Configuring and Managing Websites and Language Versions

section

Indicates which type of content it is.

identifier

Number or name of each text element.

text type

In this column, you define if the respective row contains header or body of a message.

language

Language version’s abbreviation.

content

The previous content of each text element. Do not change!

new content

Text changes or new texts are entered into this column.

status

Indicates the status of the editing process.

placeholders

Wildcards for text elements.

errors

Error messages.

messages

Notifications.

Global redirection URL for all websites

Occasionally, clients may want to use the panelists administration of EFS People and conduct their surveys with EFS People while using an external website as their panel’s address.

In this case, the global redirection allows you to redirect all traffic from websites of the specific panel installation to your desired alternative domain.

• The panel websites will be de facto inaccessible.

• Panel surveys and master data survey, however, will remain accessible.

Select whether a header with X-Frame-Options should be sent to the client

Today, almost any browser makes it possible for web applications to sent a HTTP header „X-Frame-Options“ which declares to the browser if a certain website is allowed to be shown in a frame or not.

Possible value options are:

• „Do not send“: By mentioned default value the header is not sent, which effectively leads to a permission of framing.

• „Deny“: The header is sent and will prevent any framing.

• „Sameorigin“: The header is sent and will allow framing only by website of the same domain.

Name of the session cookie

The cookie is set by the panel.

panel-session

Length of panel session validity (in seconds)

In this field, you can set the session period for panel visits.

3600

Cookie type to be used when the panel website is visited

You have the option not to place cookies when your website is visited.

The following options are available:

• Use normal cookies: These are the conventionally used cookies. They can be read by HTTP or Javascript.

• Use HTTP-only cookies: These cookies were also available in earlier versions of EFS. They can be read by HTTP but not by Javascript. Therefore this setting provides a higher degree of security. Browserbased scripts cannot access the cookie data.

• Do not use cookies: When using this option, authentication is done via the SES parameter in the URL or via HTTP POST data.

The “HTTP-only cookies” option is preset on new installations.

Please note: The described settings only apply to the panel website.

• The cookie settings for EFS surveys are set in the respective project.

• The cookie settings for the EFS installation itself are configured by  our support. On new installations, HTTP-only cookies are used per default.

Use HTTP-only cookies

Mode to determine the language version

When a visitor navigates to the panel website, EFS will automatically try to determine and to open the most appropriate language version. It is up to you to decide which procedure is to be employed:

• Domain name is used only if language version was not previously determined: This is the default setting reflecting conventional behavior where the system first tries to evaluate information from previous visits (session, cookies) and request parameters. The domain name that is called up serves as a fallback.

• Always use domain name: When this option is selected, the system will first check whether the domain name being used is assigned to a particular language version of the CMS. If so, this language version will be used. Otherwise, the older algorithm will be used as a fallback.

Example:
A website visitor has visited the French version (www.example.fr) of the website. Now he enters the domain name of the English version (www.example.co.uk).

• When set to default, EFS will analyze his session or cookie settings to find out that he already visited the French version
  before, and consequently display the French version.

• If the second option has been selected, the explicitly requested English version will be displayed.

Domain name is only used if language version was not previously detected

Session parameter handling

If the session parameter is not automatically appended to URLs, the panel will only work with cookies enabled.

Append session parameter automatically to URLs

Panel login is possible for panelists with the following panel statuses

With this option you can define the statuses under which the panelists are allowed to log in.

For example, you may allow a temporarily admitted candidate to already log in.

If all panel statuses are deselected, the internal website areas become inaccessible while surveys remain accessible irrespective of the website.

Please note: The panel statuses are not website-specific, but all panelists are described by the same panel statuses. Therefore, the selected setting will apply to all websites of the panel installation.

It is possible for all panelists to log in with the exception of those with a “deleted” status and those with user-defined statuses.

Participation in panel surveys is possible for panelists with the following panel statuses

With this option you can define the status under which the panelists are allowed to participate in panel surveys (given that they belong to an appropriate sample, of course).

Participation in master data surveys is possible for panelists with the following panel statuses

With this option you can define the status under which the panelists are allowed to participate in master data surveys (given that they belong to an appropriate sample, of course).

Direct panelists to the website/language version they´ve been assigned to after login

This setting ensures that when logging in, panelists will be directed to the website/language version they are assigned to.

Please mind: This option influences the behavior of the system during the login process, it does not control access to language versions in general. If you want to control access to specific pages, please go to the Page configuration tab and restrict access to appropriate panelist groups.

