Passing username and password in URL

[superfunmonkey]

Is there a way in IIS 5.0 or 6.0to enter a username and password in the website URL without being prompted for a username and password?

Example

http://www.mysite.com

When I connect to mysite.com it prompts me for a password and this is what I want it to do. I would also like to be able to add the password and username into the

http://www.mysite.com

url and not be prompted. Like you can do in FTP. I realize this is not secure.

 

[Shift838]

yes this can be done in the same way you do it in FTP within IE:

http://username:password@www.mysite.com

 

[superfunmonkey]

I tryed your example and it still does not work. What else needs to be set for this to work, I have basic authentication enabled.

//<user>:<password>@<host>:<port>/<url-path>

 

[Shift838]

Strange. My site uses it with NTLM and it works flawlessly.

I tried it given your way and it works fine..

 

[superfunmonkey]

IE always says &quot;invalid syntax error&quot;

http://test:test@www.mysite.com/go

Username = test
password = test

http://www.mysite.com/go

= URL

Can't figure out what I am doing wrong?
Tryed this on two different IIS 5.0 servers

One is locked down tight so there may be an issue there but one I just built with no security on it.

Any one have any ansers for me?

 

[Shift838]

Question. Have you installe the latest security patch for IE that was released a couple of days ago. If so that may be your problem, because it addresses the issue about the ability to put in your userid and password within the url as a security risk.

 

[superfunmonkey]

Chris77504,

Thank you very much you were right on! I tryed IE on a computer that does not have the latest update and it works great, thanks.

 

[Fizz71]

Ok...I was both happy and upset to find this thread. It seems you folks have identified my problem, but unfortunately I don't have the option of using an older/non-patched browser since this is an application for my clients.

Are there settings someplace to allow this to be turned back on? The application is VB 6.0 and uses the Microsoft Internet Controls object to access a browser inside my DLL. This means I CANNOT be prompted.

Thanks.

--Fizz

 

[Fizz71]

I found the answer to my own question..for anybody else that may read this:

http://support.microsoft.com/default.aspx?scid=kb;en-us;834489&Product=ie600

--Fizz