Login

I'm getting a message "We need to confirm your log-in - Log in now" whenever I log into one of my games. Is that a bug or just strange coding?

It looks like an extremely low security level. Having the correct link enables people to log into games without being authorized. I wonder what else can be done without authorization. Having such a sloppy software Roll20 should probably check their financial systems.

Hi Linda,

This has not been my experience. An invite link, if entered into an address bar, will automatically enter a person into a game. That is its purpose and the reason we all stress to other users never to post them in open forum. But the actual game address leads to a "Forbidden" page if you are not a member of it.

You can get the log in message if code has been updated recently, or in cases where security measures have been upped. 

If you want to PM me a link to a game (not an invite link), I'll try to get into it, on the chance that something odd is going on.

Linda said:

I'm getting a message "We need to confirm your log-in - Log in now" whenever I log into one of my games. Is that a bug or just strange coding?

I've also been getting that, mainly when I have two games in Roll20 open on the same browser. I expect it is a DDOS related protection.

I had 2 games open on the same Private Browsing (Firefox) window a few days ago with no problems, but I was doing it only briefly and may have missed the chance to replicate. 

Linda, please try with a Private Browsing or Incognito window and login afresh. I do this as routine these days, using my regular Chrome window just for the forums and not for the VTT. 

I believe it's what Gauss said. Roll20 started using the extra security step when there was an uptick in DDOS (denial of service) attacks on the site, within the past 1 year. It is an increased level of security on top of what the site normally has had in place. In my experience it doesn't take any longer than an extra 10 seconds, to get logged in, and then it doesn't come up again until you Log Out and come to log-in again, so in most cases it shouldn't come up more than once per game-session.

Gauss said:

I've also been getting that, mainly when I have two games in Roll20 open on the same browser. I expect it is a DDOS related protection.

Yes, that may be the reason. I almost always have two to five games open that need some preparation. What I don't understand then is why am I not simply redirected to the login page but enter the games and get that nagging.

My guess is because multiple windows open to multiple games is atypical behavior that could be DDOS behavior. Most users do not have 2+ games open at the same time.