No

Activate brute force login protection

This option activates the brute force protection for the panelists’ personal area. Brute force protection is activated, once the panelist has reached the defined number of failed login attempts. The panelist account is then deactivated for the set amount of time, and an error message is displayed to the panelist upon each new login attempt during that time. New login attempts during the deactivation phase will not extend the duration of deactivation, and they will not be counted as additional failed login attempts.

Brute force account deactivation time (in seconds)

In this field, you specify for how long the panelist accounts are to be suspended upon triggering the brute force protection.

Please note:

• The messages "brute_force" and "brute_forced", used in case of a suspension, can be edited in the Website → Standard content → Messages menu.

• Manual reactivation ahead of time is not possible.

Number of allowed failed login attempts

In this field, you specify how many failed attempts are allowed. If the specified number is exceeded, the respective panelist account will be suspended.

Activate change log

In the period specified (see below), the password can be changed only once.

Password change timeout

see above

Prevent re-use

In the period specified (see below), a password cannot be used again.

Re-use interval

see above

Validity period for the “Reset password” link

After the period specified, the “Reset password” link will not be valid anymore.

Activate security question

Optionally, a security question can be used.

• If you want to use this feature, please add appropriate entry fields and check expressions to the forms Registration form and Change account data.

• Dedicated participant variables “u_sec_quest” and “u_sec_quest_answer” (newly introduced with EFS 9.1) allow to store security question and answer.

• More information and a detailed description can be found here.

Activate brute force protection

This option activates brute force protection dedicated to the answering of the security question. If the security question is entered wrong too many times, this feature will temporarily disable the panelist account. Find more information on this topic above under "Activate brute force login protection".

Brute force account deactivation time (in seconds)

In this field, you specify for how long the panelist accounts are to be suspended upon triggering the brute force protection via the security question.

Please note:

• The messages "brute_force" and "brute_forced", used in case of a suspension, can be edited in the Website → Standard content → Messages menu.

• Manual reactivation ahead of time is not possible.

Number of allowed failed login attempts

In this field, you specify how many failed attempts are allowed for answering the security question. If the specified number is exceeded, the respective panelist account will be suspended.

Master data group 1 to 5

Optionally, the visibility of master data may be made configurable.

In order to keep the profile settings form clearly structured despite large numbers of master data variables, these variables are grouped. The panelists can then define the visibility for each group.

In this section you can assemble the groups. Use the Ctrl or Shift keys to select multiple variables for each group.

Time period that should be taken into account when calculating “panelists online” (in seconds)

600

Only logged-in panelists should be taken into account for calculating “panelists online”

No

First day of week

Sunday or monday can be selected. From EFS 8.2, you can choose any day of the week.

The setting affects the calculation of the upper limit of friends to be recruited per week and the display of the survey of the week, as long as you do not select another day for a specific language version.

Monday

Time zone for data display on panel pages

Europe/Paris

Rating scale

Various scales are available for community rating functions.

Panelists are allowed to change their ratings

In this field, you can specify whether the panelists are allowed to subsequently change their ratings.

Maximum number of tags per post per panelist

See Chapter "Tagging and Categorization of Community Content".

Maximum number of user tags per panelist per language version

see above

Maximum number of tags per minute

see above

Minimum length of tags

see above

Auto-tag hashtags in posts

see above

Modules available in search

In the drop-down list, you can select the content types which should be covered by search.

Available content types: blogs, discussions, downloads, forums and news.

Modules available in search

Maximum number of results to be displayed in the “All results” list per content type.

Maximum number of search results in summary

Maximum number of results to be displayed in the summary per content type.

Name of website

Name of the website

Default

Description

Description for internal purposes only

Default language version

In this field, you can specify the default language version.

• The default version is displayed if visitors cannot yet be assigned to a language version (i.e. they have not yet expressly chosen a language, there are no cookies containing information on previous visits, a language version has not been assigned to the domain accessed and the site_id cannot be accessed before login to a possible panelist account).

• The default version cannot be deleted.

english

Only for installations with several websites and/or language versions: Choose this website as the default installation website?

In this field, you can specify the default website.

• The default version is selected where there is no information regarding the website and language version to be assigned to a user.

yes

Authentication method for panel login (this setting applies to all panel sites)

You can choose between the options:

• Login with e-mail address and password

• Login with account and password

• Login with e-mail address and password or account and password

Login with e-mail address and password

Maximal permissible load on login

This setting temporarily disables login to the website, if the server load exceeds the specified value.

