Page Comparison

This Chapter will familiarize you with tools and features that help you set up and operate panel websites and language versions according to your requirements.

• This Chapter shows you how to manage your panel websites and language versions. This includes, for example, deactivating a website and assigning access rights to user teams.
• It will be explained how to create additional websites and language versions.
• The Chapter provides an overview of the varied configuration options offered by EFS Panel. There are numerous options
  – for the entire panel
  – for individual websites
  – for individual language versions.
• Panel sites can usually be accessed via one or more dedicated domains.It will be explained how you can match domain and panel site via the EFS People GUI and which further steps are necessary.
• Automated tests help you avoid making mistakes when configuring websites.

Managing Websites and Language Versions

In the Website menu you can manage the different websites and language versions.

The following info and actions is displayed for a website:

Delete: This function allows you to delete an entire website. You cannot delete a default website.

The following info and actions are displayed for a language version:

• Name: Indented below the website, you can find the related language version(s). A click on the name opens the Website editor of the language version.
• Target pages: Pages to which visitors are automatically taken in different situations, if they click on or enter the panel URL.
• To-do marker: Allows you and your colleagues to store notes, e. g. on the degree of completion of a website, directly in EFS.
• Default language version: yes / no
• Only in Panels with Social Insight Connect: Facebook: For language versions with an activated Social Insight Connect app, a red icon is displayed. Via this icon, you can access the configuration dialog of the app.
• Online - Set language version offline / Offline - Set language version online: The button displays the status and allows you to activate or deactivate the language version. It is not possible to put the default language version of the default website offline.

• Preview: Opens the language version in a pop-up window.

• Excel export: Allows you to export text elements for external editing.

• Upload file: Allows you to import externally edited text elements.

• Set rights: You can restrict the access rights of user teams to individual language versions.

• Test language version: Allows to check the configuration automatically.

• Copy language version: This function allows you to copy an entire language version.

• Delete: This function allows you to delete an entire language version. You cannot delete a website’s default language version.

Putting a Website or Language Version Online/Offline

Using the buttons Online - Set website / language version offline and Offline - Set website / language version online, you can put the various websites and language versions online or offline.

• If a website is offline, none of its language versions are accessible to visitors.
• If a language version is offline, then it is no longer accessible to visitors.

It is not possible to put the default website and its default language version offline.

Defining Access Rights on Panel Sites or Language Versions

You can limit access to the different web sites and language versions by assigning object rights to specific user teams.

To do so, choose the desired panel site or language version and select the Set rights icon. The standard rights dialog opens, in which you can assign different teams read or write rights.

The read or write rights refer to all those website or language version specific ACL rights, which were assigned to the team in general. If the team has for example general write rights on the news functions (news_admin), then it can edit the news only for those language versions for which it has write rights.

Editing Text Elements of the CMS Externally

Key text elements of the CMS can be exported for external editing or translation. Afterwards, the changed content is imported back into EFS. External editing allows to add new text elements, too, which is particularly useful when upgrading panel installations:

• it is possible to create new text elements. This is of special importance if, after upgrading a panel to a new version of EFS, additional wildcards or messages are needed.
• It is up to you to decide if you want to add new text elements during import, or if existing texts should be updated as well.

• The export file can be imported into any language version of the installation. Thus, you can use one export file to create new text elements in several language versions.

The following text elements can be edited externally:

• Wildcards for text elements
• Notifications
• Error messages

Exporting content

1. Switch to the Website menu to make an export.
2. Choose the desired language version. Open the export dialog by clicking on the Excel export icon.
3. Choose the contents which you would like to export.
4. Confirm by clicking on Export.
5. The export file is created. You can download it by clicking on the file Copy file to local PC.

Importing contents

1. Switch to the Website menu to make an import.
2. Choose the desired language version. Open the import dialog by clicking on the Upload file icon.
3. Choose the edited Excel file from the hard drive of your PC.
4. To update existing wildcards and messages, activate the “Update existing datasets” checkbox. If you want to add new text elements, while keeping the old ones as they are, make sure the checkbox is deactivated.
5. With Import the import operation will be triggered.

