RE: Passing PWs via URL bar

2000-11-07 Thread Ryan
At 13:03 11/7/00 -, you wrote: >This is true, I forgot about those 'useful' aspects of modern browsers. >On that note, I believe there are programatic methods to remove URLs from >the browser's history using javascript. >Steve. I don't think you can do this for security reasons. They don't le

RE: Passing PWs via URL bar

2000-11-07 Thread Steve Martin
Sent: Tuesday, November 07, 2000 12:53 > To: CF-Talk > Subject: RE: Passing PWs via URL bar > > > Okay. I use IE. It has something called "inline autocomplete" for web > addresses. > > Lets say someone else uses my machine. They could type in > "http://

RE: Passing PWs via URL bar

2000-11-07 Thread Paul Johnston
uld do. Paul > -Original Message- > From: Steve Martin [mailto:[EMAIL PROTECTED]] > Sent: 07 November 2000 12:34 > To: CF-Talk > Subject: RE: Passing PWs via URL bar > > > "Passing it through the HTTP header as a form variable would be > more secure > at

RE: Passing PWs via URL bar

2000-11-07 Thread Steve Martin
"Passing it through the HTTP header as a form variable would be more secure at the very least." I wouldn't say so. If the value is passed either via URL or by form field the data is still plaintext and can be intercepted either way. > > Jake, > > I would suggest using javascript to encrypt the p

RE: Passing PWs via URL bar

2000-11-07 Thread Paul Johnston
Jake, I would suggest using javascript to encrypt the pw string if you HAVE to pass it through the URL string (I am assuming here that it has been inputted in a text field and it can't be passed any other way). If you are only going to store the variable and don't need to know what the string is

RE: Passing PWs via URL bar

2000-11-06 Thread Dylan Bromby
Can you post your code? I had some trouble, but I use URLEncodedFormat() and Encrypt()/Decrypt() and they work fine. --Dylan -Original Message- From: Jake Hileman - Patmos [mailto:[EMAIL PROTECTED]] Sent: Monday, November 06, 2000 8:06 AM To: CF-Talk Subject: Passing PWs via URL bar An