Hi there.

I'm trying to change user authentication for CCTW just a little bit,
and I'm having a problem with doing that properly.

- The thing is that currently you can see user/pass in the web server
access logs.. that's not a good thing.

Current code is like this:
var uriTemplate = '%0/handle/loginFile.php?cctuser=%1&cctpass=
%2&'+uriParams;
var uri =
uriTemplate.format([context.host,context.username,context.password]);
var req = httpReq('GET',uri,ccTiddlyAdaptor.loginCallback,context);

I tried changing the last line to 'POST' so that the data will be
processed in the header, but I'm still seeing the user/pass in the
logs..

I'm having real problem understanding how to hide the user/pass from
the logs.. does anyone have any insight into what I could try, or what
I could read?  not understanding this at all...

Any replies appreciated.
K.

-- 
You received this message because you are subscribed to the Google Groups 
"TiddlyWikiDev" group.
To post to this group, send email to tiddlywikidev@googlegroups.com.
To unsubscribe from this group, send email to 
tiddlywikidev+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/tiddlywikidev?hl=en.

Reply via email to