Editing contents externally

The exported XLS file contains the wildcards and messages of the CMS, various meta information and the empty column “new content” in which the required new texts can be entered. The following tables 15.1 and 15.2 explain the meaning of the columns in detail.

To realize your changes, please proceed as follows:

• To change existing text elements, simply enter the appropriate new text in the “new content” column.
• To create a new wildcard, add a new row and add the required data.
• To create a new notification or error message, you have to add two new rows:
  • The text type of the first row is “header”. For a message of type „error message“, you can optionally enter a header in this row.
  • The text type of the first row is “body”. It contains the message itself and is obligatory.

Table contents:

In this column, you define if the respective row contains header or body of a message.

Entry in the column “section”:

Creating Websites and Language Versions

You can create new websites as well as new individual language versions. However, their configuration and page structure must be created from scratch. Alternatively, you may copy an existing website or a selected language version, adopting the respective settings and contents. This is advisable, for example, if the copied version is to differ only slightly from the original or if you need a copy for testing purposes.

Creating a New Website

1. Switch to the Website menu.
2. Click on the + Website button.
3. Enter the name of the new website.
4. Select the appropriate functional scope.
5. Confirm by clicking on Create website.

A new website which already has a default language version will be displayed. In the default version “Standard Layout // From scratch”, however, neither are configured nor do they contain pages or templates, merely a few settings are preset by default.

Creating a New Language Version

1. Switch to the Website menu.
2. Click on + Language version.
3. Specify the website you wish to assign the new language version to.
4. Enter the name of the new language version.
5. Confirm by clicking on Create.

A new language version will be created. This language version is neither configured nor does it contain pages or templates.

Copying an Existing Website

1. Switch to the Website menu.
2. Search for the website you wish to copy. In the “Actions” column, click on the Copy website icon.
3. Enter the name of the new website.
4. Specify the existing content you wish to copy. You can copy messages, wildcards, page modules, templates and includes, form configuration, news items, FAQ, quick polls, bulletin boards, mail templates and bonus items.
5. Specify the language version you wish to copy.
6. Confirm by clicking on Create.

Copying an Existing Language Version

1. Switch to the Website menu.
2. Search for the language version you wish to copy. In the “Actions” column, click on the Copy language version icon.
3. Enter the name of the new language version.
4. Specify the existing content you wish to copy. You can copy messages, wildcards, news items, mail templates, bonus items, quick polls, page modules, templates and includes, form configuration, FAQ, forums, download sections, discussions, chats and blogs. In language versions with Social Insight Connect, the settings on the tab Facebook configuration are not copied, Social Insight Connect will be deactivated in the copy.
5. Confirm by clicking on Create.

General Settings

EFS Panel offers a wide variety of configuration options, both global options that apply to the entire panel installation and options that apply to individual websites and language versions. These features are presented in detail in the following.

Global Settings for the Entire Panel

In the Website → Global configuration menu you can define parameters that apply to the entire EFS People installation.

Global settings for all websites

Global redirection URL for all websites

Occasionally, clients may want to use the panelists administration of EFS People and conduct their surveys with EFS People while using an external website as their panel’s address.

In this case, the global redirection allows you to redirect all traffic from websites of the specific panel installation to your desired alternative domain.

• The panel websites will be de facto inaccessible.
• Panel surveys and master data survey, however, will remain accessible.

Select whether a header with X-Frame-Options should be sent to the client

Today, almost any browser makes it possible for web applications to sent a HTTP header „X-Frame-Options“ which declares to the browser if a certain website is allowed to be shown in a frame or not.

Possible value options are:

• „Do not send“: By mentioned default value the header is not sent, which effectively leads to a permission of framing.
• „Deny“: The header is sent and will prevent any framing.
• „Sameorigin“: The header is sent and will allow framing only by website of the same domain.

Session settings

Preallocation in the standard panel

Length of panel session validity (in seconds)

In this field, you can set the session period for panel visits.