Please enter “0”, if you do not wish to disable login during high load phases.

0

Update panelist’s IP address on every login

If you activate this option, panelists’ current IP address will be entered in their data record every time they log in. If you do not activate this option, the panelists’ IP address will only be collected upon registration.

No

App-based Two-Factor Authentication

In addition to their password, panelists must enter an app-generated code when logging in with two-factor authentication. The setting options for app-based two-factor authentication are Disabled (default setting), Enabled and Enforced.

Disabled: Two-factor authentication for the panel website is disabled.

Enabled: The panelist has the option of activating two-factor authentication under "My Details". The setup is initiated by clicking on the Show QR Code button. 

The displayed QR code must then be scanned using a mobile phone and the code displayed must be entered in the corresponding field. After clicking Send, the successful activation of the two-factor authentication is confirmed. If the panelist now attempts to log in to their account, they will be asked to enter the generated code from the app apart from their login credentials. They can only log in once they enter this code. After successful activation, two-factor authentication can be deactivated again in the same area under “My details”.

Enforced: If you select the option Enforced, panelists will be prompted to scan the QR code and enter the code from the app immediately after entering their login credentials. So they will no longer be able to access the account without setting up two-factor authentication. When setting two-factor authentication to Enforced, it can also no longer be deactivated by the panelist once it has been set up. However, panelists have the option of scanning a new code under “My Details”, if desired.

The behavior in case of incorrect code entry is similar to the behavior of incorrect password entry. The settings (such as the number of permitted failed attempts, brute force account lockout time, etc.) that you configure for your website under Global configuration > Login or Global configuration > Password security therefore also apply to two-factor authentication. Also, Panelists can reset their password using the "Forgot password" workflow if they have lost it or can no longer remember it. After setting a new password, the 2FA data is removed and the panelist can (or must, if Enforced is set) register a new 2FA code.

two_factor_authentication_login_code

Enter the six-digit code from the application

Explanation for two factor authentication login code

two_factor_authentication_login_failed

Authentication failed. Please try again.

Two factor authentication login failed message

two_factor_authentication_register_code

After scanning the QR code with the app, please enter the six-digit code shown in the app

Explanation for two factor authentication registration code

two_factor_authentication_register_description

Scan the QR code below with your authentication app on your phone. <a href="%s" target="_blank">List of compatible apps.</a><br>%s<br>
Alternatively, enter the code in your authentication app: %s

Description text shown at two factor authentication registration

Current ID

ID of the language version.

Language name

Name of the language version

english

Output mode

• HTML

• XHTML-MP

• WML

HTML

Target page logged out section

Page you are usually automatically taken to when you click on the panel URL.

Pages → Home

Target page logged in section

Page logged-in panelists are usually automatically taken to when they log in.

Pages → My home

Target page first login

Page panelists are taken to when they log in for the first time after registration.

Pages → My home

Language selection page

Page on which visitors can choose a language version.

This page is used,

• if visitors cannot yet be assigned to a language version (i.e. they have not yet expressly chosen a language, there are no cookies containing information on previous visits and the site_id cannot be accessed before login to a possible panelist account) .

• if, at the same time, no other details are available as to which language visitors are to see. For a panel with several domains you could, for example, specify that visitors who access the domain “.de” are automatically taken to the German version, whereas visitors who access the domain “.com” are shown the language selection page.

Assigned languages

Used to determine a user’s language when no cookie is set and no other language information is available:

Many browsers transmit a language code in the value „HTTP_Accept_Language“, e.g. „en“ for English speaking users or „de_DE“ for German speaking users from Germany.

In this input field you can specify the language codes for which (in the absence of other data) the current language version shall be displayed.

Output encoding of the panel site

This field is used to set the required character set for the language version.

UTF-8

Repeat main menu items in second level navigation

Optionally, you can display the main menu items a second time in second level navigation.

No

Profile visibility for new panelists

Via this field, you can define whether personal data of new panelists should be visible for other panelists and visitors before these candidates log in and set up their profiles.

“Show profile to others” deactivated

Thumbnail size for profile pictures (in pixels)

Use this field to define the size of thumbmails for profile pictures.

60

Survey of the week (previously: Survey that shall be linked...)

This survey is displayed from the first day of the week onwards, until either the panelists have participated or the week is over.

