On Fri, May 24, 2002 at 11:42:41AM -0700, Jeff Rosenberg wrote: > should really be a POST, not a GET > > As a GET, this ensures that your webadmin password gets included in the default HTTP >logs of your webserver, via query string, every time you log in.
Webadmin isn't going to be used by the general populace. Webadmin is sysadmin's tools. If the sysadmin's workstation is compromised, there's going to be bigger problems to worry about. But, there's no problem with making it a POST... -- Sam _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
