The initial webadmin login page <form method="get" action="https://someurl/cgi-bin/webadmin";> <p>Administrative password: <input type="password" size="20" name="loginpass"> <input type="hidden" name="do.login" value="1"> <input type="submit" value="Login" name="login"></p> </form>
should really be a POST, not a GET As a GET, this ensures that your webadmin password gets included in the default HTTP logs of your webserver, via query string, every time you log in. My $.02 -Jeff _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