Cookie type to be used when the panel website is visited

You have the option not to place cookies when your website is visited.

The following options are available:

• Use normal cookies: These are the conventionally used cookies. They can be read by HTTP or Javascript.
• Use HTTP-only cookies: These cookies were also available in earlier versions of EFS. They can be read by HTTP but not by Javascript. Therefore this setting provides a higher degree of security. Browserbased scripts cannot access the cookie data.
• Do not use cookies: When using this option, authentication is done via the SES parameter in the URL or via HTTP POST data.

The “HTTP-only cookies” option is preset on new installations.

Please note: The described settings only apply to the panel website.

• The cookie settings for EFS surveys are set in the respective project.
• The cookie settings for the EFS installation itself are configured by QuestBack Support. On new installations, HTTP-only cookies are used per default.

Mode to determine the language version

When a visitor navigates to the panel website, EFS will automatically try to determine and to open the most appropriate language version. It is up to you to decide which procedure is to be employed:

• Domain name is used only if language version was not previously determined: This is the default setting reflecting conventional behavior where the system first tries to evaluate information from previous visits (session, cookies) and request parameters. The domain name that is called up serves as a fallback.
• Always use domain name: When this option is selected, the system will first check whether the domain name being used is assigned to a particular language version of the CMS. If so, this language version will be used. Otherwise, the older algorithm will be used as a fallback.

Example:
A website visitor has visited the French version (www.example.fr) of the website. Now he enters the domain name of the English version (www.example.co.uk).

• When set to default, EFS will analyze his session or cookie settings to find out that he already visited the French version
  before, and consequently display the French version.
• If the second option has been selected, the explicitly requested English version will be displayed.

Domain name is only used if language version was not previously detected

If the session parameter is not automatically appended to URLs, the panel will only work with cookies enabled.

Append session parameter automatically to URLs

Login

Preallocation in the standard panel

Panel login is possible for panelists with the following panel statuses

With this option you can define the statuses under which the panelists are allowed to log in.

For example, you may allow a temporarily admitted candidate to already log in.

If all panel statuses are deselected, the internal website areas become inaccessible while surveys remain accessible irrespective of the website.

Please note: The panel statuses are not website-specific, but all panelists are described by the same panel statuses. Therefore, the selected setting will apply to all websites of the panel installation.

It is possible for all panelists to log in with the exception of those with a “deleted” status and those with user-defined statuses.

Participation in panel surveys is possible for panelists with the following panel statuses

With this option you can define the status under which the panelists are allowed to participate in panel surveys (given that they belong to an appropriate sample, of course).

Participation in master data surveys is possible for panelists with the following panel statuses

With this option you can define the status under which the panelists are allowed to participate in master data surveys (given that they belong to an appropriate sample, of course).

Direct panelists to the website/language version they´ve been assigned to after login

This setting ensures that when logging in, panelists will be directed to the website/language version they are assigned to.

Please mind: This option influences the behavior of the system during the login process, it does not control access to language versions in general. If you want to control access to specific pages, please go to the Page configuration tab and restrict access to appropriate panelist groups.

Activate brute force login protection

This option activates the brute force protection for the panelists’ personal area.

Brute force account deactivation time (in seconds)

In this field, you specify for how long the panelist accounts are to be suspended upon triggering the brute force protection.

Please note:

• The messages "brute_force" and "brute_forced", used in case of a suspension, can be edited in the Website → Standard content → Messages menu.
• Manual reactivation ahead of time is not possible.

Number of allowed failed login attempts

In this field, you specify how many failed attempts are allowed. If the specified number is exceeded, the respective panelist account will be suspended.

Ab EFS 9.1: Password security

With EFS 9.1, password encryption for panels was adjusted according to most recent security standards. In addition to the features described below, this includes the following mail wildcards in the standard scope:

• #password_recovery_url#: “Reset password” link.
• #u_sec_quest#: Security question.
• #u_sec_quest_answer#: Answer to the security question.

