works.

          • 2. Re: Adjusting the WebDirect login dialog box text
            wimdecorte

            Johan Hedman wrote:

             

            If you do not want to have that dialog for login, you have to let your users in without FileMaker login and then create your own Custom Dialog where you control if users are aloud to access your system. This is not a "best practice" for security, but it works.

             

            It is more than just 'not best practice'.  It is the single biggest security risk for many FM solutions.  Bar none.  Circumventing the FM security model because you don't like how the login dialog box works is very often a recipe for disaster.

             

            Granted, WebD offers fewer opportunities to hijack an auto-login scenario, but only if if the auto-login account also does not have rights to log in with regular FMP.

            1 of 1 people found this helpful