Quick Links And Security

Post date: Jan 31, 2013 9:6:38 PM

The SMCP 'Quick Link' is designed to be saved as a bookmark in a browser or mobile device so that you can skip over the username/password entry and go right to the program.  So it needs to be just as protected as your password, because it gives anyone access to your program login.  This is similar to the 'Remember this password' feature in your web browser.

We recommend that you don't store your quick links anywhere that you wouldn't store your password.  No quick link should be recorded anywhere that isn't completely secure.  Any time you think an authorized person may have your password or your quick links, the safest thing to do it change your password immediately.  That instantly disables the old password and any quick links.

Just remember: a quick link is basically the same thing as a password, because it INCLUDES your password.  If you click on a quick link, then store that resulting web page somewhere, it carries your password in the address.  So if someone gets access to it, they could log in to the SMCP as you - until you change your password.

This is ONLY true with Quick Links: any other links throughout the program have to be validated with a unique, temporary, one-time 'session tag', so if someone tries to re-use one of these links, it will fail.  Also, because none of the web pages that appear in the program are 'static' web pages, but, instead, are created by the server on the fly, the pages can't be 'searched' through Google or any other search engine.