The appropriate mail template is set in the function module.

In the period specified (see below), the password can be changed only once.

Password change timeout

Validity period for the “Reset password” link

Optionally, a security question can be used.

• If you want to use this feature, please add appropriate entry fields and RegEx checks to the registration and “Change data” forms.
• Dedicated participant variables “u_sec_quest” and “u_sec_quest_answer” (newly introduced with EFS 9.1) allow to store security question and answer.

This option activates brute force protection dedicated to the answering of the security question.

Brute force account deactivation time (in seconds)

In this field, you specify for how long the panelist accounts are to be suspended upon triggering the brute force protection via the security question.

Please note:

• The messages "brute_force" and "brute_forced", used in case of a suspension, can be edited in the Website → Standard content → Messages menu.
• Manual reactivation ahead of time is not possible.

Number of allowed failed login attempts

In this field, you specify how many failed attempts are allowed for answering the security question. If the specified number is exceeded, the respective panelist account will be suspended.

Profiles

Optionally, the visibility of master data may be made configurable.

In order to keep the profile settings form clearly structured despite large numbers of master data variables, these variables are grouped. The panelists can then define the visibility for each group.

In this section you can assemble the groups. Use the Ctrl or Shift keys to select multiple variables for each group.

Performance

Preallocation in the standard panel

Time period that should be taken into account when calculating “panelists online” (in seconds)

Only logged-in panelists should be taken into account for calculating “panelists online”

Locale settings

Preallocation in the standard panel

Sunday or monday can be selected. From EFS 8.2, you can choose any day of the week.

The setting affects the calculation of the upper limit of friends to be recruited per week and the display of the survey of the week, as long as you do not select another day for a specific language version.

Time zone for data display on panel pages

Registration

URL parameters taken into account when checking for invite keys (comma separated)

Rating settings

Panelists are allowed to change their ratings

In this field, you can specify whether the panelists are allowed to subsequently change their ratings.

From EFS 10.3: Panelists are allowed to revoke their ratings

In this field, you can specify whether the panelists are allowed to revoke their ratings.

Tagging settings

Maximum number of tags per post per panelist

Maximum number of user tags per panelist per language version

Maximum number of tags per minute

Auto-tag hashtags in posts

Only with Content Search activated: Search settings

Modules available in search

In the drop-down list, you can select the content types which should be covered by search.

Available content types: blogs, discussions, downloads, forums and news.

Modules available in search

Maximum number of results to be displayed in the “All results” list per content type.

Maximum number of search results in summary

Maximum number of results to be displayed in the summary per content type.

Settings for Individual Panel Websites

In the Websites menu, click on the name of the desired website.

Website settings

Preallocation in the standard panel

In this field, you can specify the default language version.

• The default version is displayed if visitors cannot yet be assigned to a language version (i.e. they have not yet expressly chosen a language, there are no cookies containing information on previous visits, a language version has not been assigned to the domain accessed and the site_id cannot be accessed before login to a possible panelist account).
• The default version cannot be deleted.

Only for installations with several websites and/or language versions: Choose this website as the default installation website?

In this field, you can specify the default website.

• The default version is selected where there is no information regarding the website and language version to be assigned to a user.

Login

Preallocation in the standard panel

Authentication method for panel login (this setting applies to all panel sites)

You can choose between the options:

• Login with e-mail address and password
• Login with account and password
• Login with e-mail address and password or account and password

Login with e-mail address and password

Maximal permissible load on login

This setting temporarily disables login to the website, if the server load exceeds the specified value.

Please enter “0”, if you do not wish to disable login during high load phases.

Update panelist’s IP address on every login

If you activate this option, panelists’ current IP address will be entered in their data record every time they log in. If you do not activate this option, the panelists’ IP address will only be collected upon registration.

Individual Language Version Settings

1. Access

Starting in Website editor, click on Website settings, then go to the tab General settings.

Preallocation in the standard panel

• HTML
• XHTML-MP
• WML

Target page logged out section

Page you are usually automatically taken to when you click on the panel URL.

