Configuring and Managing Websites and Language Versions

Length of panel session validity (in seconds)

In this field, you can set the session period for panel visits.

Cookie type to be used when the panel website is visited

You have the option not to place cookies when your website is visited.

The following options are available:

• Use normal cookies: These are the conventionally used cookies. They can be read by HTTP or Javascript.
• Use HTTP-only cookies: These cookies were also available in earlier versions of EFS. They can be read by HTTP but not by Javascript. Therefore this setting provides a higher degree of security. Browserbased scripts cannot access the cookie data.
• Do not use cookies: When using this option, authentication is done via the SES parameter in the URL or via HTTP POST data.

The “HTTP-only cookies” option is preset on new installations.

Please note: The described settings only apply to the panel website.

• The cookie settings for EFS surveys are set in the respective project.
• The cookie settings for the EFS installation itself are configured by  our support. On new installations, HTTP-only cookies are used per default.

Mode to determine the language version

When a visitor navigates to the panel website, EFS will automatically try to determine and to open the most appropriate language version. It is up to you to decide which procedure is to be employed:

• Domain name is used only if language version was not previously determined: This is the default setting reflecting conventional behavior where the system first tries to evaluate information from previous visits (session, cookies) and request parameters. The domain name that is called up serves as a fallback.
• Always use domain name: When this option is selected, the system will first check whether the domain name being used is assigned to a particular language version of the CMS. If so, this language version will be used. Otherwise, the older algorithm will be used as a fallback.

Example:
A website visitor has visited the French version (www.example.fr) of the website. Now he enters the domain name of the English version (www.example.co.uk).

• When set to default, EFS will analyze his session or cookie settings to find out that he already visited the French version
  before, and consequently display the French version.
• If the second option has been selected, the explicitly requested English version will be displayed.

Domain name is only used if language version was not previously detected

If the session parameter is not automatically appended to URLs, the panel will only work with cookies enabled.

Append session parameter automatically to URLs

Panel login is possible for panelists with the following panel statuses

With this option you can define the statuses under which the panelists are allowed to log in.

For example, you may allow a temporarily admitted candidate to already log in.

If all panel statuses are deselected, the internal website areas become inaccessible while surveys remain accessible irrespective of the website.

Please note: The panel statuses are not website-specific, but all panelists are described by the same panel statuses. Therefore, the selected setting will apply to all websites of the panel installation.

It is possible for all panelists to log in with the exception of those with a “deleted” status and those with user-defined statuses.

Participation in panel surveys is possible for panelists with the following panel statuses

With this option you can define the status under which the panelists are allowed to participate in panel surveys (given that they belong to an appropriate sample, of course).

Participation in master data surveys is possible for panelists with the following panel statuses

With this option you can define the status under which the panelists are allowed to participate in master data surveys (given that they belong to an appropriate sample, of course).

Direct panelists to the website/language version they´ve been assigned to after login

This setting ensures that when logging in, panelists will be directed to the website/language version they are assigned to.

Please mind: This option influences the behavior of the system during the login process, it does not control access to language versions in general. If you want to control access to specific pages, please go to the Page configuration tab and restrict access to appropriate panelist groups.

Activate brute force login protection

This option activates the brute force protection for the panelists’ personal area. Brute force protection is activated, once the panelist has reached the defined number of failed login attempts. The panelist account is then deactivated for the set amount of time, and an error message is displayed to the panelist upon each new login attempt during that time. New login attempts during the deactivation phase will not extend the duration of deactivation, and they will not be counted as additional failed login attempts.

Brute force account deactivation time (in seconds)

In this field, you specify for how long the panelist accounts are to be suspended upon triggering the brute force protection.

Please note:

• The messages "brute_force" and "brute_forced", used in case of a suspension, can be edited in the Website → Standard content → Messages menu.
• Manual reactivation ahead of time is not possible.

Number of allowed failed login attempts

In this field, you specify how many failed attempts are allowed. If the specified number is exceeded, the respective panelist account will be suspended.

In the period specified (see below), the password can be changed only once.

Password change timeout

Validity period for the “Reset password” link

Optionally, a security question can be used.

