httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Octavian Rasnita" <orasn...@gmail.com>
Subject Re: [users@httpd] How to compose an URL so that login is done???
Date Mon, 08 Jan 2007 22:11:13 GMT
Yes I think you can do this using something like:

http://username:password@www.site.com/page.html

But this method is not very secure, since anyone can take a look in the html 
code of the help file, and the username/password are also shown in the 
address bar of the browser when the user opens it.

Octavian

----- Original Message ----- 
From: "Bo Berglund" <bo.berglund@telia.com>
To: <users@httpd.apache.org>
Sent: Monday, January 08, 2007 11:35 PM
Subject: [users@httpd] How to compose an URL so that login is done???


>I want to add a link on my application's help menu where the user's
> default browser will be opened on a customer page on our website.
>
> The website is hosted on a provider running Apache server and I have
> protected the customer pages using the .htpasswd file where user
> logins adn password hashes are stored.
>
> Now I would like our application to be able to launch the browser on
> this webpage with the user/password already inside the URL passed to
> the browser so that the login dialogue does not pop up and the user
> gets immediately to the webpage.
> This way the application will be "logged on" transparently to the
> user.
>
> Is it possible to do this (to compose such an URL text)???
> Maybe something like this but some other syntax:
> www.mydomain.com/protectedpage.shtml?USER=myuser?PWD=mypwd
>
> And please tell me if I am posting on the wrong NG for such a
> question, it seemed the closest I could get to, but might be wrong
> anyway...
>
>
> Bo Berglund
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message