Target page logged in section

Page logged-in panelists are usually automatically taken to when they log in.

Page panelists are taken to when they log in for the first time after registration.

Page on which visitors can choose a language version.

This page is used,

• if visitors cannot yet be assigned to a language version (i.e. they have not yet expressly chosen a language, there are no cookies containing information on previous visits and the site_id cannot be accessed before login to a possible panelist account) .
• if, at the same time, no other details are available as to which language visitors are to see. For a panel with several domains you could, for example, specify that visitors who access the domain “.de” are automatically taken to the German version, whereas visitors who access the domain “.com” are shown the language selection page.

Used to determine a user’s language when no cookie is set and no other language information is available:

Many browsers transmit a language code in the value „HTTP_Accept_Language“, e.g. „en“ for English speaking users or „de_DE“ for German speaking users from Germany.

In this input field you can specify the language codes for which (in the absence of other data) the current language version shall be displayed.

Output

Preallocation in the standard panel

Output encoding of the panel site

This field is used to set the required character set for the language version.

Repeat main menu items in second level navigation

Optionally, you can display the main menu items a second time in second level navigation.

Profiles

Preallocation in the standard panel

Profile visibility for new panelists

Via this field, you can define whether personal data of new panelists should be visible for other panelists and visitors before these candidates log in and set up their profiles.

“Show profile to others” deactivated

Thumbnail size for profile pictures (in pixels)

Use this field to define the size of thumbmails for profile pictures.

Surveys

Preallocation in the standard panel

Survey of the week (previously: Survey that shall be linked...)

This survey is displayed from the first day of the week onwards, until either the panelists have participated or the week is over.

• Wildcard {$env.weekly_survey}

To define the starting point of the weekly intervals, select the first day of the week in the global website configuration or in the settings of a specific language version

User-defined labels 1 to 3

You can highlight selected surveys additionally with specific notes or icons. This makes sense, for example, in the case of new surveys, surveys with special incentives, or regular weekly surveys.

Bonus points

Preallocation in the standard panel

Name of bonus points (short form)

Can be inserted and output via the {$env.credit_name}) wildcard.

Name of bonus points (long form)

Can be inserted and output via the {$env.credit_name_long} wildcard.

Label for “no bonus points available”

Will be output when a respondent has not earned any bonus points yet.

Allow multiple invitation of the same member in promotions

Text to be entered in the bonus points history when redeeming points.

Is used to document the history of redeemed points. Use the wildcard %s to insert the name of the request bonus item.

The name of the wildcard for a link to the panel, which is inserted into the e-mail form for “Tell-a-friend” campaigns. When the email is dispatched, the wildcard will be replaced with a clickable link.

Registration

Preallocation in the standard panel

Minimum password length checked on sign up

A minimum number of characters can be set for the password.

Maximum password length checked on sign up

A maximum number of characters can be set for the password.

You can impose restrictions on the panelists regarding their choice of passwords. The following check algorithm combinations are available:

• No restrictions: The password only has to comply with the length restrictions defined on the same tab.
• Letters and numbers: The password must contain at least one letter and one number.
• Letters and either numbers or special characters: The password must contain at least one letter and either one number or one special character.
• Case sensitivity and numbers: The password must contain at least one capital letter, one lower case letter, and one number.
• Case sensitivity and either numbers or special characters: The password must contain at least one capital letter, one lower case letter, and either one number or one special character.

Number of bonus points granted on registration

If you wish to award initial bonus points for registration, you can specify the number in this field.

Text to be entered in the bonus points history when registering

Way of entry that is set on registration

Contact form

Preallocation in the standard panel

This and the following text elements are used in the e-mails sent to the panel operator via the contact form.

Text in feedback mails: “topics”

Locale settings

Preallocation in the standard panel

Name of the panel, which can be output via wildcards. This is also used in the mails sent by panel visitors or panelists to the panel operator via the contact form.

Sunday or monday can be selected. From EFS 8.2, you can choose any day of the week.

