Username:password syntax in URLs

[ozoil]

Hi all

I'm having trouble working out why the standard usernameassword syntax does not always work. For instance, the following URL example works for some people and not others:

Xttp://1:1@

http://www.domain.com/directory/

(BTW, that first X is of course an h - I can't work out how to make it look right in my post!)

How can I make it so that any user can make it work?

Thanks

 

[Wullie]

Hi mate,

I have never seen any problem with this syntax and I use it for quite a few things.

Would it be possible for you to set up a test area for us to try this?

BTW. Use [ code ]MY CODE HERE [ /code ] (Without the spaces in the tags) to display any code correctly on this forum..

Hope this helps Wullie

http://www.freshlookdesign.co.uk

http://www.searchit-now.co.uk

http://www.survivorhelp.co.uk

 

[ozoil]

Hi wullie

[URL unfurl="true"]http://user:pass@www.guaranteed-proofreading-services.com/passtest/[/URL]

I'm sure that's the same syntax I used before. One person who couldn't crack it was a Mac user. Would that make a diff?

Philip

 

[Wullie]

Hi mate,

I can pass through htaccess no problem with that url..

I couldn't say for certain about the mac but I wouldn't think that would be an issue with this.

Maybe someone here can test it with a mac.

Hope this helps Wullie

http://www.freshlookdesign.co.uk

http://www.searchit-now.co.uk

http://www.survivorhelp.co.uk

 

[ozoil]

Thanks for that

Next step, how can I dress that link up in an html page (with OnClick, OnMouseover type stuff), so that the clicker can't see the username and password at any stage, not through saving as a favorite, or any other means? Can that be done? Now I know you can't keep dedicated people from finding anything they *really* want to find out, but how about stoping 99% of people from seeing?

If you can help there, I'll be grateful

Thanks again

 

[Wullie]

Hi mate,

Don't even think of doing this!! It is not secure at all..

There is no way that this can be hidden. Simply view > source and there is the url with the user and pass.

It can't be done this way.

If you want to authenticate a user without the prompt, then do it from a login box on the page and then pass the details to htacess.

Hope this helps Wullie

http://www.freshlookdesign.co.uk

http://www.searchit-now.co.uk

http://www.survivorhelp.co.uk

 

[ozoil]

Thanks

For the moment, humor me I believe things like Weblock will stuff up the coding of the page with the link so that all but the most determined will be thwarted. It's after it passes out of that page and they are at the destination, that I don't want them to se how they got there, if ya get my drift!

Thanks again