• If you want to use this feature, please add appropriate entry fields and check expressions to the forms Registration form and Change account data.
• Dedicated participant variables “u_sec_quest” and “u_sec_quest_answer” (newly introduced with EFS 9.1) allow to store security question and answer.
• More information and a detailed description can be found here.

This option activates brute force protection dedicated to the answering of the security question. If the security question is entered wrong too many times, this feature will temporarily disable the panelist account. Find more information on this topic above under "Activate brute force login protection".

Brute force account deactivation time (in seconds)

In this field, you specify for how long the panelist accounts are to be suspended upon triggering the brute force protection via the security question.

Please note:

• The messages "brute_force" and "brute_forced", used in case of a suspension, can be edited in the Website → Standard content → Messages menu.
• Manual reactivation ahead of time is not possible.

Number of allowed failed login attempts

In this field, you specify how many failed attempts are allowed for answering the security question. If the specified number is exceeded, the respective panelist account will be suspended.

Optionally, the visibility of master data may be made configurable.

In order to keep the profile settings form clearly structured despite large numbers of master data variables, these variables are grouped. The panelists can then define the visibility for each group.

In this section you can assemble the groups. Use the Ctrl or Shift keys to select multiple variables for each group.

Time period that should be taken into account when calculating “panelists online” (in seconds)

Only logged-in panelists should be taken into account for calculating “panelists online”

Sunday or monday can be selected. From EFS 8.2, you can choose any day of the week.

The setting affects the calculation of the upper limit of friends to be recruited per week and the display of the survey of the week, as long as you do not select another day for a specific language version.

Time zone for data display on panel pages

URL parameters taken into account when checking for invite keys (comma separated)

In this field, you can specify the default language version.

• The default version is displayed if visitors cannot yet be assigned to a language version (i.e. they have not yet expressly chosen a language, there are no cookies containing information on previous visits, a language version has not been assigned to the domain accessed and the site_id cannot be accessed before login to a possible panelist account).
• The default version cannot be deleted.

Only for installations with several websites and/or language versions: Choose this website as the default installation website?

In this field, you can specify the default website.

• The default version is selected where there is no information regarding the website and language version to be assigned to a user.

Authentication method for panel login (this setting applies to all panel sites)

You can choose between the options:

• Login with e-mail address and password
• Login with account and password
• Login with e-mail address and password or account and password

Login with e-mail address and password

Maximal permissible load on login

This setting temporarily disables login to the website, if the server load exceeds the specified value.

Please enter “0”, if you do not wish to disable login during high load phases.

Update panelist’s IP address on every login

If you activate this option, panelists’ current IP address will be entered in their data record every time they log in. If you do not activate this option, the panelists’ IP address will only be collected upon registration.

App-based Two-Factor Authentication

Disabled: Two-factor authentication for the panel website is disabled.

Enabled: The panelist has the option of activating two-factor authentication under "My Details". The setup is initiated by clicking on the Show QR Code button. 

The displayed QR code must then be scanned using a mobile phone and the code displayed must be entered in the corresponding field. After clicking Send, the successful activation of the two-factor authentication is confirmed. If the panelist now attempts to log in to their account, they will be asked to enter the generated code from the app apart from their login credentials. They can only log in once they enter this code. After successful activation, two-factor authentication can be deactivated again in the same area under “My details”.

Enforced: If you select the option Enforced, panelists will be prompted to scan the QR code and enter the code from the app immediately after entering their login credentials. So they will no longer be able to access the account without setting up two-factor authentication. When setting two-factor authentication to Enforced, it can also no longer be deactivated by the panelist once it has been set up. However, panelists have the option of scanning a new code under “My Details”, if desired.

• HTML
• XHTML-MP
• WML

Target page logged out section

Page you are usually automatically taken to when you click on the panel URL.

Target page logged in section

Page logged-in panelists are usually automatically taken to when they log in.

Page panelists are taken to when they log in for the first time after registration.

Page on which visitors can choose a language version.

This page is used,

• if visitors cannot yet be assigned to a language version (i.e. they have not yet expressly chosen a language, there are no cookies containing information on previous visits and the site_id cannot be accessed before login to a possible panelist account) .
• if, at the same time, no other details are available as to which language visitors are to see. For a panel with several domains you could, for example, specify that visitors who access the domain “.de” are automatically taken to the German version, whereas visitors who access the domain “.com” are shown the language selection page.