The setting affects the calculation of the upper limit of friends to be recruited per week and the display of the survey of the week for the current language version. If nothing is selected, the global setting will be used.

Time zone for date display on panel pages

Putting a Website or Language Version Online/Offline

Using the buttons Online - Set website / language version offline and Offline - Set website / language version online, you can put the various websites and language versions online or offline.

• If a website is offline, none of its language versions are accessible to visitors.

• If a language version is offline, then it is no longer accessible to visitors.

It is not possible to put the default website and its default language version offline.

Defining Access Rights on Panel Sites or Language Versions

You can limit access to the different web sites and language versions by assigning object rights to specific user teams.

To do so, choose the desired panel site or language version and select the Set rights icon. The standard rights dialog opens, in which you can assign different teams read or write rights.

The read or write rights refer to all those website or language version specific ACL rights, which were assigned to the team in general. If the team has for example general write rights on the news functions (news_admin), then it can edit the news only for those language versions for which it has write rights.

Editing Text Elements of the CMS Externally

Key text elements of the CMS can be exported for external editing or translation. Afterwards, the changed content is imported back into EFS. External editing allows to add new text elements, too, which is particularly useful when upgrading panel installations:

• it is possible to create new text elements. This is of special importance if, after upgrading a panel to a new version of EFS, additional wildcards or messages are needed.

• It is up to you to decide if you want to add new text elements during import, or if existing texts should be updated as well.

• The export file can be imported into any language version of the installation. Thus, you can use one export file to create new text elements in several language versions.

The following text elements can be edited externally:

• Wildcards for text elements

• Notifications

• Error messages

Exporting content

1. Switch to the Website menu to make an export.

2. Choose the desired language version. Open the export dialog by clicking on the Excel export icon.

3. Choose the contents which you would like to export.

4. Confirm by clicking on Export.

5. The export file is created. You can download it by clicking on the file Copy file to local PC.

Importing contents

1. Switch to the Website menu to make an import.

2. Choose the desired language version. Open the import dialog by clicking on the Upload file icon.

3. Choose the edited Excel file from the hard drive of your PC.

4. To update existing wildcards and messages, activate the “Update existing datasets” checkbox. If you want to add new text elements, while keeping the old ones as they are, make sure the checkbox is deactivated.

5. With Import the import operation will be triggered.

Editing contents externally

The exported XLS file contains the wildcards and messages of the CMS, various meta information and the empty column “new content” in which the required new texts can be entered. The following tables 15.1 and 15.2 explain the meaning of the columns in detail.

To realize your changes, please proceed as follows:

• To change existing text elements, simply enter the appropriate new text in the “new content” column.

• To create a new wildcard, add a new row and add the required data.

• To create a new notification or error message, you have to add two new rows:

  • The text type of the first row is “header”. For a message of type „error message“, you can optionally enter a header in this row.

  • The text type of the first row is “body”. It contains the message itself and is obligatory.

Table contents:

Entry in the column “section”:

Creating Websites and Language Versions

You can create new websites as well as new individual language versions. However, their configuration and page structure must be created from scratch. Alternatively, you may copy an existing website or a selected language version, adopting the respective settings and contents. This is advisable, for example, if the copied version is to differ only slightly from the original or if you need a copy for testing purposes.

Creating a New Website

1. Switch to the Website menu.

2. Click on the + Website button.

3. Enter the name of the new website.

4. Select the appropriate functional scope.

5. Confirm by clicking on Create website.

A new website which already has a default language version will be displayed. In the default version “Standard Layout // From scratch”, however, neither are configured nor do they contain pages or templates, merely a few settings are preset by default.

Creating a New Language Version

1. Switch to the Website menu.

2. Click on + Language version.

3. Specify the website you wish to assign the new language version to.

4. Enter the name of the new language version.

5. Confirm by clicking on Create.

A new language version will be created. This language version is neither configured nor does it contain pages or templates.

