Forum Moderators: phranque

Message Too Old, No Replies

web address + login

         

cjp1

7:27 pm on May 29, 2005 (gmt 0)



Does anyone know if it is possible to include login information in a url so that someone could just click on a link which contains username/password and not have to fill in the pop up login box?
I have seen it done, but cannot seem to get the syntax right for apache 1.3.33

jdMorgan

7:44 pm on May 29, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



cjp1,

Welcome to WebmasterWorld!

I don't think this works anymore -- This functionality was removed from recent browsers because of security problems.

The modern method is to set a cookie after successful login. Then when a visitor returns, check the cookie. If it is present, valid, and recent enough, then by-pass the login requirement. This is the technique used for "Remember me on this computer" - type options you see on Web sites. The contents of the cookie can be encoded and checksummed to prevent bad guys from inventing their own as a way to by-pass your authentication.

Jim