• Wildcard {$env.weekly_survey}

To define the starting point of the weekly intervals, select the first day of the week in the global website configuration or in the settings of a specific language version

User-defined labels 1 to 3

You can highlight selected surveys additionally with specific notes or icons. This makes sense, for example, in the case of new surveys, surveys with special incentives, or regular weekly surveys.

Name of bonus points (short form)

Can be inserted and output via the {$env.credit_name}) wildcard.

PP

Name of bonus points (long form)

Can be inserted and output via the {$env.credit_name_long} wildcard.

Panel points

Label for “no bonus points available”

Will be output when a respondent has not earned any bonus points yet.

no Panel points available

Allow multiple invitation of the same member in promotions

No

Text to be entered in the bonus points history when redeeming points.

Is used to document the history of redeemed points. Use the wildcard %s to insert the name of the request bonus item.

%s

Name of panel

The name of the wildcard for a link to the panel, which is inserted into the e-mail form for “Tell-a-friend” campaigns. When the email is dispatched, the wildcard will be replaced with a clickable link.

<link to the panel>

Minimum password length checked on sign up

A minimum number of characters can be set for the password.

5

Maximum password length checked on sign up

A maximum number of characters can be set for the password.

8

Password security guidelines

You can impose restrictions on the panelists regarding their choice of passwords. The following check algorithm combinations are available:

• No restrictions: The password only has to comply with the length restrictions defined on the same tab.

• Letters and numbers: The password must contain at least one letter and one number.

• Letters and either numbers or special characters: The password must contain at least one letter and either one number or one special character.

• Case sensitivity and numbers: The password must contain at least one capital letter, one lower case letter, and one number.

• Case sensitivity and either numbers or special characters: The password must contain at least one capital letter, one lower case letter, and either one number or one special character.

Number of bonus points granted on registration

If you wish to award initial bonus points for registration, you can specify the number in this field.

Text to be entered in the bonus points history when registering

Registration

Way of entry that is set on registration

Text in feedback mails: “sender”

This and the following text elements are used in the e-mails sent to the panel operator via the contact form.

Sender

Text in feedback mails: “content”

see above

Inquiry

Text in feedback mails: “headline”

see above

Headline

Text in feedback mails: “topics”

see above

Subject

Text in feedback mails: “selection”

see above

Selection

Name of panel

{$env.panel_name}

Name of the panel, which can be output via wildcards. This is also used in the mails sent by panel visitors or panelists to the panel operator via the contact form.

Your Panel

First day of week

Sunday or monday can be selected. From EFS 8.2, you can choose any day of the week.

The setting affects the calculation of the upper limit of friends to be recruited per week and the display of the survey of the week for the current language version. If nothing is selected, the global setting will be used.

Date format

{$env.locale.date_format}

d.m.Y

Date format

{$env.locale.date_format2}

d-m-Y

Time format

{$env.locale.time_format}

h:i a (T)

Time format

{$env.locale.time_format2}

H:i:s

Time zone for date display on panel pages

Europe / Paris

Show debug information on the website

Various debug information, such as language version and character set, are output.

IP address range

Optionally, you can restrict display of the debug information to a specific address range.

Please note: the determination of hostnames and IP addresses is possible only to a certain extent.

HTTP authentication (user name)

You can restrict access to the language version to specific persons, for example during the setup phase.

To do so, enter a user name in this field and a password in the following field. Pass these data on to the desired persons. When the domain is accessed, users are prompted for their password; visitors who do not have the login data are denied access.

HTTP authentication (password)

see above

Susceptibility to cross site scripting

Searches for, e. g., the following potential problems:

• Are all templates, wildcards and messages to be filled with user input HTML escaped?

Page configuration

Searches for, e. g., the following potential problems:

• Have all pages been assigned a template?

• Does every page have an HTML title?

Configuration of page / content modules

Searches for, e. g., the following potential problems:

• Have the page modules been assigned an appropriate template?

• Have mail templates been selected where this is required for a module to function?

• Is a bonus or news list being generated although there are neither bonuses nor news?

• Are any nonexistent messages being used?

• Is there a registration page that is only available for logged-in (i.e. already registered) panelists?

Global settings

Searches for, e. g., the following potential problems:

• Is the website offline?

• Does the website have at least one language version that is online?

• Have important target pages been defined?

• Is there at least one panel status that allows logging in?

Wildcards

Searches for, e. g., the following potential problems:

• Are any undefined wildcards being used?

Bonuses

Rights

Searches for, e. g., the following potential problems:

• Are there any contents or functions for which none of the existing teams has access rights?