Used to determine a user’s language when no cookie is set and no other language information is available:

Many browsers transmit a language code in the value „HTTP_Accept_Language“, e.g. „en“ for English speaking users or „de_DE“ for German speaking users from Germany.

In this input field you can specify the language codes for which (in the absence of other data) the current language version shall be displayed.

Output encoding of the panel site

This field is used to set the required character set for the language version.

Repeat main menu items in second level navigation

Optionally, you can display the main menu items a second time in second level navigation.

Profile visibility for new panelists

Via this field, you can define whether personal data of new panelists should be visible for other panelists and visitors before these candidates log in and set up their profiles.

“Show profile to others” deactivated

Thumbnail size for profile pictures (in pixels)

Use this field to define the size of thumbmails for profile pictures.

Survey of the week (previously: Survey that shall be linked...)

This survey is displayed from the first day of the week onwards, until either the panelists have participated or the week is over.

• Wildcard {$env.weekly_survey}

To define the starting point of the weekly intervals, select the first day of the week in the global website configuration or in the settings of a specific language version

User-defined labels 1 to 3

You can highlight selected surveys additionally with specific notes or icons. This makes sense, for example, in the case of new surveys, surveys with special incentives, or regular weekly surveys.

Name of bonus points (short form)

Can be inserted and output via the {$env.credit_name}) wildcard.

Name of bonus points (long form)

Can be inserted and output via the {$env.credit_name_long} wildcard.

Label for “no bonus points available”

Will be output when a respondent has not earned any bonus points yet.

Allow multiple invitation of the same member in promotions

Text to be entered in the bonus points history when redeeming points.

Is used to document the history of redeemed points. Use the wildcard %s to insert the name of the request bonus item.

The name of the wildcard for a link to the panel, which is inserted into the e-mail form for “Tell-a-friend” campaigns. When the email is dispatched, the wildcard will be replaced with a clickable link.

Minimum password length checked on sign up

A minimum number of characters can be set for the password.

Maximum password length checked on sign up

A maximum number of characters can be set for the password.

You can impose restrictions on the panelists regarding their choice of passwords. The following check algorithm combinations are available:

• No restrictions: The password only has to comply with the length restrictions defined on the same tab.
• Letters and numbers: The password must contain at least one letter and one number.
• Letters and either numbers or special characters: The password must contain at least one letter and either one number or one special character.
• Case sensitivity and numbers: The password must contain at least one capital letter, one lower case letter, and one number.
• Case sensitivity and either numbers or special characters: The password must contain at least one capital letter, one lower case letter, and either one number or one special character.

Number of bonus points granted on registration

If you wish to award initial bonus points for registration, you can specify the number in this field.

Text to be entered in the bonus points history when registering

Way of entry that is set on registration

This and the following text elements are used in the e-mails sent to the panel operator via the contact form.

Text in feedback mails: “topics”

Name of the panel, which can be output via wildcards. This is also used in the mails sent by panel visitors or panelists to the panel operator via the contact form.

Sunday or monday can be selected. From EFS 8.2, you can choose any day of the week.

The setting affects the calculation of the upper limit of friends to be recruited per week and the display of the survey of the week for the current language version. If nothing is selected, the global setting will be used.

Time zone for date display on panel pages

Europe / Paris

Searches for, e. g., the following potential problems:

• Are all templates, wildcards and messages to be filled with user input HTML escaped?

Searches for, e. g., the following potential problems:

• Have all pages been assigned a template?
• Does every page have an HTML title?

Searches for, e. g., the following potential problems:

• Have the page modules been assigned an appropriate template?
• Have mail templates been selected where this is required for a module to function?
• Is a bonus or news list being generated although there are neither bonuses nor news?
• Are any nonexistent messages being used?
• Is there a registration page that is only available for logged-in (i.e. already registered) panelists?

Searches for, e. g., the following potential problems:

• Is the website offline?
• Does the website have at least one language version that is online?
• Have important target pages been defined?
• Is there at least one panel status that allows logging in?

Searches for, e. g., the following potential problems:

• Are any undefined wildcards being used?

Searches for, e. g., the following potential problems:

• Are there any contents or functions for which none of the existing teams has access rights?