Copying an Existing Website

1. Switch to the Website menu.

2. Search for the website you wish to copy. In the “Actions” column, click on the Copy website icon.

3. Enter the name of the new website.

4. Specify the existing content you wish to copy. You can copy messages, wildcards, page modules, templates and includes, form configuration, news items, FAQ, quick polls, bulletin boards, mail templates and bonus items.

5. Specify the language version you wish to copy.

6. Confirm by clicking on Create.

Copying an Existing Language Version

1. Switch to the Website menu.

2. Search for the language version you wish to copy. In the “Actions” column, click on the Copy language version icon.

3. Enter the name of the new language version.

4. Specify the existing content you wish to copy. You can copy messages, wildcards, news items, mail templates, bonus items, quick polls, page modules, templates and includes, form configuration, FAQ, forums, download sections, discussions, chats and blogs. In language versions with Social Insight Connect, the settings on the tab Facebook configuration are not copied, Social Insight Connect will be deactivated in the copy.

5. Confirm by clicking on Create.

General Settings

EFS Panel offers a wide variety of configuration options, both global options that apply to the entire panel installation and options that apply to individual websites and language versions. These features are presented in detail in the following.

Global Settings for the Entire Panel

In the Website → Global configuration menu you can define parameters that apply to the entire EFS People installation.

Global settings for all websites

Session settings

Login

From EFS 9.1 onwards: Password security

With EFS 9.1, password encryption for panels was adjusted according to most recent security standards. In addition to the features described below, this includes the following mail wildcards in the standard scope:

• #password_recovery_url#: “Reset password” link.

• #u_sec_quest#: Security question.

• #u_sec_quest_answer#: Answer to the security question.

The appropriate mail template is set in the function module.

Profiles

Performance

Locale settings

Registration

Rating settings

Tagging settings

Only with Content Search activated: Search settings

Settings for Individual Panel Websites

In the Websites menu, click on the name of the desired website.

Website settings

Login

Manually adding the "Change two-factor authentication" page module

Newly created websites that are based on a current layout (Portal (Responsive v2) and Community full scope (Responsive v2)) are already set up so that two-factor authentication can be used for them. For websites that were created before version 24.1, all required templates and placeholders were added as part of the upgrade process to the new release, but the "Change two-factor authentication" page module must be added manually.

To do this, proceed as follows:

• In the website editor, click on the "My details" page and then on + Page module.

Image Added

• Under Type, select the Change two factor authentication option.

• Under Reference name for template, enter the desired reference name.

• Under Module template, select the option func-change_2fa.

• Under Position, select the desired position for the new module.

• Click on Save.

Image Added

Adapting the template

If individual customizations have been made to the template tpl_errors_and_messages.tpl of your Panel website, it is recommended to adjust the page template. This improves the display of the success messages that are displayed at the top of the page when activating, deactivating or updating two-factor authentication. To do this, proceed as follows:

• Under Website > Website Editor, click on the Templates tab.

• Select tpl_errors_and_messages.tpl.

• Change line 3 from

<ul class="error-list list-unstyled">

to

<ul id="error-list" class="error-list list-unstyled">

• Change line 17 from

<ul id="message-list">

to

<ul id="message-list" class="message-list list-unstyled">

• Click on Save.

Activate Two-Factor Authentication for Websites with an Older Layout

Two-factor authentication has been implemented for the current Responsive layout of the Panel website. If you want to use it for websites with an older layout, you must manually add both the required templates and placeholders as well as the "Change two factor authentication" page module to your website.

Adding templates

You must add the following templates to your website:

templates/main_tfa_login.tpl

templates/main_tfa_register.tpl

templates/func_change_2fa.tpl

Proceed as follows:

• To retrieve the current code for the templates, create a new website with the current layout.

• Copy the code for templates/main_tfa_login.tpl.

Image Added

• Create a new template for your website, enter templates/main_tfa_login.tpl as the name and paste the code you have just copied.

• Repeat the process for the other two templates.

Adding placeholders

In the next step, you need to add the following wildcards:

To do this, proceed as follows:

• Call up the menu Website > Standard content > Wildcards.

• Click on Create wildcard.

Image Added

• Copy the name, content and description for the first placeholder from the table above into the corresponding fields and click Save.

• Repeat the process for all other wildcards in the table.

Adding the "Change two factor authentication" page module

In the last step, you now need to add the "Change two factor authentication" page module.

To do this, proceed as follows:

• In the website editor, click on the "My details" page and then on + Page module.

Image Added

• Under Type, select the Change two factor authentication option.

• Under Reference name for template, enter the desired reference name.

• Under Module template, select the option func-change_2fa.

• Under Position, select the After change account details option.

• Click on Save.

Image Added

Individual Language Version Settings

1. Access

Starting in Website editor, click on Website settings, then go to the tab General settings.

Output

Profiles

Surveys

Bonus points

Registration

Contact form

Locale settings

3. Debugging

Starting in Website editor, click on Website settings, then go to the tab Debugging.

4. Facebook configuration

In panels with Social Insight Connect, the Facebook tab contains the settings for the app of the language version. For details, please see the „Social Insight Connect“ manual.

Domain Mapping

Most panel websites can be accessed via several domains. In the case of a panel with several language versions, the .com domain usually refers both to the website and the language version, whereas .de refers to the German and .fr to the French language version. EFS Panel’s GUI helps you map the domain(s) to the panel site(s).

1. Clarifying domain and server configuration

There are some basic prerequisites that must first be met:

• You must be the owner of the domain, i.e. the domain must be registered in your name or in the name of someone acting on your behalf.

• The owner of the domain must ensure that the domain refers to the panel installation.

• In the configuration of the server on which the panel installation is hosted the domain must be linked to the installation.

• It is necessary to decide if access to panel websites and / or surveys should only be permitted with SSL encryption or if you want to allow both http and https access.

Our support will assist you in performing these steps.

If only one domain is to be linked to your panel installation, no further steps are required.

2. Mapping the domains if several domains are used

If you want several domains to refer to your panel, you must subsequently map the domains to the website(s)/language version(s) using the GUI.

1. To do so, switch to the Website → Global configuration → Domain mapping menu.

2. Click on Add domain.

3. Enter the first domain in the following format: www.your-domain.com.

4. Select the website or language version you wish to map to the domain.

5. Confirm by clicking on Save mapping.

Repeat these steps for all required domains.

Facebook Configuration

In panels with Social Insight Connect, the Facebook configuration menu contains settings which affect all apps on the installation. For language version-specific options, open the Edit dialog and go to the tab Settings → Facebook. For details, please see the „Social Insight Connect“ manual.

Automatic Checking of the CMS Configuration

The CMS offers a variety of functions and settings. However, users with little or no experience in setting up a panel may find it difficult to understand the relevant relationships and dependencies. These difficulties are overcome by using automated tests.

They help you identify and correct avoidable errors at an early stage.

• You can either check a complete website or a particular language version.

• Checking of a complete website always includes automatic tests of all those language versions for which you have access rights.

• Checking is performed with particular regard to frequent configuration problems that occur when setting up a new panel or a new website. Sometimes, for example, the registration page is not available as it has been activated for logged-in panelists only. Or the active panelists are unable to log in due to incorrectly configured panel statuses.

• In addition to configuration problems, security aspects are also tested, in particular the susceptibility to XSS (cross site scripting). Many users are not aware of this kind of problem and will consequently ignore them when setting up a panel.

• Messages referring to critical errors are displayed regardless of whether they pertain to the topic being tested.

Testing Websites or Language Versions

1. Choose the desired website or language version. In the “Actions” column, click on the Test website / Test language version icon.

2. Select the areas to be tested.

3. Execute the check by clicking on Perform tests.

Topics to Be Tested

The table contains further information on the various topics.

Rights for CMS Check

The CMS check is protected against unauthorized access by the “panel_cms_tests” right: You need read rights in order to see the icons, trigger a check, or view the results.